Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: XncxnCKwvEupC3uALJbBlHsCmnblUACyC6e2qNb7IV4=
Subject key identifier: 6F:25:35:EF:3E:35:DA:33:DA:4E:81:3E:38:41:98:10:DA:01:30:27
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 019D39099D9A3C66DC2DD0483387665AF4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 17EC
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: D8i/p5PLYoz90J9pj77q8TEHWHNnwJGOJSGmpX5Djq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9d:9a:3c:66:dc:2d:d0:48:33:87:66:5a:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=6f2535ef3e35da33da4e813e38419810da013027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:30:9d:7f:cd:ff:91:b2:05:67:cf:f9:ea:
83:3b:03:dd:f7:dc:8a:e5:32:a6:a9:1f:04:31:a0:
f0:45:42:d4:34:7e:bb:63:a7:a3:db:38:3d:da:a9:
15:02:a5:34:01:1d:6c:f9:6a:d9:6c:65:62:19:44:
34:18:dd:79:7a:78:f1:13:d0:5c:f0:49:66:04:0f:
e4:8f:60:c1:e3:1a:71:9b:88:fd:46:68:ab:cd:bb:
4f:9c:b2:05:6f:87:2b:98:d3:9f:92:c3:c5:a9:f6:
40:97:57:66:59:e4:1b:85:47:10:05:d1:46:c9:ed:
ad:8f:da:1c:99:fe:3f:d5:ff:e7:c8:83:da:b4:bf:
ec:66:57:7c:60:5e:60:fe:84:52:f9:f4:b3:f3:77:
75:ab:57:95:7c:01:e3:53:58:c5:c2:fa:d8:3f:54:
41:f6:24:8e:45:91:e2:04:f7:e5:6b:2d:0a:36:55:
b0:d0:eb:ed:73:de:16:0a:15:a1:c1:d4:27:85:df:
54:95:31:e0:ca:15:c4:92:ef:ed:07:d7:0a:96:61:
f1:18:2f:37:c3:a6:9f:15:55:ae:0e:98:d6:fd:3a:
f0:5b:f8:04:5a:4e:e9:9f:5d:1f:c2:55:98:55:58:
f7:73:63:aa:43:17:c5:7c:3c:dc:73:de:7c:61:e5:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:25:35:EF:3E:35:DA:33:DA:4E:81:3E:38:41:98:10:DA:01:30:27
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:73:31:79:60:d4:f2:65:fa:73:25:4f:03:76:eb:90:38:a2:
c9:bd:f9:c6:f7:69:37:8e:1f:8c:2a:b3:aa:54:93:7d:d0:ce:
d3:36:5c:c3:55:2b:5d:e4:42:ff:a6:ad:ef:4b:5d:9c:09:d9:
ae:d8:cf:69:84:01:37:90:3b:a0:07:9a:83:b1:aa:6d:dc:a2:
8d:80:20:5e:56:1e:92:6f:45:01:90:e7:52:8f:27:a9:db:ae:
92:77:0c:17:ea:d8:9d:17:ed:5c:5e:81:c4:54:a9:f2:55:11:
db:a5:16:2b:c3:ad:9e:39:21:cb:28:2e:8b:8c:53:b5:37:b8:
8f:19:15:c4:84:6a:f4:a2:37:af:1d:63:f9:37:67:ec:9e:c6:
92:ae:66:f8:02:71:6e:ed:43:81:9d:40:9f:69:3b:58:eb:f8:
c1:bf:09:be:0a:30:c3:18:1b:c8:98:1c:5f:a3:60:7b:b3:10:
eb:e1:dd:03:12:d1:be:21:7a:6a:2f:02:b1:da:b8:c7:69:ba:
a0:da:74:35:ee:b0:b3:7c:66:a9:96:f4:11:ee:e5:30:79:aa:
ae:ba:9d:02:43:b4:83:b4:9d:c1:18:d4:3b:ad:84:5a:fc:e8:
f2:a6:0b:f0:0a:05:00:72:56:f9:d6:1b:05:b9:fa:18:7a:b8:
32:3b:c1:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CZ2aPGbcLdBIM4dmWvSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2UyNzE2Y2VhZDhjMDA4NTQ2MjI0YmU0YjU2ODcwODY4
M2ZmNGIwHhcNMjYwMzI5MTAwMDI0WhcNMjYwMzMwMTAwMDI0WjAzMTEwLwYDVQQD
Eyg2ZjI1MzVlZjNlMzVkYTMzZGE0ZTgxM2UzODQxOTgxMGRhMDEzMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNswnX/N/5GyBWfP+eqDOwPd99yK
5TKmqR8EMaDwRULUNH67Y6ej2zg92qkVAqU0AR1s+WrZbGViGUQ0GN15enjxE9Bc
8ElmBA/kj2DB4xpxm4j9RmirzbtPnLIFb4crmNOfksPFqfZAl1dmWeQbhUcQBdFG
ye2tj9ocmf4/1f/nyIPatL/sZld8YF5g/oRS+fSz83d1q1eVfAHjU1jFwvrYP1RB
9iSORZHiBPflay0KNlWw0Ovtc94WChWhwdQnhd9UlTHgyhXEku/tB9cKlmHxGC83
w6afFVWuDpjW/TrwW/gEWk7pn10fwlWYVVj3c2OqQxfFfDzcc958YeVnjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8lNe8+Ndoz2k6BPjhBmBDaATAnMB8GA1UdIwQY
MBaAFP7OJxbOrYwAhUYiS+S1aHCGg/9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NDMxYTItZDBkOC00MmRmLWJjYzgt
MTdkNjMzZDhmMzlmLzEvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83NDMxYTItZDBkOC00MmRmLWJjYzgtMTdkNjMzZDhmMzlm
LzEvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHMxeWDU
8mX6cyVPA3brkDiiyb35xvdpN44fjCqzqlSTfdDO0zZcw1UrXeRC/6at70tdnAnZ
rtjPaYQBN5A7oAeag7GqbdyijYAgXlYekm9FAZDnUo8nqduukncMF+rYnRftXF6B
xFSp8lUR26UWK8Otnjkhyygui4xTtTe4jxkVxIRq9KI3rx1j+Tdn7J7Gkq5m+AJx
bu1DgZ1An2k7WOv4wb8JvgowwxgbyJgcX6Nge7MQ6+HdAxLRviF6ai8Csdq4x2m6
oNp0Ne6ws3xmqZb0Ee7lMHmqrrqdAkO0g7SdwRjUO62EWvzo8qYL8AoFAHJW+dYb
Bbn6GHq4MjvB/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:20 2026 by rpki-client