Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
File: t38R7tTnnIXMxWLfPR8oPjOdou0.mft (raw, json)
Hash identifier: Oo4N42BQXHfKlThW6IqiYRKtoOyYS5B4EyMKqTBPEcU=
Subject key identifier: 55:4D:40:02:C1:C2:74:2A:5A:9C:86:6D:F1:1D:26:A5:1D:BB:64:86
Authority key identifier: B7:7F:11:EE:D4:E7:9C:85:CC:C5:62:DF:3D:1F:28:3E:33:9D:A2:ED
Certificate issuer: /CN=b77f11eed4e79c85ccc562df3d1f283e339da2ed
Certificate serial: 019D38660622310B1AF47EAEB9D6AED05376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
Manifest number: 0F31
Signing time: Sun 29 Mar 2026 07:01:43 +0000
Manifest this update: Sun 29 Mar 2026 07:01:43 +0000
Manifest next update: Mon 30 Mar 2026 07:01:43 +0000
Files and hashes: 1: t38R7tTnnIXMxWLfPR8oPjOdou0.crl (hash: LxjaWBoU2qVCmAHZx/P3iAVJyIRZ5xUiLCAKYfXsJQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:06:22:31:0b:1a:f4:7e:ae:b9:d6:ae:d0:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77f11eed4e79c85ccc562df3d1f283e339da2ed
Validity
Not Before: Mar 29 07:01:43 2026 GMT
Not After : Mar 30 07:01:43 2026 GMT
Subject: CN=554d4002c1c2742a5a9c866df11d26a51dbb6486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:f2:c4:16:9b:c6:5c:37:7b:42:7b:21:be:
ee:51:25:fe:de:a8:e0:c4:f2:15:b0:d4:ef:9e:7e:
20:c2:a2:d5:20:17:b5:5f:c2:a0:30:08:e3:3b:4e:
9a:9a:25:08:df:c2:f6:c3:f3:db:6c:61:da:99:b4:
e9:28:b5:2a:0b:83:1d:2a:60:81:ed:be:c5:c9:e3:
2a:33:32:30:4a:08:cd:7f:95:b7:c0:c9:c2:8c:a5:
0f:78:27:97:83:8f:8a:9f:83:fb:33:18:9b:3a:62:
43:c7:2f:52:c1:53:b5:59:d0:1f:b3:9a:02:fe:f8:
c1:64:39:a1:03:cb:90:d0:be:9f:e5:b1:d4:cc:59:
93:50:ab:7c:97:6b:6c:b2:d8:78:a6:fa:50:d6:f3:
d0:f1:02:d2:13:bf:19:8e:37:15:62:f8:82:3b:cb:
c3:d8:7f:53:82:81:fc:f9:fe:72:9a:93:fd:b9:0f:
c2:a2:1b:e8:fe:ac:09:d3:26:f1:11:b0:df:db:ef:
71:ea:cd:e2:4b:b8:26:0d:91:32:d1:e4:f5:dc:f2:
8d:a8:b4:86:70:74:75:94:f9:6a:42:b1:21:fc:5c:
82:a4:87:ba:98:b2:bc:18:f8:0b:9d:5b:c9:a8:f4:
a8:84:95:c1:d3:be:92:48:25:76:c9:13:47:c8:07:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:40:02:C1:C2:74:2A:5A:9C:86:6D:F1:1D:26:A5:1D:BB:64:86
X509v3 Authority Key Identifier:
keyid:B7:7F:11:EE:D4:E7:9C:85:CC:C5:62:DF:3D:1F:28:3E:33:9D:A2:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c2:43:cd:30:6c:8a:3e:73:b8:cf:d4:f3:90:62:fa:ce:73:
47:90:96:1e:85:1e:5d:9a:f0:32:94:14:f4:d8:23:65:04:b9:
ba:51:16:04:d2:45:c8:a7:19:d6:8f:37:b4:b3:47:ab:88:c7:
18:60:5c:ee:52:3a:28:df:60:38:fc:6f:34:6f:d5:bb:ec:b4:
fb:b0:0b:0b:f2:2a:04:37:60:7b:24:65:18:b0:3f:06:8c:7c:
66:48:6e:03:6e:d9:50:c1:6a:cc:b7:90:e0:9a:55:72:01:8a:
0d:29:89:4b:24:e9:20:ba:de:f1:e4:78:3e:99:36:63:ea:c3:
56:0d:2d:d6:10:42:42:cb:44:b3:11:15:dd:8f:ac:1f:ed:19:
21:69:e5:69:2c:f0:b6:91:68:e9:a2:e3:8b:d9:27:bf:a2:82:
ad:f4:98:15:3a:07:20:bf:4f:0c:73:25:51:4e:71:2f:c8:2b:
9e:73:4a:22:7b:56:dc:77:b8:0f:15:2f:fe:37:82:a6:ec:59:
04:ae:79:ea:c2:17:1b:a1:c2:89:84:a1:bc:06:be:55:e0:4a:
eb:ca:d0:8e:b8:ca:70:f8:b5:45:61:7c:34:46:35:0b:0f:76:
2d:6b:e5:d4:f0:5f:d3:4f:86:38:23:59:80:b9:d4:c3:e6:3d:
84:8c:09:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZgYiMQsa9H6uudau0FN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3N2YxMWVlZDRlNzljODVjY2M1NjJkZjNkMWYyODNlMzM5
ZGEyZWQwHhcNMjYwMzI5MDcwMTQzWhcNMjYwMzMwMDcwMTQzWjAzMTEwLwYDVQQD
Eyg1NTRkNDAwMmMxYzI3NDJhNWE5Yzg2NmRmMTFkMjZhNTFkYmI2NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl3yxBabxlw3e0J7Ib7uUSX+3qjg
xPIVsNTvnn4gwqLVIBe1X8KgMAjjO06amiUI38L2w/PbbGHambTpKLUqC4MdKmCB
7b7FyeMqMzIwSgjNf5W3wMnCjKUPeCeXg4+Kn4P7MxibOmJDxy9SwVO1WdAfs5oC
/vjBZDmhA8uQ0L6f5bHUzFmTUKt8l2tssth4pvpQ1vPQ8QLSE78ZjjcVYviCO8vD
2H9TgoH8+f5ympP9uQ/Cohvo/qwJ0ybxEbDf2+9x6s3iS7gmDZEy0eT13PKNqLSG
cHR1lPlqQrEh/FyCpIe6mLK8GPgLnVvJqPSohJXB076SSCV2yRNHyAeHjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVNQALBwnQqWpyGbfEdJqUdu2SGMB8GA1UdIwQY
MBaAFLd/Ee7U55yFzMVi3z0fKD4znaLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDM4Ujd0VG5uSVhNeFdMZlBSOG9Qak9kb3UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85NzUwMzAtNDNiMi00MDBiLThkYzkt
MGM3NzU1OWQ5ZGIwLzEvdDM4Ujd0VG5uSVhNeFdMZlBSOG9Qak9kb3UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85NzUwMzAtNDNiMi00MDBiLThkYzktMGM3NzU1OWQ5ZGIw
LzEvdDM4Ujd0VG5uSVhNeFdMZlBSOG9Qak9kb3UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsJDzTBs
ij5zuM/U85Bi+s5zR5CWHoUeXZrwMpQU9NgjZQS5ulEWBNJFyKcZ1o83tLNHq4jH
GGBc7lI6KN9gOPxvNG/Vu+y0+7ALC/IqBDdgeyRlGLA/Box8ZkhuA27ZUMFqzLeQ
4JpVcgGKDSmJSyTpILre8eR4Ppk2Y+rDVg0t1hBCQstEsxEV3Y+sH+0ZIWnlaSzw
tpFo6aLji9knv6KCrfSYFToHIL9PDHMlUU5xL8grnnNKIntW3He4DxUv/jeCpuxZ
BK556sIXG6HCiYShvAa+VeBK68rQjrjKcPi1RWF8NEY1Cw92LWvl1PBf00+GOCNZ
gLnUw+Y9hIwJBQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:54 2026 by rpki-client