Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
File: rSX4k9NuB3Dley0M13QKKRtQVVo.mft (raw, json)
Hash identifier: vkbiCeJdj3A/gnEYmbUkL5/toa6uwSoRGzWDUyPNicQ=
Subject key identifier: F0:84:5D:5D:DC:4A:D6:1C:61:E2:9D:4D:83:56:A6:2E:EC:C8:6E:C9
Authority key identifier: AD:25:F8:93:D3:6E:07:70:E5:7B:2D:0C:D7:74:0A:29:1B:50:55:5A
Certificate issuer: /CN=ad25f893d36e0770e57b2d0cd7740a291b50555a
Certificate serial: 019D38655C8429088CA391842FFF85EEED40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
Manifest number: 56
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: rSX4k9NuB3Dley0M13QKKRtQVVo.crl (hash: jaF9c8dgY+9foJkr9Zl69dvpxylk8+0wYg3n3iMMBvw=)
2: sptD_SP5mhKTKaXCvX_xij3mTc0.roa (hash: 7umL9bhBhCGN0pKOVOKEoWxSfrKW+H7O6vZH9R2/gDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5c:84:29:08:8c:a3:91:84:2f:ff:85:ee:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad25f893d36e0770e57b2d0cd7740a291b50555a
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=f0845d5ddc4ad61c61e29d4d8356a62eecc86ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:ba:1f:b3:91:a4:db:ae:1e:c6:55:48:a1:
52:fa:f2:8a:b5:79:9c:94:5e:3d:f5:91:2c:f6:9e:
d8:31:59:3b:89:17:f7:ec:de:04:89:64:97:94:11:
ec:f5:e9:85:c9:51:e5:e9:2e:7e:37:56:30:c5:da:
27:ce:85:09:f9:93:16:ae:cc:0e:03:a1:17:2a:16:
a4:c9:01:5e:cb:ca:c2:05:29:4b:a8:a1:51:6b:cd:
39:80:13:f7:62:b0:f6:a6:d5:68:52:29:36:ed:0c:
38:54:ac:6a:b7:ce:66:1d:a0:72:93:6f:32:3e:42:
00:40:63:26:ab:df:8f:07:33:97:5d:70:f6:a3:e4:
bf:1a:ad:a2:37:af:e6:63:22:6d:0e:97:3c:8d:de:
10:95:c2:6d:75:98:a4:ef:04:5a:ea:f0:20:b0:90:
66:05:1b:22:23:10:3f:83:35:ae:20:cc:dd:4d:7d:
28:c3:d0:db:47:f8:53:c5:f2:90:cf:30:67:43:5a:
9d:17:bc:ac:76:44:aa:7c:30:85:3e:a6:41:0d:da:
c8:a4:ed:67:b7:1a:e4:9c:bb:f7:27:68:e4:06:79:
fe:1c:49:08:af:87:26:68:5d:b2:5f:29:b5:0e:94:
2a:83:e1:0a:df:fc:65:3d:5d:84:e8:5c:51:a7:dc:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:84:5D:5D:DC:4A:D6:1C:61:E2:9D:4D:83:56:A6:2E:EC:C8:6E:C9
X509v3 Authority Key Identifier:
keyid:AD:25:F8:93:D3:6E:07:70:E5:7B:2D:0C:D7:74:0A:29:1B:50:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c2:b2:15:ef:35:82:94:50:b8:d7:20:c1:b3:a0:54:53:6f:
8a:b1:7c:28:fe:e2:e8:3a:46:e4:f7:b3:4c:42:1c:ed:72:16:
33:f9:fe:9a:2c:18:c2:ae:c8:1e:6e:54:93:06:f6:91:d2:06:
ca:07:d0:29:86:fd:9d:47:00:dc:90:55:ce:e5:72:44:92:48:
18:ee:5e:61:ac:c5:bb:d1:03:57:2e:e4:20:de:59:82:89:82:
f0:24:21:c2:36:bd:76:30:6a:30:a7:98:6d:8d:01:c8:9c:a7:
c7:31:26:72:6a:de:39:03:a5:57:8d:11:48:77:12:9b:e5:24:
b5:1b:2d:a8:aa:fd:b8:4c:2f:bc:40:d1:28:bb:6b:1f:1b:a2:
55:4b:8a:ea:5f:89:7d:14:0f:a7:8e:94:a6:af:b1:a3:bc:5d:
02:1c:a3:da:ad:29:12:f1:03:c4:19:3b:05:96:f5:c9:ef:f2:
5b:71:d8:7a:88:93:98:5c:79:48:9b:db:e9:86:1e:b8:d2:89:
97:81:0b:00:78:63:03:c7:86:6e:5d:81:4d:97:1d:4a:04:35:
c1:36:22:af:48:8f:01:6c:6c:a9:85:7a:0f:3c:fc:1f:68:88:
d5:44:79:2a:81:11:1a:1d:fc:cd:62:f2:86:fb:fd:e2:4e:ea:
e4:63:12:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVyEKQiMo5GEL/+F7u1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjVmODkzZDM2ZTA3NzBlNTdiMmQwY2Q3NzQwYTI5MWI1
MDU1NWEwHhcNMjYwMzI5MDcwMTAwWhcNMjYwMzMwMDcwMTAwWjAzMTEwLwYDVQQD
EyhmMDg0NWQ1ZGRjNGFkNjFjNjFlMjlkNGQ4MzU2YTYyZWVjYzg2ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuii6H7ORpNuuHsZVSKFS+vKKtXmc
lF499ZEs9p7YMVk7iRf37N4EiWSXlBHs9emFyVHl6S5+N1YwxdonzoUJ+ZMWrswO
A6EXKhakyQFey8rCBSlLqKFRa805gBP3YrD2ptVoUik27Qw4VKxqt85mHaByk28y
PkIAQGMmq9+PBzOXXXD2o+S/Gq2iN6/mYyJtDpc8jd4QlcJtdZik7wRa6vAgsJBm
BRsiIxA/gzWuIMzdTX0ow9DbR/hTxfKQzzBnQ1qdF7ysdkSqfDCFPqZBDdrIpO1n
txrknLv3J2jkBnn+HEkIr4cmaF2yXym1DpQqg+EK3/xlPV2E6FxRp9yBCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCEXV3cStYcYeKdTYNWpi7syG7JMB8GA1UdIwQY
MBaAFK0l+JPTbgdw5XstDNd0CikbUFVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNYNGs5TnVCM0RsZXkwTTEzUUtLUnRRVlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zYzlmNWQtYTgwZS00MTQ5LWIxMWEt
ZDIwY2FkYzFiOGRjLzEvclNYNGs5TnVCM0RsZXkwTTEzUUtLUnRRVlZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zYzlmNWQtYTgwZS00MTQ5LWIxMWEtZDIwY2FkYzFiOGRj
LzEvclNYNGs5TnVCM0RsZXkwTTEzUUtLUnRRVlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcKyFe81
gpRQuNcgwbOgVFNvirF8KP7i6DpG5PezTEIc7XIWM/n+miwYwq7IHm5Ukwb2kdIG
ygfQKYb9nUcA3JBVzuVyRJJIGO5eYazFu9EDVy7kIN5ZgomC8CQhwja9djBqMKeY
bY0ByJynxzEmcmreOQOlV40RSHcSm+UktRstqKr9uEwvvEDRKLtrHxuiVUuK6l+J
fRQPp46Upq+xo7xdAhyj2q0pEvEDxBk7BZb1ye/yW3HYeoiTmFx5SJvb6YYeuNKJ
l4ELAHhjA8eGbl2BTZcdSgQ1wTYir0iPAWxsqYV6Dzz8H2iI1UR5KoERGh38zWLy
hvv94k7q5GMS+A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:54 2026 by rpki-client