Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
File: wRruJS43JJTv7FA4vOZ6GtOHhtk.mft (raw, json)
Hash identifier: ofJyC+Y8w2hUuPOpyje8N5ZZcaZUQHWWR5JAFTRcJcU=
Subject key identifier: 1D:BB:BF:25:3F:90:E7:A9:0C:F5:B3:D6:D2:49:AB:B2:82:A5:21:53
Authority key identifier: C1:1A:EE:25:2E:37:24:94:EF:EC:50:38:BC:E6:7A:1A:D3:87:86:D9
Certificate issuer: /CN=c11aee252e372494efec5038bce67a1ad38786d9
Certificate serial: 019D3A54173932A80E88F0A5FABD9F522CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRruJS43JJTv7FA4vOZ6GtOHhtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
Manifest number: 2F
Signing time: Sun 29 Mar 2026 16:01:22 +0000
Manifest this update: Sun 29 Mar 2026 16:01:22 +0000
Manifest next update: Mon 30 Mar 2026 16:01:22 +0000
Files and hashes: 1: wRruJS43JJTv7FA4vOZ6GtOHhtk.crl (hash: 7Ao/1sn4uIoItoXyH837NO2t6/uS0kdJdJjocSoWqMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRruJS43JJTv7FA4vOZ6GtOHhtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:17:39:32:a8:0e:88:f0:a5:fa:bd:9f:52:2c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11aee252e372494efec5038bce67a1ad38786d9
Validity
Not Before: Mar 29 16:01:22 2026 GMT
Not After : Mar 30 16:01:22 2026 GMT
Subject: CN=1dbbbf253f90e7a90cf5b3d6d249abb282a52153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:3c:c1:62:f8:a1:74:0b:16:2e:15:99:ad:
9e:22:68:cb:3a:60:9c:88:bc:43:46:69:00:f5:24:
11:6c:4c:8d:02:bb:05:75:7e:7b:ef:19:85:e9:d4:
13:df:d1:e0:07:9b:c2:a7:94:01:26:f5:ce:e6:8c:
a6:08:86:88:a8:d4:7b:f5:4c:e4:d7:1a:21:14:06:
e4:f7:87:20:37:9a:6d:8e:79:fe:4a:de:36:bc:02:
58:1e:7b:07:9e:c3:bb:05:7d:6a:7c:1c:97:71:08:
0c:a1:99:71:42:42:74:9b:6f:a9:5a:d4:ee:7c:91:
53:86:70:ba:05:b9:dd:6d:4d:05:0a:ec:00:0c:e6:
d8:ab:7f:12:b6:94:e3:cb:16:b3:0d:a6:32:20:8c:
c0:bf:e2:d1:1d:cc:9b:c7:94:4b:20:2d:02:ba:40:
c1:58:f9:81:17:b9:69:b1:9e:9d:14:43:f8:11:b2:
6f:9f:33:a4:7b:cc:b8:9f:82:bb:8e:fb:df:2d:6c:
b0:de:c9:e8:a9:cf:a4:e1:02:54:d0:4d:1b:f4:e3:
b4:81:c0:9f:08:da:80:9b:34:67:d3:2c:b5:57:1c:
7c:eb:7c:d5:7f:c9:78:61:64:b8:0a:0e:40:67:95:
8c:e2:f4:c4:23:85:1f:55:4f:76:d2:57:1c:da:98:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:BF:25:3F:90:E7:A9:0C:F5:B3:D6:D2:49:AB:B2:82:A5:21:53
X509v3 Authority Key Identifier:
keyid:C1:1A:EE:25:2E:37:24:94:EF:EC:50:38:BC:E6:7A:1A:D3:87:86:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRruJS43JJTv7FA4vOZ6GtOHhtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7c:05:cd:4b:11:aa:5d:3d:7b:0b:36:4e:55:f5:d1:55:9f:
20:ad:fb:18:61:c1:ce:19:65:1f:85:cc:d8:95:8d:13:f3:e8:
ce:99:fb:35:6e:58:7b:fe:c0:15:4e:80:16:c1:00:dc:57:f3:
63:09:bc:58:2b:92:86:53:75:fe:70:ce:bb:c1:ff:36:55:68:
e8:57:5c:16:42:87:1e:72:0d:15:6a:9b:bd:0b:b9:87:a7:95:
8f:08:7e:95:c7:ac:03:69:99:c6:88:58:7f:2b:34:65:16:d2:
e8:0c:c1:63:f2:3f:6a:ef:41:88:4e:ff:c6:13:aa:26:1f:86:
ca:42:96:7e:c9:37:5f:a5:78:25:da:1d:1d:7a:34:5e:47:07:
2d:49:fa:a1:d0:2a:5b:86:7d:50:da:02:f2:f3:91:43:b3:4b:
db:dd:04:52:58:85:7f:ae:11:c5:e5:b4:be:08:c7:9d:04:16:
e2:54:fd:0c:7e:d7:55:55:e1:5e:63:03:a0:06:b9:4d:1a:98:
3c:51:54:9d:80:ee:9e:0c:da:19:25:3d:fa:58:be:f4:d9:32:
0d:f3:74:17:f0:8b:fb:ab:15:6d:55:41:46:da:73:11:fb:c6:
b2:3e:a6:9b:0f:60:60:e6:e2:09:f6:1e:7d:9e:f0:e0:33:cd:
f1:84:24:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VBc5MqgOiPCl+r2fUizuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMWFlZTI1MmUzNzI0OTRlZmVjNTAzOGJjZTY3YTFhZDM4
Nzg2ZDkwHhcNMjYwMzI5MTYwMTIyWhcNMjYwMzMwMTYwMTIyWjAzMTEwLwYDVQQD
EygxZGJiYmYyNTNmOTBlN2E5MGNmNWIzZDZkMjQ5YWJiMjgyYTUyMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqws8wWL4oXQLFi4Vma2eImjLOmCc
iLxDRmkA9SQRbEyNArsFdX577xmF6dQT39HgB5vCp5QBJvXO5oymCIaIqNR79Uzk
1xohFAbk94cgN5ptjnn+St42vAJYHnsHnsO7BX1qfByXcQgMoZlxQkJ0m2+pWtTu
fJFThnC6BbndbU0FCuwADObYq38StpTjyxazDaYyIIzAv+LRHcybx5RLIC0CukDB
WPmBF7lpsZ6dFEP4EbJvnzOke8y4n4K7jvvfLWyw3snoqc+k4QJU0E0b9OO0gcCf
CNqAmzRn0yy1Vxx863zVf8l4YWS4Cg5AZ5WM4vTEI4UfVU920lcc2pj2TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB27vyU/kOepDPWz1tJJq7KCpSFTMB8GA1UdIwQY
MBaAFMEa7iUuNySU7+xQOLzmehrTh4bZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JydUpTNDNKSlR2N0ZBNHZPWjZHdE9IaHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mZTQ4MzMtYmZiZC00N2Y2LWI5NzUt
YTk5MDUwOTc1ODI4LzEvd1JydUpTNDNKSlR2N0ZBNHZPWjZHdE9IaHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mZTQ4MzMtYmZiZC00N2Y2LWI5NzUtYTk5MDUwOTc1ODI4
LzEvd1JydUpTNDNKSlR2N0ZBNHZPWjZHdE9IaHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3wFzUsR
ql09ews2TlX10VWfIK37GGHBzhllH4XM2JWNE/Pozpn7NW5Ye/7AFU6AFsEA3Ffz
Ywm8WCuShlN1/nDOu8H/NlVo6FdcFkKHHnINFWqbvQu5h6eVjwh+lcesA2mZxohY
fys0ZRbS6AzBY/I/au9BiE7/xhOqJh+GykKWfsk3X6V4JdodHXo0XkcHLUn6odAq
W4Z9UNoC8vORQ7NL290EUliFf64RxeW0vgjHnQQW4lT9DH7XVVXhXmMDoAa5TRqY
PFFUnYDungzaGSU9+li+9NkyDfN0F/CL+6sVbVVBRtpzEfvGsj6mmw9gYObiCfYe
fZ7w4DPN8YQkHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:26 2026 by rpki-client