Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier: +dzkRLvHlyL8lm/NqTZFz/1sJXQAnILOyNFVONfPf4s=
Subject key identifier: 1A:9C:3F:7B:9C:96:03:BD:CE:3D:F5:7C:FF:BA:88:0B:76:D6:2B:42
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial: 019D39416C39C3C8CD2723F59BC670547410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number: 16DC
Signing time: Sun 29 Mar 2026 11:01:21 +0000
Manifest this update: Sun 29 Mar 2026 11:01:21 +0000
Manifest next update: Mon 30 Mar 2026 11:01:21 +0000
Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: fN1ZQHtLfxGY4Gp3iaBbtbFC9TcfX12vpszomNUxK6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6c:39:c3:c8:cd:27:23:f5:9b:c6:70:54:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Validity
Not Before: Mar 29 11:01:21 2026 GMT
Not After : Mar 30 11:01:21 2026 GMT
Subject: CN=1a9c3f7b9c9603bdce3df57cffba880b76d62b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:86:7a:7d:9d:00:21:23:79:6b:d3:0c:21:
8d:73:45:9a:c6:2a:ff:e0:3f:22:88:7d:3d:a8:22:
66:c7:1e:3a:d4:ed:bb:d3:39:e7:84:e3:98:6d:ae:
91:53:0d:f9:fe:d4:c3:bc:39:72:f8:d8:d4:18:47:
d0:c3:d1:7b:9a:a4:ea:f5:cd:26:cb:1e:84:3d:49:
e0:49:d6:2f:53:82:58:55:a6:02:c5:ef:60:b8:12:
91:f1:9b:62:06:36:5a:ea:b1:d5:26:b3:5d:43:ad:
22:fb:db:17:e7:95:e6:d7:75:57:46:2b:58:6b:cc:
fa:63:10:f5:17:af:a5:10:50:a3:90:60:22:78:0a:
36:aa:ad:92:d3:fb:50:cc:92:57:7e:7d:ec:9f:95:
19:30:fa:a8:30:6d:58:89:91:22:cb:fe:1d:f5:b9:
41:5b:55:e6:07:1d:15:d9:a6:bd:a5:2c:6d:ee:fe:
0d:33:5b:38:79:90:9a:31:17:7f:f4:62:28:60:30:
56:23:00:f4:1a:e4:b4:80:0d:b3:61:a6:c1:80:8a:
c8:67:12:cb:12:a4:c1:a3:0f:e1:e6:28:05:d3:db:
aa:4b:80:8e:c3:ff:a6:2d:ac:a6:4a:68:cc:d4:1a:
46:fd:a4:dc:95:74:69:62:53:1e:34:d6:48:4a:7a:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:3F:7B:9C:96:03:BD:CE:3D:F5:7C:FF:BA:88:0B:76:D6:2B:42
X509v3 Authority Key Identifier:
keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:13:9f:dc:3f:ce:c2:43:26:32:01:7b:ee:fc:2e:88:54:d1:
5e:c9:3b:1b:55:1c:1c:dd:35:10:bb:58:3f:d0:28:41:01:be:
eb:7d:fd:14:9a:6f:8f:c4:ab:35:3e:76:ca:21:13:c1:9a:62:
04:c5:fb:39:06:c6:13:15:44:7b:a6:ad:78:bb:d5:10:91:2d:
66:1a:91:7c:0a:1b:df:b1:0a:5c:be:af:ce:a0:e0:ac:e1:6f:
f0:a4:b9:28:90:4b:e1:36:e8:70:b8:02:b8:67:71:8e:1b:c6:
02:bf:8e:97:da:a6:34:04:f5:4c:2a:d8:27:46:db:07:f4:9a:
32:8d:92:07:51:25:a6:86:6f:db:5f:10:ce:0b:92:39:ae:4f:
8a:0f:e0:c3:d7:6a:1a:f4:af:8f:8a:27:58:cf:9c:ab:f3:2b:
5f:aa:39:68:06:99:c3:58:5a:a2:ed:79:36:28:02:8f:84:19:
e8:4a:d5:19:46:c7:2e:45:ff:a8:40:2b:56:65:8f:cc:12:44:
38:45:17:33:78:27:69:41:76:ef:1a:40:fa:12:a6:70:3b:ca:
5f:ac:8b:fe:36:38:2e:c6:ac:91:a7:e6:53:c9:05:af:3f:0c:
f3:4e:03:74:f9:de:c1:34:ba:9d:a7:27:73:05:e4:8f:08:9e:
89:d4:78:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QWw5w8jNJyP1m8ZwVHQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTk1OTUxZmQwMjdmYzczOWIwNDUxM2I4ZjhkNmJjNjc4
NDE4YzAwHhcNMjYwMzI5MTEwMTIxWhcNMjYwMzMwMTEwMTIxWjAzMTEwLwYDVQQD
EygxYTljM2Y3YjljOTYwM2JkY2UzZGY1N2NmZmJhODgwYjc2ZDYyYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyaGen2dACEjeWvTDCGNc0Waxir/
4D8iiH09qCJmxx461O270znnhOOYba6RUw35/tTDvDly+NjUGEfQw9F7mqTq9c0m
yx6EPUngSdYvU4JYVaYCxe9guBKR8ZtiBjZa6rHVJrNdQ60i+9sX55Xm13VXRitY
a8z6YxD1F6+lEFCjkGAieAo2qq2S0/tQzJJXfn3sn5UZMPqoMG1YiZEiy/4d9blB
W1XmBx0V2aa9pSxt7v4NM1s4eZCaMRd/9GIoYDBWIwD0GuS0gA2zYabBgIrIZxLL
EqTBow/h5igF09uqS4COw/+mLaymSmjM1BpG/aTclXRpYlMeNNZISnrGHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqcP3uclgO9zj31fP+6iAt21itCMB8GA1UdIwQY
MBaAFIuZWVH9An/HObBFE7j41rxnhBjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYt
NTczMGVmYjU4Nzc0LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYtNTczMGVmYjU4Nzc0
LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghOf3D/O
wkMmMgF77vwuiFTRXsk7G1UcHN01ELtYP9AoQQG+6339FJpvj8SrNT52yiETwZpi
BMX7OQbGExVEe6ateLvVEJEtZhqRfAob37EKXL6vzqDgrOFv8KS5KJBL4TbocLgC
uGdxjhvGAr+Ol9qmNAT1TCrYJ0bbB/SaMo2SB1ElpoZv218QzguSOa5Pig/gw9dq
GvSvj4onWM+cq/MrX6o5aAaZw1haou15NigCj4QZ6ErVGUbHLkX/qEArVmWPzBJE
OEUXM3gnaUF27xpA+hKmcDvKX6yL/jY4LsaskafmU8kFrz8M804DdPnewTS6nacn
cwXkjwieidR4ZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:01 2026 by rpki-client