Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
File: sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft (raw, json)
Hash identifier: zGcUufhGkwsq7PzQ1Z39Gtp+OmGtlI0NNawkkiWgseM=
Subject key identifier: C7:0B:7E:02:14:63:55:5A:86:44:F9:25:15:50:3B:19:89:5D:B5:C5
Authority key identifier: B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
Certificate issuer: /CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Certificate serial: 019D3865BB8150A1D10FB33AAAB0779E15E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl (hash: 5UtBuieJfZzFdh3d9ysuwFOi/1+ghNCvHteUCMyIGmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bb:81:50:a1:d1:0f:b3:3a:aa:b0:77:9e:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=c70b7e021463555a8644f92515503b19895db5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:c3:ef:8a:2d:99:57:15:9c:df:9f:ec:00:
53:0d:ba:cb:84:2a:c6:7e:7d:67:a4:66:3f:8c:9d:
ef:55:8c:4f:c9:5d:27:36:7c:b7:f9:bd:27:3c:2e:
01:59:6e:69:35:2e:b8:c5:f5:86:dc:29:39:8f:0e:
42:31:10:72:b8:8d:08:bb:c0:7f:78:a3:64:14:8a:
10:25:1b:87:fc:41:22:42:62:9d:a8:d1:d0:70:10:
ce:fa:06:41:46:17:a3:14:7c:e5:2b:94:15:5f:bb:
79:73:fb:dd:21:79:36:b0:6e:29:62:d1:54:b8:d5:
66:f0:b8:eb:20:1f:47:85:3b:f5:43:51:29:fc:81:
0f:cd:0c:3e:70:90:db:9b:42:f7:a0:36:bb:e3:b6:
96:f9:c0:52:46:be:a4:30:7e:97:ef:3c:97:b2:88:
1a:89:01:96:13:1d:20:9d:58:3a:87:b4:46:f2:a6:
c8:10:77:19:0a:e5:3c:51:09:36:7e:ee:6c:4a:4b:
0b:4c:4d:e9:f0:b1:7a:3a:17:e8:0d:2e:11:fa:5e:
b8:46:00:bd:31:a1:40:10:09:d7:31:b1:9c:73:a0:
f8:04:9b:b1:85:1e:48:e7:e8:30:d1:0d:d2:c8:b7:
e8:52:1c:ad:38:8e:97:05:06:6e:97:b0:36:6d:7d:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0B:7E:02:14:63:55:5A:86:44:F9:25:15:50:3B:19:89:5D:B5:C5
X509v3 Authority Key Identifier:
keyid:B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1e:e8:8d:92:36:b6:69:55:df:4e:f7:ec:7c:d5:f5:e3:46:
06:a2:b4:99:35:c2:77:90:2a:c6:54:85:47:04:93:74:02:e1:
ee:e0:ce:3a:5e:6c:77:f4:0d:58:08:b3:d9:c1:e0:53:cc:f8:
32:03:3b:40:d3:27:b0:58:c5:76:da:0b:49:8b:ba:8a:5f:57:
e5:b8:ba:b4:d6:b0:63:e0:80:28:fe:06:25:f4:13:8c:24:01:
16:1c:eb:54:fc:56:4d:56:09:62:4e:1b:08:bd:c2:54:0c:67:
42:a0:a2:85:25:f8:67:ac:ef:77:75:6e:5b:df:bd:ce:22:57:
f0:40:9b:eb:52:84:f5:2c:48:98:61:14:9c:fe:b6:52:79:f4:
71:45:5f:e4:d8:29:ad:84:2c:39:93:6e:c4:b5:a6:c2:11:4f:
5d:e3:bd:98:12:5d:b9:40:f7:dd:5b:b6:a1:47:1a:e0:24:34:
f6:46:82:a3:3e:c3:05:eb:30:ed:57:05:df:b5:93:0a:3e:89:
3e:ab:c6:1a:f5:d4:51:58:c3:8f:f5:99:1d:2d:01:08:d2:c1:
f2:14:b0:68:8e:c3:e3:23:11:b1:b5:df:ce:e4:6e:79:65:d5:
0a:04:27:ab:57:45:2f:f6:0b:09:25:90:5b:9f:ca:0c:48:07:
66:18:0c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZbuBUKHRD7M6qrB3nhXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmI4N2QyMGNjNDIwZGY0MWUwOTBjMzNiNGM0MGVmY2Iw
ZGQ4NzgwHhcNMjYwMzI5MDcwMTI0WhcNMjYwMzMwMDcwMTI0WjAzMTEwLwYDVQQD
EyhjNzBiN2UwMjE0NjM1NTVhODY0NGY5MjUxNTUwM2IxOTg5NWRiNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshfD74otmVcVnN+f7ABTDbrLhCrG
fn1npGY/jJ3vVYxPyV0nNny3+b0nPC4BWW5pNS64xfWG3Ck5jw5CMRByuI0Iu8B/
eKNkFIoQJRuH/EEiQmKdqNHQcBDO+gZBRhejFHzlK5QVX7t5c/vdIXk2sG4pYtFU
uNVm8LjrIB9HhTv1Q1Ep/IEPzQw+cJDbm0L3oDa747aW+cBSRr6kMH6X7zyXsoga
iQGWEx0gnVg6h7RG8qbIEHcZCuU8UQk2fu5sSksLTE3p8LF6OhfoDS4R+l64RgC9
MaFAEAnXMbGcc6D4BJuxhR5I5+gw0Q3SyLfoUhytOI6XBQZul7A2bX1rPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcLfgIUY1VahkT5JRVQOxmJXbXFMB8GA1UdIwQY
MBaAFLC7h9IMxCDfQeCQwztMQO/LDdh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80ODEzZjItNGM2My00YWEwLTliMjIt
MzdiYzhlNjU2ZWIxLzEvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80ODEzZjItNGM2My00YWEwLTliMjItMzdiYzhlNjU2ZWIx
LzEvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAux7ojZI2
tmlV30737HzV9eNGBqK0mTXCd5AqxlSFRwSTdALh7uDOOl5sd/QNWAiz2cHgU8z4
MgM7QNMnsFjFdtoLSYu6il9X5bi6tNawY+CAKP4GJfQTjCQBFhzrVPxWTVYJYk4b
CL3CVAxnQqCihSX4Z6zvd3VuW9+9ziJX8ECb61KE9SxImGEUnP62Unn0cUVf5Ngp
rYQsOZNuxLWmwhFPXeO9mBJduUD33Vu2oUca4CQ09kaCoz7DBesw7VcF37WTCj6J
PqvGGvXUUVjDj/WZHS0BCNLB8hSwaI7D4yMRsbXfzuRueWXVCgQnq1dFL/YLCSWQ
W5/KDEgHZhgMcQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:27 2026 by rpki-client