Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
File: a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft (raw, json)
Hash identifier: GznWPpkfBqM8kXx2VRvaZ7YN/VCJk2UwFQB+eZR2cys=
Subject key identifier: 3F:54:8B:A3:03:4A:48:BD:67:B9:52:53:4A:38:1E:8D:15:31:28:BC
Authority key identifier: 6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
Certificate issuer: /CN=6bf44071ba5a6778721519a1862212804e6034cc
Certificate serial: 019D371B31CA566067B6F64C3C79A2E0E9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
Manifest number: 1F
Signing time: Sun 29 Mar 2026 01:00:22 +0000
Manifest this update: Sun 29 Mar 2026 01:00:22 +0000
Manifest next update: Mon 30 Mar 2026 01:00:22 +0000
Files and hashes: 1: a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl (hash: lLQZI7XXTq+DNO30e8bYJeP7gIlDaeywz7JgvRU71tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:31:ca:56:60:67:b6:f6:4c:3c:79:a2:e0:e9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf44071ba5a6778721519a1862212804e6034cc
Validity
Not Before: Mar 29 01:00:22 2026 GMT
Not After : Mar 30 01:00:22 2026 GMT
Subject: CN=3f548ba3034a48bd67b952534a381e8d153128bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:ed:21:71:d3:10:c6:ff:96:ac:b2:52:9f:
66:0e:c3:c3:66:f4:4e:ac:69:94:fb:5e:20:4c:4b:
96:c5:5e:ae:a0:41:d6:af:64:c3:92:1b:06:e6:48:
21:13:9a:e5:b4:ad:14:d7:b7:8e:6e:62:c8:ba:9a:
d0:79:31:48:2c:31:bf:64:97:94:f1:c5:6d:c3:b2:
26:38:68:a3:3f:d9:99:26:f5:4d:99:64:ed:53:37:
bb:30:73:78:75:3e:39:25:e1:46:9c:16:cf:84:07:
ac:fb:29:87:a8:5d:75:52:c5:71:b7:23:f5:5c:35:
90:bb:17:ea:60:14:ac:4a:06:77:32:63:33:97:63:
ad:c2:cd:9d:9c:74:71:6b:3f:f7:48:fc:3f:4f:8c:
99:2e:e7:c0:94:c1:d9:55:38:c6:fd:4d:bc:e1:7d:
79:fd:0c:52:ae:17:4b:9c:67:88:c3:c6:09:8e:14:
2f:40:e0:e2:77:bb:af:a6:fc:c5:34:76:cd:cf:d9:
a5:05:2d:1d:1f:81:c1:df:d4:c7:8b:3e:f4:b8:b5:
9b:41:6b:fb:1a:fd:9c:8b:28:0c:18:74:d3:f3:e7:
f8:d0:80:37:49:42:6f:79:0d:6b:12:53:82:42:b1:
bd:4d:74:31:be:2f:b6:27:c2:6f:c0:09:c9:d9:b9:
c2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:8B:A3:03:4A:48:BD:67:B9:52:53:4A:38:1E:8D:15:31:28:BC
X509v3 Authority Key Identifier:
keyid:6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c6:55:2f:6c:de:b8:9a:fe:3e:2f:8a:e9:7c:e7:52:11:dc:
21:ab:2b:4c:fb:ee:d9:d2:85:17:db:af:87:29:25:28:6e:ac:
d8:bc:dc:05:f1:29:78:81:b3:4f:fe:9b:2a:87:20:cf:60:bb:
3f:9c:ed:98:e6:cc:bd:4d:9b:97:4e:72:fc:8c:86:53:14:41:
85:db:6b:fa:55:ea:7a:d3:1b:58:24:4c:88:68:b3:e1:8c:56:
68:f9:1f:a9:29:5d:4b:07:fa:4b:35:39:16:3e:67:68:21:2f:
f4:b7:06:fb:db:a1:82:74:ed:c1:01:71:0d:4d:97:18:a2:2f:
b6:76:ec:09:ea:33:f5:62:7f:34:e1:06:18:8a:fd:a5:f8:13:
9c:da:39:ff:20:53:ed:a0:85:99:7f:cc:0c:10:db:f8:29:9a:
c6:ca:88:34:66:6f:8b:a6:8e:ae:68:e4:37:be:dc:c4:a0:76:
0f:fb:be:9e:c3:a9:6f:c9:7a:ce:af:9c:27:4f:92:d6:e5:db:
17:fc:28:3e:a7:65:a1:7d:ee:9e:96:20:07:86:ba:a0:00:13:
36:f9:9d:42:dc:c3:05:6f:1c:92:fe:47:30:8c:7f:10:f0:6c:
7d:30:05:35:e4:72:4a:38:13:0c:5c:82:00:76:d8:cc:e6:c0:
d0:40:94:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03GzHKVmBntvZMPHmi4OnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjQ0MDcxYmE1YTY3Nzg3MjE1MTlhMTg2MjIxMjgwNGU2
MDM0Y2MwHhcNMjYwMzI5MDEwMDIyWhcNMjYwMzMwMDEwMDIyWjAzMTEwLwYDVQQD
EygzZjU0OGJhMzAzNGE0OGJkNjdiOTUyNTM0YTM4MWU4ZDE1MzEyOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizDtIXHTEMb/lqyyUp9mDsPDZvRO
rGmU+14gTEuWxV6uoEHWr2TDkhsG5kghE5rltK0U17eObmLIuprQeTFILDG/ZJeU
8cVtw7ImOGijP9mZJvVNmWTtUze7MHN4dT45JeFGnBbPhAes+ymHqF11UsVxtyP1
XDWQuxfqYBSsSgZ3MmMzl2Otws2dnHRxaz/3SPw/T4yZLufAlMHZVTjG/U284X15
/QxSrhdLnGeIw8YJjhQvQODid7uvpvzFNHbNz9mlBS0dH4HB39THiz70uLWbQWv7
Gv2ciygMGHTT8+f40IA3SUJveQ1rElOCQrG9TXQxvi+2J8JvwAnJ2bnCmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9Ui6MDSki9Z7lSU0o4Ho0VMSi8MB8GA1UdIwQY
MBaAFGv0QHG6Wmd4chUZoYYiEoBOYDTMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9SQWNicGFaM2h5RlJtaGhpSVNnRTVnTk13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lZTI2YjktNTAyOS00OGUzLWFhZTYt
NDg1MGI3MTI4MDA2LzEvYV9SQWNicGFaM2h5RlJtaGhpSVNnRTVnTk13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lZTI2YjktNTAyOS00OGUzLWFhZTYtNDg1MGI3MTI4MDA2
LzEvYV9SQWNicGFaM2h5RlJtaGhpSVNnRTVnTk13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksZVL2ze
uJr+Pi+K6XznUhHcIasrTPvu2dKFF9uvhyklKG6s2LzcBfEpeIGzT/6bKocgz2C7
P5ztmObMvU2bl05y/IyGUxRBhdtr+lXqetMbWCRMiGiz4YxWaPkfqSldSwf6SzU5
Fj5naCEv9LcG+9uhgnTtwQFxDU2XGKIvtnbsCeoz9WJ/NOEGGIr9pfgTnNo5/yBT
7aCFmX/MDBDb+CmaxsqINGZvi6aOrmjkN77cxKB2D/u+nsOpb8l6zq+cJ0+S1uXb
F/woPqdloX3unpYgB4a6oAATNvmdQtzDBW8ckv5HMIx/EPBsfTAFNeRySjgTDFyC
AHbYzObA0ECU3w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:06 2026 by rpki-client