Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json)
Hash identifier: zyn1ikk+qiM/EKyHkZQSHI5uiy8c0pD6xvA9QPw9z7w=
Subject key identifier: 53:BB:A7:FF:61:26:7F:D4:F9:CF:68:F9:C5:46:7E:31:4A:47:2F:90
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial: 019D3909EFD06C65DE9084116E4167420678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
Manifest number: 01BE
Signing time: Sun 29 Mar 2026 10:00:45 +0000
Manifest this update: Sun 29 Mar 2026 10:00:45 +0000
Manifest next update: Mon 30 Mar 2026 10:00:45 +0000
Files and hashes: 1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: nwrq2oj6GAkZXmzK+mJcSp8uumolMZYcKpMKy+qxflg=)
2: fJC9vmdZueXz61wAYAD-WUsaH2A.roa (hash: k5sJI4drxp1+QGPOMqgRV5VUY5GowjbKkDKbGnRh3VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ef:d0:6c:65:de:90:84:11:6e:41:67:42:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
Validity
Not Before: Mar 29 10:00:45 2026 GMT
Not After : Mar 30 10:00:45 2026 GMT
Subject: CN=53bba7ff61267fd4f9cf68f9c5467e314a472f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:d1:47:0c:71:83:70:66:2c:a5:1f:0c:1b:
f7:fe:13:55:99:c8:4f:17:b6:a1:0b:f9:e1:f8:f3:
6d:ce:b7:a0:00:61:29:4f:21:8f:0e:c3:f7:9a:98:
17:63:2b:f7:13:2f:6b:17:64:f2:16:a4:70:f6:3e:
d2:21:76:a8:17:e9:dc:92:86:0f:23:61:48:93:f1:
b1:18:21:45:4f:37:23:9e:34:cb:a6:a3:15:dc:0b:
f1:25:8d:54:22:3b:dd:f8:f5:69:60:9f:1e:b3:cc:
8e:eb:70:3d:19:82:08:73:f0:05:85:22:5a:78:95:
c9:40:e8:66:47:bb:33:f0:76:f7:41:d8:ad:af:59:
83:a9:2d:a0:a7:f5:8a:a8:36:45:4e:c5:c3:2c:68:
d8:46:51:61:96:fd:90:33:b0:cd:d6:f3:20:ac:0e:
53:b2:af:0d:d3:9e:72:c3:94:48:9d:e4:3f:ff:84:
f0:f7:5d:01:04:aa:52:7b:ce:7e:99:8b:ea:e1:6c:
20:55:49:02:4e:65:20:bd:a3:0f:51:bc:5d:f7:2a:
8a:a6:ea:9a:de:3c:af:52:06:0f:5f:c9:f1:11:63:
40:e3:b9:c6:29:d4:be:5e:89:cf:e7:aa:be:6d:ab:
1f:8f:44:f5:ed:77:59:05:02:b0:13:b7:be:b4:3b:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BB:A7:FF:61:26:7F:D4:F9:CF:68:F9:C5:46:7E:31:4A:47:2F:90
X509v3 Authority Key Identifier:
keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4b:67:0e:46:f6:8f:ea:65:21:12:e2:16:2c:99:25:b3:20:
92:a0:ad:aa:dc:27:80:57:30:e5:a5:67:5a:48:c8:55:61:b0:
fc:fe:5f:24:47:92:e4:6f:f3:d1:08:81:c2:91:0e:b5:49:81:
36:10:3c:91:38:ad:3c:06:9c:93:be:26:90:5b:39:d3:f8:4c:
aa:da:0e:d3:fe:a8:2e:1f:5c:2a:ec:55:b2:30:8d:1d:ce:2f:
7e:cc:94:f9:7b:8c:50:6a:be:8a:21:22:27:5c:ff:22:92:4e:
b3:e9:b8:2e:df:e7:ff:12:c4:84:85:30:3e:08:71:ae:57:f8:
70:de:92:d6:e7:4d:d0:f7:10:eb:7e:4e:48:55:be:7b:c9:02:
c6:f6:ab:76:32:25:26:e0:12:9b:55:82:65:41:73:85:7a:42:
55:f2:d8:bf:54:86:9e:f3:d7:47:3e:7d:5e:ae:ed:9c:bb:d1:
60:e8:a7:54:31:29:ae:32:43:42:66:d3:21:03:b8:a9:78:a3:
17:d9:5a:60:a8:a4:6a:7a:d1:09:bf:17:4e:0e:14:11:9a:1a:
d2:75:00:07:5c:d5:99:8c:93:e7:65:9a:ab:4a:3e:49:4f:34:
f8:46:df:ea:3f:e9:8d:d4:f7:c7:8a:59:10:7e:43:a5:34:61:
e9:fb:f6:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ce/QbGXekIQRbkFnQgZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNTYwN2E0OTQyMDBmZjFmM2Q1OTllMjVmYzAxM2YzODY0
MGNkNDYwHhcNMjYwMzI5MTAwMDQ1WhcNMjYwMzMwMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg1M2JiYTdmZjYxMjY3ZmQ0ZjljZjY4ZjljNTQ2N2UzMTRhNDcyZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMrRRwxxg3BmLKUfDBv3/hNVmchP
F7ahC/nh+PNtzregAGEpTyGPDsP3mpgXYyv3Ey9rF2TyFqRw9j7SIXaoF+nckoYP
I2FIk/GxGCFFTzcjnjTLpqMV3AvxJY1UIjvd+PVpYJ8es8yO63A9GYIIc/AFhSJa
eJXJQOhmR7sz8Hb3Qditr1mDqS2gp/WKqDZFTsXDLGjYRlFhlv2QM7DN1vMgrA5T
sq8N055yw5RIneQ//4Tw910BBKpSe85+mYvq4WwgVUkCTmUgvaMPUbxd9yqKpuqa
3jyvUgYPX8nxEWNA47nGKdS+XonP56q+basfj0T17XdZBQKwE7e+tDtEGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO7p/9hJn/U+c9o+cVGfjFKRy+QMB8GA1UdIwQY
MBaAFONWB6SUIA/x89WZ4l/AE/OGQM1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYt
NTA0N2NiMzI3ZDllLzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYtNTA0N2NiMzI3ZDll
LzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEtnDkb2
j+plIRLiFiyZJbMgkqCtqtwngFcw5aVnWkjIVWGw/P5fJEeS5G/z0QiBwpEOtUmB
NhA8kTitPAack74mkFs50/hMqtoO0/6oLh9cKuxVsjCNHc4vfsyU+XuMUGq+iiEi
J1z/IpJOs+m4Lt/n/xLEhIUwPghxrlf4cN6S1udN0PcQ635OSFW+e8kCxvardjIl
JuASm1WCZUFzhXpCVfLYv1SGnvPXRz59Xq7tnLvRYOinVDEprjJDQmbTIQO4qXij
F9laYKikanrRCb8XTg4UEZoa0nUAB1zVmYyT52Waq0o+SU80+Ebf6j/pjdT3x4pZ
EH5DpTRh6fv2Mg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:15 2026 by rpki-client