Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: jy8h7WJUJ56nBZMmUHxdu2Lzn26uvPTTltdXmDOftk4=
Subject key identifier: BF:91:D8:25:74:EE:48:06:74:8E:2F:E8:74:7A:C9:A1:5E:A7:7C:42
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 019D38D2AF1D18563E9A9C368C99C906B60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: Lls0t1OFXB6lVy+zB1MSJKkRwUoshqJ+ajO/VxU+N6E=)
2: ptXyrgVvtRP3D7VtVmhZM3FWVhU.roa (hash: PoyEOK64ZRkHmMkkLoFS8S4R0VxZJdJWksZdI9vklg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:af:1d:18:56:3e:9a:9c:36:8c:99:c9:06:b6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=bf91d82574ee4806748e2fe8747ac9a15ea77c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:14:df:57:6d:fa:e2:e5:6e:15:be:10:02:
63:21:6a:43:e4:88:54:e0:85:6f:d7:eb:25:8a:e0:
17:86:31:71:cc:76:2e:72:d1:27:5a:57:ab:25:ee:
a8:be:f1:d7:2e:09:21:e8:e4:0a:50:72:70:63:23:
c8:d2:14:02:60:fb:63:10:bb:cb:c6:c8:7b:34:d2:
4f:9b:20:a9:cc:e2:3b:11:ea:60:d2:22:02:23:50:
51:14:5b:96:38:a2:10:79:22:a7:e4:b0:15:bb:f8:
10:8f:4c:06:e4:58:25:1a:8a:0b:39:24:97:37:cb:
23:b0:d2:1e:eb:9a:e6:10:da:ff:7b:04:34:e0:c0:
ab:6b:f4:9c:f9:e2:c6:30:13:42:23:93:1a:ba:32:
2b:d1:a3:ee:36:42:69:d2:fc:e4:4e:7c:1d:ae:ea:
d4:db:75:63:90:f2:17:00:cf:9e:03:9e:47:36:ab:
72:ac:09:79:c3:83:c3:16:ab:77:6c:52:aa:e8:44:
fa:85:81:b1:91:8d:88:87:c6:c6:ab:34:f1:21:0f:
e9:65:77:e9:ec:77:c8:d8:7a:36:a5:4f:78:39:15:
7b:44:dc:23:a5:c2:b0:23:fa:55:e6:bd:ab:7e:81:
e6:6c:67:4c:24:22:fd:d2:8b:81:a7:a2:a8:96:e7:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:D8:25:74:EE:48:06:74:8E:2F:E8:74:7A:C9:A1:5E:A7:7C:42
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7c:84:c9:64:ad:26:a8:6b:86:0c:dd:a5:21:83:39:74:d5:
10:1b:19:dc:6f:02:97:25:f7:51:3a:87:7e:b4:9c:6e:4d:9b:
9f:96:e9:70:60:08:c6:ce:7d:97:40:ce:ed:8d:23:cc:f3:76:
02:f2:2e:2e:dd:cf:dd:d9:be:25:cb:91:30:4c:0a:ff:c0:ad:
29:42:bd:4a:c7:65:62:71:7a:4d:3a:ad:a8:72:3b:a9:c8:6f:
e1:f9:81:26:0f:c7:5f:ac:f0:9d:af:92:9b:53:e3:5e:3f:e4:
38:27:0c:c5:6d:37:7e:49:2f:1b:3a:5d:36:b1:b4:08:35:e2:
5c:e7:1e:e3:5f:1b:89:29:7f:8f:1b:c2:1e:0f:d1:37:c5:11:
d6:0c:3c:99:dc:20:24:3b:27:6e:08:e1:01:cf:85:ed:f1:ae:
37:ac:58:5c:3b:e5:43:a4:28:f3:2c:23:06:e5:85:49:45:a3:
bc:db:64:da:05:d4:00:97:de:43:00:3e:51:0a:d5:be:73:3f:
44:54:68:c0:2f:07:09:37:a2:63:34:1c:ce:1d:d1:b5:36:82:
16:80:65:cd:dd:ba:41:1f:f7:87:ec:c5:1a:47:5f:d0:da:b2:
70:89:a5:dd:f7:44:e0:74:7e:82:27:77:c0:10:ce:82:d8:89:
88:64:1a:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040q8dGFY+mpw2jJnJBrYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZGVmNWE3N2RjYzlhYWM5OWMzNGUyZDcxOWI4YmEwZDA0
ZTAzZDEwHhcNMjYwMzI5MDkwMDI0WhcNMjYwMzMwMDkwMDI0WjAzMTEwLwYDVQQD
EyhiZjkxZDgyNTc0ZWU0ODA2NzQ4ZTJmZTg3NDdhYzlhMTVlYTc3YzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEUU31dt+uLlbhW+EAJjIWpD5IhU
4IVv1+sliuAXhjFxzHYuctEnWlerJe6ovvHXLgkh6OQKUHJwYyPI0hQCYPtjELvL
xsh7NNJPmyCpzOI7Eepg0iICI1BRFFuWOKIQeSKn5LAVu/gQj0wG5FglGooLOSSX
N8sjsNIe65rmENr/ewQ04MCra/Sc+eLGMBNCI5MaujIr0aPuNkJp0vzkTnwdrurU
23VjkPIXAM+eA55HNqtyrAl5w4PDFqt3bFKq6ET6hYGxkY2Ih8bGqzTxIQ/pZXfp
7HfI2Ho2pU94ORV7RNwjpcKwI/pV5r2rfoHmbGdMJCL90ouBp6KoludLRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+R2CV07kgGdI4v6HR6yaFep3xCMB8GA1UdIwQY
MBaAFETe9ad9zJqsmcNOLXGbi6DQTgPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk43MXAzM01tcXladzA0dGNadUxvTkJPQTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xYTAzMWItYTcxZi00YmVlLTkxZTIt
ZDRiZDUzYzk0YjY2LzEvUk43MXAzM01tcXladzA0dGNadUxvTkJPQTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8xYTAzMWItYTcxZi00YmVlLTkxZTItZDRiZDUzYzk0YjY2
LzEvUk43MXAzM01tcXladzA0dGNadUxvTkJPQTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3yEyWSt
JqhrhgzdpSGDOXTVEBsZ3G8ClyX3UTqHfrScbk2bn5bpcGAIxs59l0DO7Y0jzPN2
AvIuLt3P3dm+JcuRMEwK/8CtKUK9SsdlYnF6TTqtqHI7qchv4fmBJg/HX6zwna+S
m1PjXj/kOCcMxW03fkkvGzpdNrG0CDXiXOce418biSl/jxvCHg/RN8UR1gw8mdwg
JDsnbgjhAc+F7fGuN6xYXDvlQ6Qo8ywjBuWFSUWjvNtk2gXUAJfeQwA+UQrVvnM/
RFRowC8HCTeiYzQczh3RtTaCFoBlzd26QR/3h+zFGkdf0NqycIml3fdE4HR+gid3
wBDOgtiJiGQaGg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:36 2026 by rpki-client