Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: Ax/zGlGvX8dEJpZGkDaH0pR6ZoM5mPpqlAG3+z3am8o=
Subject key identifier: 56:24:1F:B6:65:08:3C:EE:75:D9:E4:1D:CD:A4:D5:2B:57:C1:B8:6A
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 019D38D39A1233EB2882156BB4DDDCCF8E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: ZTVWlY1C9DpAzcp8t6Rv5nKGcjSKB8BRSv+v7wTg8q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9a:12:33:eb:28:82:15:6b:b4:dd:dc:cf:8e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=56241fb665083cee75d9e41dcda4d52b57c1b86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:98:6d:79:a8:3f:91:86:5c:4d:6d:59:28:
fe:e2:d0:4b:9c:19:43:2b:3d:c4:2f:48:61:f7:48:
fc:44:e1:f2:92:f5:d8:c8:eb:bb:e7:d8:38:6d:7a:
da:4c:45:0f:31:84:6f:f4:37:5b:42:15:62:b4:d3:
1b:8b:6c:62:1e:88:52:29:e4:59:b4:fa:60:ef:e5:
0e:44:2e:4e:67:a6:1b:38:42:54:a5:77:b0:fb:99:
23:19:8d:50:8c:9e:59:20:c3:fc:3f:62:f6:9e:cb:
d8:03:50:3d:2b:6d:5a:3c:97:be:3d:51:b5:31:97:
ee:2d:5c:b1:d1:73:1b:10:21:33:c1:d1:2f:b2:09:
8a:b3:05:d6:1d:8a:63:d9:33:77:36:c0:48:d2:5e:
77:b1:d4:83:25:0c:2d:72:e7:87:23:51:0f:1a:8d:
56:e9:12:3c:d1:70:e7:9f:67:38:d6:22:7d:13:37:
fa:5e:85:7d:4c:8c:27:28:31:a7:f7:20:6b:43:59:
7d:52:2c:40:6a:c1:b9:4e:90:74:42:9b:eb:30:54:
87:5f:70:78:4d:1e:68:b9:22:8a:dd:68:88:7c:07:
85:06:9e:69:36:36:8c:f0:fd:f2:6b:f4:c7:12:1a:
1f:7b:da:50:91:c2:77:5f:72:2d:0d:51:59:19:e4:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:24:1F:B6:65:08:3C:EE:75:D9:E4:1D:CD:A4:D5:2B:57:C1:B8:6A
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:42:21:8d:23:81:c3:fc:7a:4d:f7:ba:85:43:0b:69:03:6a:
67:d9:ca:fd:22:5a:bc:ed:26:10:a0:d3:1c:e4:9c:d1:fe:09:
59:7d:9d:61:76:43:16:be:50:81:7f:99:a1:51:e5:2f:f9:79:
e0:1c:79:25:11:cb:95:cb:3f:69:c9:c4:c8:0d:02:52:b7:59:
99:dd:11:c3:68:80:b2:fa:00:48:d1:aa:3d:61:8b:7a:85:db:
01:5e:32:04:a9:81:11:11:90:16:d9:d9:27:45:a4:90:a6:0d:
62:9b:03:10:07:bf:39:27:97:24:17:cf:b1:51:f3:2d:28:8a:
b4:74:3b:e8:1f:e9:28:c5:20:8c:90:69:6c:6b:23:4a:f7:b4:
f5:b8:55:17:12:1c:67:d8:b1:77:2d:00:c1:ab:bd:c9:51:5c:
ef:7a:b2:67:24:17:3a:16:0d:f4:58:a5:b6:1c:c0:d7:a3:0b:
cb:e3:ff:e0:f3:32:54:d8:c1:6a:71:64:66:ed:8f:2e:83:71:
32:3f:d3:78:d8:f5:be:d1:2e:f9:a2:30:c1:c4:b1:9a:45:6d:
c8:fb:a5:7b:51:f1:ad:96:80:76:d2:08:b0:03:88:2c:d3:ed:
cb:8a:d6:56:8b:29:f0:28:be:00:b7:7b:ca:48:9d:a2:c1:19:
dd:bd:c1:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405oSM+soghVrtN3cz441MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NTNiMGJkM2Q2MjQxODAzMjlkMjFhM2VjZGNjYTFiMmZi
ZWRlNmQwHhcNMjYwMzI5MDkwMTI0WhcNMjYwMzMwMDkwMTI0WjAzMTEwLwYDVQQD
Eyg1NjI0MWZiNjY1MDgzY2VlNzVkOWU0MWRjZGE0ZDUyYjU3YzFiODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFeYbXmoP5GGXE1tWSj+4tBLnBlD
Kz3EL0hh90j8ROHykvXYyOu759g4bXraTEUPMYRv9DdbQhVitNMbi2xiHohSKeRZ
tPpg7+UORC5OZ6YbOEJUpXew+5kjGY1QjJ5ZIMP8P2L2nsvYA1A9K21aPJe+PVG1
MZfuLVyx0XMbECEzwdEvsgmKswXWHYpj2TN3NsBI0l53sdSDJQwtcueHI1EPGo1W
6RI80XDnn2c41iJ9Ezf6XoV9TIwnKDGn9yBrQ1l9UixAasG5TpB0QpvrMFSHX3B4
TR5ouSKK3WiIfAeFBp5pNjaM8P3ya/THEhofe9pQkcJ3X3ItDVFZGeSl5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYkH7ZlCDzuddnkHc2k1StXwbhqMB8GA1UdIwQY
MBaAFKdTsL09YkGAMp0ho+zcyhsvvt5tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMt
OWEyNjJmZjQ2MjZjLzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMtOWEyNjJmZjQ2MjZj
LzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEIhjSOB
w/x6Tfe6hUMLaQNqZ9nK/SJavO0mEKDTHOSc0f4JWX2dYXZDFr5QgX+ZoVHlL/l5
4Bx5JRHLlcs/acnEyA0CUrdZmd0Rw2iAsvoASNGqPWGLeoXbAV4yBKmBERGQFtnZ
J0WkkKYNYpsDEAe/OSeXJBfPsVHzLSiKtHQ76B/pKMUgjJBpbGsjSve09bhVFxIc
Z9ixdy0Awau9yVFc73qyZyQXOhYN9FilthzA16MLy+P/4PMyVNjBanFkZu2PLoNx
Mj/TeNj1vtEu+aIwwcSxmkVtyPule1HxrZaAdtIIsAOILNPty4rWVosp8Ci+ALd7
ykidosEZ3b3Bbg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:56 2026 by rpki-client