Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File: SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier: AdbHopwwmoYGm20PQEowrhWFmmEj+36BDzdCC1dXhp8=
Subject key identifier: B1:AC:62:A9:23:5C:DC:D1:BA:41:49:FD:9E:4F:F8:38:CD:92:02:F7
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer: /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial: 019D38D2D5D275D3D4527E2386E66DA69255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number: 1117
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: 5fqX0xMI/INyqt8X2cJW1sHkZoABb9GWf6JGjjY1u6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d5:d2:75:d3:d4:52:7e:23:86:e6:6d:a6:92:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=b1ac62a9235cdcd1ba4149fd9e4ff838cd9202f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:2c:da:67:ad:02:ae:32:5f:8d:18:69:90:
c9:d5:ae:08:c7:19:7d:41:75:94:0c:2b:e1:94:ff:
54:ab:91:41:ab:f7:4c:d7:9b:f5:13:95:db:8e:a9:
c0:da:43:d7:a1:1d:54:63:9a:f1:47:3c:13:d4:68:
b2:2e:e8:c2:5f:de:4a:87:56:84:99:8b:08:3b:34:
1c:8c:f6:0c:63:fc:b6:d6:53:10:23:61:79:0e:96:
51:fe:15:ee:c5:a9:1f:1f:bc:6c:86:fb:dd:b9:41:
b8:2d:1e:34:44:8f:d5:63:70:8c:e0:2c:90:af:3a:
1e:2e:66:91:62:20:9f:cf:c9:f8:26:b1:10:28:91:
f0:0b:e1:5d:45:16:3a:d5:6a:88:29:3e:16:d2:d4:
90:cd:be:0f:fb:c3:ae:7e:29:7f:0b:91:66:11:90:
18:40:d8:ae:f1:ca:f7:c0:63:4f:bd:62:a5:93:f4:
72:23:25:e6:64:a9:10:33:cd:fd:f4:df:12:e3:b1:
f5:35:72:5d:1a:a8:a9:39:5f:07:3e:c3:87:46:b3:
ac:7b:f1:91:d6:2b:25:93:a7:47:b2:41:b3:e0:1e:
0d:68:37:65:e3:22:41:76:95:17:d0:fb:5a:2e:66:
b2:32:29:46:63:cf:18:33:3b:a4:81:94:87:dd:b0:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:62:A9:23:5C:DC:D1:BA:41:49:FD:9E:4F:F8:38:CD:92:02:F7
X509v3 Authority Key Identifier:
keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:68:1d:4f:81:4d:ce:36:91:39:c1:03:08:d3:72:42:dc:3d:
ba:73:1f:22:5e:66:18:ae:85:56:4b:95:ce:78:b5:0c:a2:b8:
eb:43:37:e7:fc:95:94:17:d8:8f:b9:a7:78:99:7a:20:3d:f3:
fb:e6:27:6d:2d:3b:29:2d:04:0f:74:7a:ec:28:ff:ab:dc:52:
42:96:36:a2:a3:e2:fb:c5:f5:3f:7e:e4:e4:51:c4:cb:3e:c5:
ff:de:53:d3:7b:a1:f7:66:03:00:30:cc:f3:ed:fe:33:ea:04:
aa:8b:0d:31:82:48:d8:dc:c8:43:ed:48:ae:d0:91:ce:03:f5:
24:d8:b0:5a:f1:15:11:cf:e0:c5:86:19:01:03:74:c8:72:b6:
d0:02:a8:06:f0:1c:a4:85:1e:1b:8b:1d:fe:a1:eb:7b:46:db:
bb:00:8d:51:cd:3b:65:16:f3:ab:0a:68:3a:fa:a2:4c:24:cd:
64:b0:b4:c9:9c:be:17:c3:79:dc:f6:3e:d7:17:c9:64:8f:b9:
43:86:1b:da:b8:2a:61:1c:a8:a7:7f:99:a5:6f:b8:d8:97:1e:
44:57:7b:3c:7e:b8:6c:43:e9:4a:80:c3:94:68:17:4e:68:3f:
9b:15:d1:b5:d8:eb:4a:64:e8:1e:bf:b0:6c:42:30:03:7c:66:
37:c0:de:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040tXSddPUUn4jhuZtppJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMzgxYmFhMGEwYWRkMzJhOWY5NDE0ZjliMmM5YTVhMzIy
NTM0MmUwHhcNMjYwMzI5MDkwMDM0WhcNMjYwMzMwMDkwMDM0WjAzMTEwLwYDVQQD
EyhiMWFjNjJhOTIzNWNkY2QxYmE0MTQ5ZmQ5ZTRmZjgzOGNkOTIwMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/ks2metAq4yX40YaZDJ1a4Ixxl9
QXWUDCvhlP9Uq5FBq/dM15v1E5XbjqnA2kPXoR1UY5rxRzwT1GiyLujCX95Kh1aE
mYsIOzQcjPYMY/y21lMQI2F5DpZR/hXuxakfH7xshvvduUG4LR40RI/VY3CM4CyQ
rzoeLmaRYiCfz8n4JrEQKJHwC+FdRRY61WqIKT4W0tSQzb4P+8Oufil/C5FmEZAY
QNiu8cr3wGNPvWKlk/RyIyXmZKkQM8399N8S47H1NXJdGqipOV8HPsOHRrOse/GR
1islk6dHskGz4B4NaDdl4yJBdpUX0PtaLmayMilGY88YMzukgZSH3bCP9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGsYqkjXNzRukFJ/Z5P+DjNkgL3MB8GA1UdIwQY
MBaAFEs4G6oKCt0yqflBT5ssmloyJTQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMTZjMTUtZGU3Ni00MzNkLWI5N2Yt
NjJmOWY0NDZhZDAxLzEvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMTZjMTUtZGU3Ni00MzNkLWI5N2YtNjJmOWY0NDZhZDAx
LzEvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2gdT4FN
zjaROcEDCNNyQtw9unMfIl5mGK6FVkuVzni1DKK460M35/yVlBfYj7mneJl6ID3z
++YnbS07KS0ED3R67Cj/q9xSQpY2oqPi+8X1P37k5FHEyz7F/95T03uh92YDADDM
8+3+M+oEqosNMYJI2NzIQ+1IrtCRzgP1JNiwWvEVEc/gxYYZAQN0yHK20AKoBvAc
pIUeG4sd/qHre0bbuwCNUc07ZRbzqwpoOvqiTCTNZLC0yZy+F8N53PY+1xfJZI+5
Q4Yb2rgqYRyop3+ZpW+42JceRFd7PH64bEPpSoDDlGgXTmg/mxXRtdjrSmToHr+w
bEIwA3xmN8DedA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:01 2026 by rpki-client