Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
File: rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json)
Hash identifier: sN0XbVze+/tTA/5bpPjuD9AgrB2BwdvuUoGHuEghpT0=
Subject key identifier: 25:00:A2:2C:FF:95:B8:9B:E3:C2:98:7F:5B:3F:E5:4F:1B:00:FA:A2
Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA
Certificate issuer: /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
Certificate serial: 019D38D37A2DD063BA0CA39759B09C77EAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: BakqsxK60yJgwq4MCY8HjR7TlAGSdD4NwkZLNmmeeZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7a:2d:d0:63:ba:0c:a3:97:59:b0:9c:77:ea:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=2500a22cff95b89be3c2987f5b3fe54f1b00faa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:f3:e6:11:eb:17:4b:52:31:05:fa:40:f0:
e3:5b:18:c5:60:5c:66:48:6e:a4:11:3a:f9:98:93:
95:5a:aa:8c:ab:5a:ea:4d:e2:77:5a:15:df:4a:8b:
e8:ea:31:ab:dc:7f:8e:e3:13:7c:01:f0:b8:66:6e:
3b:85:f7:d8:60:b4:94:12:b6:a5:66:ff:53:ec:89:
44:44:c6:05:95:f4:22:39:e2:87:28:71:4f:77:e9:
e3:c6:9d:4a:8b:c0:9a:7f:69:4c:4a:92:c8:a8:d2:
a1:57:ee:2d:b9:db:f8:36:38:d8:7c:b0:50:c2:30:
9c:c9:66:50:8d:c7:20:aa:7d:e2:1b:9b:e3:71:e4:
75:f1:3c:2f:fb:58:5a:cb:84:44:03:7d:7e:09:36:
7b:03:ba:0a:c2:9f:3e:a2:ff:35:42:72:de:7d:79:
6d:09:6d:97:63:5a:22:91:af:94:3a:82:0e:69:30:
05:68:09:00:85:85:23:8f:77:e8:ca:44:e4:a8:ce:
91:49:41:df:66:9d:54:5c:ec:31:37:66:74:df:8b:
7c:7a:03:ae:85:5e:f8:a3:cd:42:c6:0b:1d:ad:6b:
45:59:05:03:a5:71:cd:ae:41:72:f7:34:25:68:d3:
11:a6:86:df:dd:0b:10:67:b8:f8:b0:0c:b3:38:3c:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:00:A2:2C:FF:95:B8:9B:E3:C2:98:7F:5B:3F:E5:4F:1B:00:FA:A2
X509v3 Authority Key Identifier:
keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9f:9a:12:de:fc:09:08:d8:81:b6:b8:2d:50:26:d6:4e:cc:
75:ee:d4:26:c7:9b:d9:ad:95:9f:c9:cf:32:09:92:97:47:d7:
8f:e8:85:9a:a6:0f:c3:6d:cc:7d:eb:30:b2:38:b2:ca:a8:7c:
e4:f0:3a:d3:4c:fd:26:91:2f:d3:45:4d:5c:4e:d4:f6:a8:61:
e7:c7:9c:5b:2d:fb:ba:3e:4b:54:ba:54:bc:f3:c7:06:c3:ef:
32:1b:54:80:6c:5a:ed:d7:dc:be:3a:fa:89:c5:dc:80:31:d3:
41:14:3d:8b:c3:27:77:e7:e9:69:1d:63:10:2f:09:1a:14:1a:
2b:ac:bc:79:ea:54:e7:c9:f1:b1:29:49:a5:8a:51:e2:04:01:
11:5f:5d:69:78:35:f2:fe:7e:5c:39:66:35:d9:c1:ca:79:b5:
6e:3a:f0:b0:17:46:60:49:72:03:e4:56:27:09:f9:e1:53:4e:
bd:8e:ed:32:97:25:81:9b:d8:36:58:16:99:07:9c:bc:94:3b:
a3:7a:d6:50:43:cc:bd:3b:88:fe:7a:94:da:e6:7c:ef:d8:26:
24:1e:6f:84:3e:a8:f0:23:c7:ea:a5:28:6b:40:d3:2c:88:66:
39:69:be:00:0d:d9:59:d4:4e:7e:cf:7e:13:01:e3:35:23:cb:
fd:86:b7:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403ot0GO6DKOXWbCcd+q3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjczZDI3MmNiMTc0YTQ2MzhkYjIxNTY3OGUzZWU3Yjky
MjlmZmEwHhcNMjYwMzI5MDkwMTE2WhcNMjYwMzMwMDkwMTE2WjAzMTEwLwYDVQQD
EygyNTAwYTIyY2ZmOTViODliZTNjMjk4N2Y1YjNmZTU0ZjFiMDBmYWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1vz5hHrF0tSMQX6QPDjWxjFYFxm
SG6kETr5mJOVWqqMq1rqTeJ3WhXfSovo6jGr3H+O4xN8AfC4Zm47hffYYLSUEral
Zv9T7IlERMYFlfQiOeKHKHFPd+njxp1Ki8Caf2lMSpLIqNKhV+4tudv4NjjYfLBQ
wjCcyWZQjccgqn3iG5vjceR18Twv+1hay4REA31+CTZ7A7oKwp8+ov81QnLefXlt
CW2XY1oika+UOoIOaTAFaAkAhYUjj3foykTkqM6RSUHfZp1UXOwxN2Z034t8egOu
hV74o81CxgsdrWtFWQUDpXHNrkFy9zQlaNMRpobf3QsQZ7j4sAyzODymmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUAoiz/lbib48KYf1s/5U8bAPqiMB8GA1UdIwQY
MBaAFK63PScssXSkY42yFWeOPue5Ip/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUt
NWMxYWMyYWYzNjcyLzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUtNWMxYWMyYWYzNjcy
LzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJ+aEt78
CQjYgba4LVAm1k7Mde7UJseb2a2Vn8nPMgmSl0fXj+iFmqYPw23Mfeswsjiyyqh8
5PA600z9JpEv00VNXE7U9qhh58ecWy37uj5LVLpUvPPHBsPvMhtUgGxa7dfcvjr6
icXcgDHTQRQ9i8Mnd+fpaR1jEC8JGhQaK6y8eepU58nxsSlJpYpR4gQBEV9daXg1
8v5+XDlmNdnBynm1bjrwsBdGYElyA+RWJwn54VNOvY7tMpclgZvYNlgWmQecvJQ7
o3rWUEPMvTuI/nqU2uZ879gmJB5vhD6o8CPH6qUoa0DTLIhmOWm+AA3ZWdROfs9+
EwHjNSPL/Ya3sQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:05 2026 by rpki-client