Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: KijpDi7tSUVK+R9l6BHQZDLFbD0sG9U3fXJI8PyHVfU=
Subject key identifier: 3C:15:C3:F2:29:BB:DD:D5:84:D1:4D:8A:6D:B2:31:B3:46:70:51:40
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 019D389C56B35D72BFDC17B342BFC8F60545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 07B3
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: sNeRU0tPyJiqMFIUon2zckr/vkyqtfV4ybUpJwQnZAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:56:b3:5d:72:bf:dc:17:b3:42:bf:c8:f6:05:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=3c15c3f229bbddd584d14d8a6db231b346705140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:07:1a:b9:be:5f:8c:ae:5d:15:b4:6b:ad:
cf:f9:46:04:a4:ef:2b:14:7e:f5:8d:29:aa:cc:5a:
9c:ed:b8:d7:2c:aa:c3:4a:91:60:5e:1d:fe:99:ef:
b2:5d:72:c7:09:63:8d:bf:d5:38:21:ee:d6:5b:a0:
dd:ee:c1:7e:41:d4:49:f4:ce:06:81:7a:a0:f0:a9:
f1:b3:c6:a3:86:8f:0f:32:fe:c7:a0:1a:c9:3d:fb:
92:e4:3e:93:25:d1:f6:b2:8f:3c:b2:a9:2e:7b:35:
6b:5c:08:96:f3:e8:a9:4c:50:25:d9:c6:29:48:23:
40:d9:e0:2e:d7:7e:e3:d6:d6:c2:cb:ec:12:6b:67:
3b:9e:84:35:8e:9f:c6:9e:c2:f8:69:88:ff:7a:79:
07:b2:00:85:bf:96:c8:b4:af:17:f0:66:a2:11:c3:
6f:5a:6b:3e:79:02:ab:a9:cf:66:9c:5f:93:7e:b7:
7f:dd:f3:23:99:b4:f0:59:d5:76:74:29:00:e8:12:
01:46:2d:6b:05:6a:74:46:05:14:7a:b2:f3:83:d3:
87:4a:18:6b:c2:5f:2a:3b:b3:bc:41:2d:f5:fe:0b:
fe:12:d3:f4:ca:bb:b3:84:bd:f1:fb:0a:3b:8e:dc:
01:e5:4c:32:39:a3:60:5a:a6:3d:c1:37:44:40:7e:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:15:C3:F2:29:BB:DD:D5:84:D1:4D:8A:6D:B2:31:B3:46:70:51:40
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3c:e6:a5:e9:0c:64:22:78:95:81:27:25:fe:77:39:2c:59:
2c:bb:69:75:f1:f1:85:d1:38:5c:44:11:40:d3:a0:1a:68:38:
e5:01:fc:c2:56:31:d9:92:a8:7f:d2:d3:a9:af:ee:81:1e:45:
d9:77:06:93:56:c3:76:27:94:c6:bb:3b:96:1e:cf:2d:b9:c7:
87:ec:40:69:89:6c:15:ce:b8:bd:f8:a2:d4:f4:09:ea:f7:75:
a7:00:9b:8b:b1:37:18:8e:ec:18:82:35:6b:44:26:98:7b:46:
8a:8c:d5:56:5a:6b:7b:b4:fc:f5:63:00:fa:11:d4:34:0e:2c:
92:98:f9:35:06:56:7e:c2:28:f1:a6:e7:2f:32:50:06:44:3b:
c2:78:0a:b8:a1:0c:cf:6e:1a:a9:a0:88:a5:4f:0b:51:5f:73:
6e:02:e8:74:5d:cb:1e:d2:48:94:55:68:ae:bd:c4:da:8f:53:
78:54:3f:07:b5:9c:bd:e3:2e:f4:5a:f3:23:40:89:e1:e1:19:
13:fa:aa:bd:23:c3:5a:2d:aa:b5:f2:04:99:55:d6:90:1f:cc:
51:e8:2d:b8:5f:6f:27:4b:8a:2e:5e:20:e1:19:c4:33:bf:73:
44:2f:87:f5:fc:b1:ca:c4:33:b8:8e:cf:37:8f:2b:76:83:a0:
13:86:d2:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nFazXXK/3BezQr/I9gVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjEzNGIyNmE1ZjNmN2NjZDhjYWY1ZDJjNmJlNzBjYWMw
ZmEyNGIwHhcNMjYwMzI5MDgwMTAyWhcNMjYwMzMwMDgwMTAyWjAzMTEwLwYDVQQD
EygzYzE1YzNmMjI5YmJkZGQ1ODRkMTRkOGE2ZGIyMzFiMzQ2NzA1MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7sHGrm+X4yuXRW0a63P+UYEpO8r
FH71jSmqzFqc7bjXLKrDSpFgXh3+me+yXXLHCWONv9U4Ie7WW6Dd7sF+QdRJ9M4G
gXqg8Knxs8ajho8PMv7HoBrJPfuS5D6TJdH2so88sqkuezVrXAiW8+ipTFAl2cYp
SCNA2eAu137j1tbCy+wSa2c7noQ1jp/GnsL4aYj/enkHsgCFv5bItK8X8GaiEcNv
Wms+eQKrqc9mnF+Tfrd/3fMjmbTwWdV2dCkA6BIBRi1rBWp0RgUUerLzg9OHShhr
wl8qO7O8QS31/gv+EtP0yruzhL3x+wo7jtwB5UwyOaNgWqY9wTdEQH6dRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwVw/Ipu93VhNFNim2yMbNGcFFAMB8GA1UdIwQY
MBaAFLvxNLJqXz98zYyvXSxr5wysD6JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQt
OTViYzY0MGUzYzU2LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQtOTViYzY0MGUzYzU2
LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATzmpekM
ZCJ4lYEnJf53OSxZLLtpdfHxhdE4XEQRQNOgGmg45QH8wlYx2ZKof9LTqa/ugR5F
2XcGk1bDdieUxrs7lh7PLbnHh+xAaYlsFc64vfii1PQJ6vd1pwCbi7E3GI7sGII1
a0QmmHtGiozVVlpre7T89WMA+hHUNA4skpj5NQZWfsIo8abnLzJQBkQ7wngKuKEM
z24aqaCIpU8LUV9zbgLodF3LHtJIlFVorr3E2o9TeFQ/B7WcveMu9FrzI0CJ4eEZ
E/qqvSPDWi2qtfIEmVXWkB/MUegtuF9vJ0uKLl4g4RnEM79zRC+H9fyxysQzuI7P
N48rdoOgE4bSLQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:44 2026 by rpki-client