Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: JbLd1Nw80n+pOeplklqDCyp3st50c2O/QoF716cSNUQ=
Subject key identifier: 3A:74:7B:79:8C:49:63:B4:EE:20:8C:DB:6A:4C:72:EE:D7:69:5B:76
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 019D39414A40D24A43005B1CFAA67ACD4E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: 04DE
Signing time: Sun 29 Mar 2026 11:01:13 +0000
Manifest this update: Sun 29 Mar 2026 11:01:13 +0000
Manifest next update: Mon 30 Mar 2026 11:01:13 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: RLWIrcxCldhAbia3s1ETKHHwmLoRi5N1WzvC+QHiN1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4a:40:d2:4a:43:00:5b:1c:fa:a6:7a:cd:4e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: Mar 29 11:01:13 2026 GMT
Not After : Mar 30 11:01:13 2026 GMT
Subject: CN=3a747b798c4963b4ee208cdb6a4c72eed7695b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:cd:66:fa:a5:5f:6b:1f:39:f5:bb:63:1d:
ea:ad:1a:5f:37:6d:11:70:67:52:ae:e6:ad:8e:2f:
5d:f0:db:ef:ad:4c:f6:dc:17:17:12:b2:51:f9:3b:
d5:55:2c:59:35:91:9a:43:30:b7:f1:53:cc:f8:0c:
cf:71:01:9b:54:6d:d5:39:ff:65:d0:b7:bd:ce:26:
6c:04:a2:2c:f9:11:19:7b:c0:c7:8c:47:75:6c:10:
a8:38:a9:78:e2:25:0a:a2:66:d4:f0:cf:07:85:38:
30:0d:02:6e:aa:47:4c:0a:3b:fe:4c:62:dd:4a:20:
68:bb:85:af:c9:53:37:f0:07:bf:ce:8e:cc:74:ea:
ea:99:f1:69:55:72:7c:75:99:4c:ad:4a:c1:5d:8f:
de:e8:99:29:b9:d2:6b:e2:ab:6e:0e:03:32:6e:46:
e1:8c:7f:31:a4:78:06:1f:60:8b:6d:40:e6:45:65:
2d:48:8c:13:c4:70:60:d1:22:8f:47:0e:f4:03:2b:
b1:46:26:6e:d4:b4:38:fc:59:8e:d2:f4:ba:28:6d:
5c:93:73:34:7d:de:ab:9e:f6:31:01:d7:f7:7e:b9:
c0:7a:af:b1:d8:63:d1:81:5f:a3:15:41:d1:05:be:
72:f4:de:82:06:04:1c:97:55:ec:66:eb:54:61:c7:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:7B:79:8C:49:63:B4:EE:20:8C:DB:6A:4C:72:EE:D7:69:5B:76
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:c9:67:c9:ea:dd:77:de:6d:a4:2a:13:91:a9:44:da:b0:
34:53:8a:c8:dc:0c:72:bf:24:d0:c5:58:70:3b:4a:83:a9:6b:
f8:0a:33:a9:4e:f3:c2:c7:8d:af:b7:d9:8d:ab:89:0c:09:65:
dd:f1:d2:c0:74:ba:f4:91:0c:20:af:c0:92:17:e8:e4:37:07:
2a:a1:8a:6c:44:12:25:dd:06:44:cc:04:a2:46:22:ac:0d:05:
0c:57:9d:63:0a:04:e1:b8:fe:6e:a3:3d:a5:0e:fd:72:3b:52:
c3:87:0e:27:df:f6:2d:49:30:b2:df:d7:b0:e6:77:61:71:8d:
a7:95:fa:51:de:c7:df:65:19:11:a2:61:c2:75:3e:f0:b9:d8:
3c:e5:c5:98:2a:f7:66:0b:f5:19:1b:63:08:dc:cf:4a:80:b6:
d4:c8:ec:b9:35:be:3a:cf:72:7e:61:91:b7:34:ad:a4:bc:dd:
3b:77:61:fd:2b:ad:86:fe:49:de:b3:51:9d:67:8b:e9:60:21:
17:a1:8d:5b:ff:e7:26:08:87:fa:7c:32:50:a6:a9:59:e1:de:
d4:36:fe:1d:4c:72:09:a5:92:b3:38:39:5d:88:c1:fa:84:fd:
0e:2f:01:81:3a:5e:93:59:b3:89:b4:e1:b4:9a:47:f6:f0:ae:
eb:bb:aa:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QUpA0kpDAFsc+qZ6zU4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmIwMmM0NWM3NWViZjcyZDU2ZDMzYzI4MDI5N2MyYWU4
N2ViMmQwHhcNMjYwMzI5MTEwMTEzWhcNMjYwMzMwMTEwMTEzWjAzMTEwLwYDVQQD
EygzYTc0N2I3OThjNDk2M2I0ZWUyMDhjZGI2YTRjNzJlZWQ3Njk1Yjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mjNZvqlX2sfOfW7Yx3qrRpfN20R
cGdSruatji9d8NvvrUz23BcXErJR+TvVVSxZNZGaQzC38VPM+AzPcQGbVG3VOf9l
0Le9ziZsBKIs+REZe8DHjEd1bBCoOKl44iUKombU8M8HhTgwDQJuqkdMCjv+TGLd
SiBou4WvyVM38Ae/zo7MdOrqmfFpVXJ8dZlMrUrBXY/e6JkpudJr4qtuDgMybkbh
jH8xpHgGH2CLbUDmRWUtSIwTxHBg0SKPRw70AyuxRiZu1LQ4/FmO0vS6KG1ck3M0
fd6rnvYxAdf3frnAeq+x2GPRgV+jFUHRBb5y9N6CBgQcl1XsZutUYcdEPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp0e3mMSWO07iCM22pMcu7XaVt2MB8GA1UdIwQY
MBaAFHErAsRcdev3LVbTPCgCl8Kuh+stMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgt
MzUyNDczZGQ1MTc5LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgtMzUyNDczZGQ1MTc5
LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACq/JZ8nq
3XfebaQqE5GpRNqwNFOKyNwMcr8k0MVYcDtKg6lr+AozqU7zwseNr7fZjauJDAll
3fHSwHS69JEMIK/Akhfo5DcHKqGKbEQSJd0GRMwEokYirA0FDFedYwoE4bj+bqM9
pQ79cjtSw4cOJ9/2LUkwst/XsOZ3YXGNp5X6Ud7H32UZEaJhwnU+8LnYPOXFmCr3
Zgv1GRtjCNzPSoC21MjsuTW+Os9yfmGRtzStpLzdO3dh/Suthv5J3rNRnWeL6WAh
F6GNW//nJgiH+nwyUKapWeHe1Db+HUxyCaWSszg5XYjB+oT9Di8BgTpek1mzibTh
tJpH9vCu67uqAw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:49 2026 by rpki-client