Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier: bzX013T+3pIdz4+fbNgFLNViIMRSi17IfwAo6UPQtBM=
Subject key identifier: 38:FD:82:E7:38:F7:DB:F6:7F:E7:AF:B0:21:85:B7:40:99:88:11:B8
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial: 019D38D2FEEF2B75A99A0937C6EF8E44655C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: foffd33qRgZmTA1XoXDZRH8aXEnadKHwPCv1hy8rH74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fe:ef:2b:75:a9:9a:09:37:c6:ef:8e:44:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=38fd82e738f7dbf67fe7afb02185b740998811b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:b2:d9:97:23:81:1f:21:85:15:c6:7e:4d:
a6:0d:c3:ff:fb:0c:57:5a:2e:a0:62:f8:13:b4:2e:
ac:6c:af:2f:80:0c:b3:74:11:e1:1b:9a:83:7d:24:
04:65:2e:a4:0b:91:fd:c7:cf:02:c8:1b:e0:98:9c:
c9:c9:82:75:90:14:f8:d4:e4:7f:ca:b3:ab:7a:95:
79:f5:53:58:56:fe:d4:0c:01:71:3e:c9:d4:3b:c2:
b6:1e:6a:59:6f:8c:c7:cb:c8:e6:b8:30:f1:fa:74:
54:68:94:2c:f5:21:9d:62:07:0e:af:be:90:2a:50:
f9:86:70:01:ff:c7:15:23:47:93:b3:37:86:01:9b:
de:92:30:8b:3b:30:8a:24:b7:2d:00:61:e9:3d:a8:
49:9c:c9:ef:e2:15:dd:b0:10:20:9c:b8:27:5d:c4:
41:d3:4f:5a:2f:30:ee:06:40:53:19:ef:2f:ce:27:
9f:46:a3:f0:7b:e2:8b:72:d6:f9:e7:21:92:86:a2:
19:c9:17:d6:e8:c9:9a:ee:23:a2:e8:b0:6d:58:47:
44:2f:72:b1:ab:d5:73:19:6a:be:39:8b:9e:eb:a1:
7a:dd:fa:29:e3:0a:9b:78:22:c0:71:9b:59:56:ec:
35:02:bd:75:5b:f2:64:51:38:b5:73:95:30:02:66:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FD:82:E7:38:F7:DB:F6:7F:E7:AF:B0:21:85:B7:40:99:88:11:B8
X509v3 Authority Key Identifier:
keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:99:04:e3:63:ce:d5:26:85:01:52:6f:b5:d4:a3:bc:a8:b8:
aa:d2:4f:52:1c:d7:84:72:02:ca:0f:7e:4a:1a:0f:7a:65:66:
39:06:5b:52:f0:26:ec:7d:b9:e6:3d:3c:49:98:bc:b2:9e:1f:
6e:a1:ed:97:29:6e:61:33:26:f4:f8:a6:7e:c0:64:92:ac:be:
66:a2:b4:80:d1:87:df:91:90:b5:48:a5:fa:6c:9f:f8:48:d1:
8d:03:a4:2f:63:ca:3b:b9:0f:38:54:20:ae:68:3f:96:7c:cd:
17:aa:ff:74:b3:d1:27:a8:c6:99:d1:9b:c9:2f:fc:f1:3b:05:
3f:94:53:e3:67:d8:0a:b8:b0:28:86:20:21:75:52:d7:08:60:
42:4e:59:65:7d:55:8e:0e:71:d6:e1:23:ec:d9:e3:46:ad:db:
3c:ac:33:0e:b7:e1:65:f7:94:9f:7c:02:a4:63:8e:4d:ee:2e:
d7:f1:86:b0:da:ec:34:81:51:40:fd:7d:40:ea:d0:0e:a4:57:
d4:73:e8:a9:6c:dc:42:e9:37:be:c0:04:76:56:c3:38:f7:23:
50:49:ed:45:8c:c1:39:46:f0:65:ac:71:23:93:56:c4:1e:55:
d3:cd:a7:ba:7c:ce:8c:33:92:85:a3:a4:73:7f:4d:72:ec:50:
53:8e:37:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040v7vK3Wpmgk3xu+ORGVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTk5ZWZhZGM4ODgwM2RjMWEwNjU2MTBmNjQ3Y2ZkY2Uz
MGY1NDEwHhcNMjYwMzI5MDkwMDQ0WhcNMjYwMzMwMDkwMDQ0WjAzMTEwLwYDVQQD
EygzOGZkODJlNzM4ZjdkYmY2N2ZlN2FmYjAyMTg1Yjc0MDk5ODgxMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJCy2ZcjgR8hhRXGfk2mDcP/+wxX
Wi6gYvgTtC6sbK8vgAyzdBHhG5qDfSQEZS6kC5H9x88CyBvgmJzJyYJ1kBT41OR/
yrOrepV59VNYVv7UDAFxPsnUO8K2HmpZb4zHy8jmuDDx+nRUaJQs9SGdYgcOr76Q
KlD5hnAB/8cVI0eTszeGAZvekjCLOzCKJLctAGHpPahJnMnv4hXdsBAgnLgnXcRB
009aLzDuBkBTGe8vziefRqPwe+KLctb55yGShqIZyRfW6Mma7iOi6LBtWEdEL3Kx
q9VzGWq+OYue66F63fop4wqbeCLAcZtZVuw1Ar11W/JkUTi1c5UwAmacJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj9guc499v2f+evsCGFt0CZiBG4MB8GA1UdIwQY
MBaAFEQZnvrciIA9waBlYQ9kfP3OMPVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWIt
MjI4ZDJmZTZjYTdmLzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWItMjI4ZDJmZTZjYTdm
LzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZkE42PO
1SaFAVJvtdSjvKi4qtJPUhzXhHICyg9+ShoPemVmOQZbUvAm7H255j08SZi8sp4f
bqHtlyluYTMm9PimfsBkkqy+ZqK0gNGH35GQtUil+myf+EjRjQOkL2PKO7kPOFQg
rmg/lnzNF6r/dLPRJ6jGmdGbyS/88TsFP5RT42fYCriwKIYgIXVS1whgQk5ZZX1V
jg5x1uEj7NnjRq3bPKwzDrfhZfeUn3wCpGOOTe4u1/GGsNrsNIFRQP19QOrQDqRX
1HPoqWzcQuk3vsAEdlbDOPcjUEntRYzBOUbwZaxxI5NWxB5V082nunzOjDOShaOk
c39NcuxQU443oQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:59 2026 by rpki-client