Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: X0P5Lfw1Yd/U/LRKkACaFS9CxdDaGe9ZduXCLkMjeWQ=
Subject key identifier: 82:58:33:A9:3D:02:A9:9F:54:CA:55:E2:BD:9A:0D:F6:FF:D0:F2:A8
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 019D39AF10FD10796F85AF88D189D30234FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 13:01:07 +0000
Manifest this update: Sun 29 Mar 2026 13:01:07 +0000
Manifest next update: Mon 30 Mar 2026 13:01:07 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: r1KJt2csqyk7/SrQm6R/oyrkfTMwPo991kK2uaNfxVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:10:fd:10:79:6f:85:af:88:d1:89:d3:02:34:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Mar 29 13:01:07 2026 GMT
Not After : Mar 30 13:01:07 2026 GMT
Subject: CN=825833a93d02a99f54ca55e2bd9a0df6ffd0f2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:70:b6:4b:3b:c1:5b:fb:32:27:87:8e:9f:
ae:ae:05:c6:cb:51:8c:d0:6f:76:32:ca:00:01:ad:
d9:6b:b0:8c:1d:3e:38:81:2f:5a:51:f5:a5:90:62:
d0:e3:76:6b:79:08:15:21:3c:a5:16:07:00:20:ae:
36:cb:c8:23:31:6a:56:7f:ff:04:2a:de:42:22:90:
2c:1b:a0:26:73:ba:47:cf:91:39:1a:ba:48:ac:05:
ed:e4:08:81:7c:4a:b9:4d:68:00:7e:28:a5:c3:6e:
44:d7:d6:c6:e8:70:05:06:32:d8:48:f5:af:e0:8a:
26:06:1f:7e:b6:d8:f1:1d:d3:00:a4:c9:c5:56:95:
18:d4:4b:76:ce:c0:2c:63:64:47:ca:ee:06:e8:a0:
07:09:09:35:c6:93:9c:14:bf:c2:4a:df:71:44:02:
27:83:e0:3f:72:f0:84:6d:ce:f6:76:bf:1e:4d:48:
2d:76:75:44:f0:f8:4e:d3:e3:a8:e8:03:04:1f:cc:
4f:9e:88:25:b8:1c:ab:6a:e0:41:1b:e2:dd:f0:f0:
f8:e2:5d:fe:c5:eb:8a:9d:79:5e:19:b3:20:58:31:
5f:54:69:61:d7:07:4d:41:1a:54:c5:bb:e4:2b:98:
1d:34:43:40:d9:78:b8:a2:12:07:5d:43:db:96:46:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:58:33:A9:3D:02:A9:9F:54:CA:55:E2:BD:9A:0D:F6:FF:D0:F2:A8
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:75:84:f9:0e:fe:d6:5d:9c:a7:77:e9:52:a0:fb:d3:1e:23:
2c:3f:83:b8:7f:da:e4:7a:67:4f:fa:4c:94:de:da:d3:aa:0b:
b7:38:bd:dc:8b:19:ef:ab:1e:ce:ec:ce:b5:8d:9a:c0:99:0c:
fa:b6:aa:34:ad:df:88:f5:81:43:d8:52:24:0a:e6:86:cc:19:
2b:41:38:36:63:00:f0:73:5d:cf:8a:76:ed:a3:d0:5d:f4:0a:
32:ff:8f:5f:11:0e:5d:f0:12:55:76:ac:8f:61:4b:23:95:5a:
c3:b4:45:aa:8b:a8:8a:84:93:37:c4:5d:98:45:75:68:4b:0e:
39:39:31:1a:95:ce:e1:0a:9b:62:61:43:2a:cf:66:1e:f1:c8:
b3:1e:23:63:1b:85:db:2c:6d:d0:40:6e:75:ec:ec:23:2a:b0:
26:ac:92:fe:a5:d6:bb:93:f5:87:e3:b1:34:4d:23:6d:6f:c6:
87:c0:24:e2:49:e0:32:53:6f:85:ea:de:40:22:03:83:88:51:
12:c6:e2:be:d8:fa:97:e6:30:85:15:4e:88:23:15:c7:a5:4f:
8f:9a:23:57:55:62:70:2b:9a:d0:10:e9:77:62:f3:c8:77:5d:
16:0d:17:80:d6:5c:7f:3e:b7:7a:04:0a:92:71:0a:ce:91:47:
19:28:2b:99
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ05rxD9EHlvha+I0YnTAjT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTA4NGY0NTQxMzkzNDc5MzM4NzZkNTI2MzRiNDFhMWRk
MDk5ZGIwHhcNMjYwMzI5MTMwMTA3WhcNMjYwMzMwMTMwMTA3WjAzMTEwLwYDVQQD
Eyg4MjU4MzNhOTNkMDJhOTlmNTRjYTU1ZTJiZDlhMGRmNmZmZDBmMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+hwtks7wVv7MieHjp+urgXGy1GM
0G92MsoAAa3Za7CMHT44gS9aUfWlkGLQ43ZreQgVITylFgcAIK42y8gjMWpWf/8E
Kt5CIpAsG6Amc7pHz5E5GrpIrAXt5AiBfEq5TWgAfiilw25E19bG6HAFBjLYSPWv
4IomBh9+ttjxHdMApMnFVpUY1Et2zsAsY2RHyu4G6KAHCQk1xpOcFL/CSt9xRAIn
g+A/cvCEbc72dr8eTUgtdnVE8PhO0+Oo6AMEH8xPnogluByrauBBG+Ld8PD44l3+
xeuKnXleGbMgWDFfVGlh1wdNQRpUxbvkK5gdNENA2Xi4ohIHXUPblkaIrwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIJYM6k9AqmfVMpV4r2aDfb/0PKoMB8GA1UdIwQY
MBaAFPkQhPRUE5NHkzh21SY0tBod0JnbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SQ0U5RlFUazBlVE9IYlZKalMwR2gzUW1kcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvOTRkOWViLTIyZGEtNDc1Zi1iZjNh
LTFhNmZkMmM0NDgxNi8xLzEtUkNFOUZRVGswZVRPSGJWSmpTMEdoM1FtZHMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk1Lzk0ZDllYi0yMmRhLTQ3NWYtYmYzYS0xYTZmZDJjNDQ4
MTYvMS8xLVJDRTlGUVRrMGVUT0hiVkpqUzBHaDNRbWRzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3WE
+Q7+1l2cp3fpUqD70x4jLD+DuH/a5HpnT/pMlN7a06oLtzi93IsZ76sezuzOtY2a
wJkM+raqNK3fiPWBQ9hSJArmhswZK0E4NmMA8HNdz4p27aPQXfQKMv+PXxEOXfAS
VXasj2FLI5Vaw7RFqouoioSTN8RdmEV1aEsOOTkxGpXO4QqbYmFDKs9mHvHIsx4j
YxuF2yxt0EBudezsIyqwJqyS/qXWu5P1h+OxNE0jbW/Gh8Ak4kngMlNvhereQCID
g4hREsbivtj6l+YwhRVOiCMVx6VPj5ojV1VicCua0BDpd2LzyHddFg0XgNZcfz63
egQKknEKzpFHGSgrmQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:02 2026 by rpki-client