Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: Xydg24P7MeLyL26XxHD5DMMBshezHN39PA18Eah0vQw=
Subject key identifier: 00:29:D2:77:90:40:61:E8:E3:92:F1:A2:37:F9:FF:E3:31:4B:21:BA
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 019CE7B7504EE919F608E2D34756EE3216B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 0937
Signing time: Fri 13 Mar 2026 15:01:16 +0000
Manifest this update: Fri 13 Mar 2026 15:01:16 +0000
Manifest next update: Sat 14 Mar 2026 15:01:16 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: bNzxvK5GSDMqzXQUH94j2/wyWstZliSL2CGMFTNj6y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:50:4e:e9:19:f6:08:e2:d3:47:56:ee:32:16:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: Mar 13 15:01:16 2026 GMT
Not After : Mar 14 15:01:16 2026 GMT
Subject: CN=0029d277904061e8e392f1a237f9ffe3314b21ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:b7:64:ce:99:87:57:25:d3:00:c2:e5:33:
fa:8d:c6:4e:11:2c:b4:ba:9d:c4:2b:e2:a4:bc:c3:
d7:d5:e3:ff:ba:11:57:cd:4f:32:f2:28:7e:08:c2:
5e:56:ce:4b:bc:85:aa:91:62:83:f2:40:bd:a8:94:
81:fa:8a:57:90:cc:d4:05:01:a4:43:f2:33:e3:de:
53:90:3d:61:9b:3e:3d:c3:e2:f5:f2:5b:55:eb:4f:
d3:26:b9:9f:33:ff:99:d0:f2:c1:94:40:08:04:bd:
6c:97:66:5a:f3:cf:17:cf:3d:cd:b8:58:c7:31:97:
b4:e3:e9:51:13:82:9a:92:22:e0:e8:9d:86:5c:61:
3d:a0:f7:52:76:78:07:c8:3a:64:d8:eb:ee:5f:78:
63:91:af:33:aa:3a:66:c2:6c:88:4f:4b:6b:3d:9d:
ec:b5:98:d8:0d:ee:e1:f6:f4:34:24:53:da:1f:bb:
fe:6e:85:a1:b8:fd:ae:6a:59:ab:b5:4c:c0:c7:d0:
ac:05:df:42:12:6f:b4:0a:6a:15:10:09:28:67:07:
62:eb:2c:72:5c:18:12:d1:3d:2b:ff:61:7e:91:57:
1c:33:c4:21:9d:37:5d:23:e2:c9:1f:e7:92:24:94:
ac:96:c9:19:a0:05:19:81:d5:5c:45:78:31:46:5a:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:29:D2:77:90:40:61:E8:E3:92:F1:A2:37:F9:FF:E3:31:4B:21:BA
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6a:1b:84:9b:0f:14:3c:ab:5b:80:50:21:12:39:6b:50:df:
96:7a:64:9f:75:a7:91:cf:11:ba:91:68:e5:ca:31:5f:ed:64:
0a:db:8b:65:47:17:54:8d:c1:e0:b8:0c:49:e5:d7:50:70:14:
a1:21:bd:87:80:e2:ce:cf:59:d9:9c:7e:e0:5d:4d:ca:aa:63:
13:d8:a3:75:2e:b5:73:74:bf:a4:60:ba:5c:27:18:26:0e:0e:
9b:79:20:be:d2:f2:88:52:ba:72:02:23:79:79:d1:70:41:5f:
c8:d7:e1:6a:ad:b6:aa:fa:fc:4f:bb:7b:fd:56:59:f7:2e:df:
e2:ab:33:97:ff:b6:c5:7f:5d:2a:dc:7d:54:2a:bd:aa:4e:08:
93:bf:57:4e:84:19:b7:40:c2:3b:7b:a7:0e:db:9d:21:51:7e:
1e:ed:99:2d:9e:bf:bb:0b:30:24:78:48:dc:78:32:b1:84:73:
ad:63:cf:3a:9b:e0:dd:12:c7:5a:f5:5b:a3:aa:e8:3e:c0:91:
10:76:25:ac:2d:ff:ac:58:6b:41:3c:57:59:ae:95:c1:9e:43:
71:26:d8:47:08:ed:4e:ba:a2:da:63:57:a0:5a:96:7a:33:e8:
e4:dd:9d:f0:d1:30:96:e8:79:6e:76:7a:6f:dc:55:d2:3d:b2:
c3:c3:14:ca
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZznt1BO6Rn2COLTR1buMhaxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NWNkZDUyY2M5ZmEwOGFjYjJhOWExNjY5YTEzNjFkNWE4
MWM0M2MwHhcNMjYwMzEzMTUwMTE2WhcNMjYwMzE0MTUwMTE2WjAzMTEwLwYDVQQD
EygwMDI5ZDI3NzkwNDA2MWU4ZTM5MmYxYTIzN2Y5ZmZlMzMxNGIyMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+q3ZM6Zh1cl0wDC5TP6jcZOESy0
up3EK+KkvMPX1eP/uhFXzU8y8ih+CMJeVs5LvIWqkWKD8kC9qJSB+opXkMzUBQGk
Q/Iz495TkD1hmz49w+L18ltV60/TJrmfM/+Z0PLBlEAIBL1sl2Za888Xzz3NuFjH
MZe04+lRE4KakiLg6J2GXGE9oPdSdngHyDpk2OvuX3hjka8zqjpmwmyIT0trPZ3s
tZjYDe7h9vQ0JFPaH7v+boWhuP2ualmrtUzAx9CsBd9CEm+0CmoVEAkoZwdi6yxy
XBgS0T0r/2F+kVccM8QhnTddI+LJH+eSJJSslskZoAUZgdVcRXgxRlpG1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAAp0neQQGHo45Lxojf5/+MxSyG6MB8GA1UdIwQY
MBaAFPhc3VLMn6CKyyqaFmmhNh1agcQ8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GemRVc3lmb0lyTEtwb1dhYUUySFZxQnhEdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZWI4ODcwLTQ3OWYtNGU2MS05MGVh
LWM1MmFiYzIxYTBhYi8xLzEtRnpkVXN5Zm9JckxLcG9XYWFFMkhWcUJ4RHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlhL2ViODg3MC00NzlmLTRlNjEtOTBlYS1jNTJhYmMyMWEw
YWIvMS8xLUZ6ZFVzeWZvSXJMS3BvV2FhRTJIVnFCeER3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomob
hJsPFDyrW4BQIRI5a1Dflnpkn3Wnkc8RupFo5coxX+1kCtuLZUcXVI3B4LgMSeXX
UHAUoSG9h4Dizs9Z2Zx+4F1NyqpjE9ijdS61c3S/pGC6XCcYJg4Om3kgvtLyiFK6
cgIjeXnRcEFfyNfhaq22qvr8T7t7/VZZ9y7f4qszl/+2xX9dKtx9VCq9qk4Ik79X
ToQZt0DCO3unDtudIVF+Hu2ZLZ6/uwswJHhI3HgysYRzrWPPOpvg3RLHWvVbo6ro
PsCREHYlrC3/rFhrQTxXWa6VwZ5DcSbYRwjtTrqi2mNXoFqWejPo5N2d8NEwluh5
bnZ6b9xV0j2yw8MUyg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 18:15:41 2026 by rpki-client