Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
File: Unzgu6rDVu3srWci8qhvjgZJCY4.mft (raw, json)
Hash identifier: 9THUssj8fXBb9MUyCHIrwjIH06Cc0BJI4Qehl73xDdI=
Subject key identifier: 85:66:F4:48:FB:39:E8:61:BA:63:1D:96:95:35:D2:45:AF:F4:EC:D5
Authority key identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
Certificate issuer: /CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Certificate serial: 019D390A287A274B5E2500E3894963F5B20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 10:01:00 +0000
Manifest this update: Sun 29 Mar 2026 10:01:00 +0000
Manifest next update: Mon 30 Mar 2026 10:01:00 +0000
Files and hashes: 1: Unzgu6rDVu3srWci8qhvjgZJCY4.crl (hash: pLsGzQKDC16t6OUtT+Lvs09668xWZVkWxBkxp2Yj/lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:28:7a:27:4b:5e:25:00:e3:89:49:63:f5:b2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Validity
Not Before: Mar 29 10:01:00 2026 GMT
Not After : Mar 30 10:01:00 2026 GMT
Subject: CN=8566f448fb39e861ba631d969535d245aff4ecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:51:eb:c9:60:39:c8:92:59:06:86:96:d5:
6d:b7:97:6b:de:fa:91:9a:ea:da:91:a5:a4:9b:c4:
aa:e8:02:34:a7:8d:56:49:c0:df:aa:1b:7a:5d:cf:
ce:46:a3:c9:86:54:a0:d9:e9:3f:04:55:86:e7:2d:
ed:d1:2d:34:42:5a:18:0e:2b:31:0c:a5:75:d7:61:
e9:3c:ee:8f:c2:c9:4f:32:36:17:3a:14:8e:d2:fe:
cc:fa:43:f3:63:b9:fa:a5:54:ad:d0:9e:88:db:bf:
2d:1f:1d:b8:fa:2f:ee:4f:3c:e5:a0:84:40:82:68:
c5:f7:1b:63:9a:3b:8a:8a:4d:b1:72:8b:75:ff:cf:
58:9d:15:06:03:a3:c3:35:bb:0b:d2:48:e2:17:7e:
7a:57:ef:f4:0a:44:dc:16:7a:c4:86:34:56:02:5e:
a6:2f:5c:2a:69:f8:20:e0:cb:03:44:58:81:ea:50:
6c:f4:14:05:3b:8f:9b:ca:10:f9:67:41:7e:a0:98:
bb:85:29:27:54:22:be:be:89:4d:41:7d:8b:cd:ee:
ce:21:6c:15:60:a3:21:34:bc:9c:55:96:7a:3d:87:
59:86:08:84:5a:f6:bd:a0:a0:d7:80:df:87:ed:2f:
1c:32:09:20:63:5e:c9:93:04:a2:1f:0d:d4:04:dc:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:66:F4:48:FB:39:E8:61:BA:63:1D:96:95:35:D2:45:AF:F4:EC:D5
X509v3 Authority Key Identifier:
keyid:52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ff:76:58:af:f7:bc:71:ba:d7:da:c5:cc:5c:c4:63:a8:e2:
5d:bf:49:f9:61:12:63:77:c0:09:45:02:60:7f:20:24:17:e9:
87:12:3a:90:ea:38:a6:ca:05:ae:e0:8c:39:85:70:5e:62:2f:
0a:f4:e3:82:30:56:b2:c7:5d:8e:25:28:cf:95:5c:89:f0:e5:
d8:85:88:8a:d3:1e:01:cd:c7:5b:5c:c6:58:9c:4f:95:e9:70:
96:d5:f9:22:10:44:27:c0:80:91:ca:83:29:a4:98:99:54:38:
63:98:9c:d2:53:5f:8e:ae:8c:1c:d7:4b:37:57:6c:a8:f9:5c:
73:b3:61:05:c8:03:f0:e9:e4:81:c2:7c:3e:2d:bb:7b:11:fe:
d1:0e:f0:79:02:c3:fe:80:95:d8:47:80:45:9c:c3:c4:79:a8:
2e:34:ff:6b:d4:5e:03:e0:6e:53:0c:aa:d4:b3:71:f1:02:ad:
5a:c5:37:89:9c:9d:5e:04:61:40:f2:39:3c:d8:88:a2:0a:d8:
23:7d:91:d2:d3:a0:80:95:c5:9a:72:42:ad:77:62:a5:b5:4c:
3e:10:4e:4b:2e:08:e3:86:61:00:98:0c:6b:15:2b:3a:06:33:
aa:ee:0a:b9:e8:3f:62:d7:31:fc:16:b7:3b:80:67:b2:2d:a6:
27:f9:bb:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cih6J0teJQDjiUlj9bIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyN2NlMGJiYWFjMzU2ZWRlY2FkNjcyMmYyYTg2ZjhlMDY0
OTA5OGUwHhcNMjYwMzI5MTAwMTAwWhcNMjYwMzMwMTAwMTAwWjAzMTEwLwYDVQQD
Eyg4NTY2ZjQ0OGZiMzllODYxYmE2MzFkOTY5NTM1ZDI0NWFmZjRlY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp69R68lgOciSWQaGltVtt5dr3vqR
murakaWkm8Sq6AI0p41WScDfqht6Xc/ORqPJhlSg2ek/BFWG5y3t0S00QloYDisx
DKV112HpPO6PwslPMjYXOhSO0v7M+kPzY7n6pVSt0J6I278tHx24+i/uTzzloIRA
gmjF9xtjmjuKik2xcot1/89YnRUGA6PDNbsL0kjiF356V+/0CkTcFnrEhjRWAl6m
L1wqafgg4MsDRFiB6lBs9BQFO4+byhD5Z0F+oJi7hSknVCK+volNQX2Lze7OIWwV
YKMhNLycVZZ6PYdZhgiEWva9oKDXgN+H7S8cMgkgY17JkwSiHw3UBNyXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVm9Ej7OehhumMdlpU10kWv9OzVMB8GA1UdIwQY
MBaAFFJ84Luqw1bt7K1nIvKob44GSQmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85MWRhOGYtY2IwOC00OWMwLTgzMDkt
OGEyYjdmOTU2OTI0LzEvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85MWRhOGYtY2IwOC00OWMwLTgzMDktOGEyYjdmOTU2OTI0
LzEvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/92WK/3
vHG619rFzFzEY6jiXb9J+WESY3fACUUCYH8gJBfphxI6kOo4psoFruCMOYVwXmIv
CvTjgjBWssddjiUoz5VcifDl2IWIitMeAc3HW1zGWJxPlelwltX5IhBEJ8CAkcqD
KaSYmVQ4Y5ic0lNfjq6MHNdLN1dsqPlcc7NhBcgD8OnkgcJ8Pi27exH+0Q7weQLD
/oCV2EeARZzDxHmoLjT/a9ReA+BuUwyq1LNx8QKtWsU3iZydXgRhQPI5PNiIogrY
I32R0tOggJXFmnJCrXdipbVMPhBOSy4I44ZhAJgMaxUrOgYzqu4Kueg/Ytcx/Ba3
O4Bnsi2mJ/m74Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:19 2026 by rpki-client