Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: tLbK6yAMky4D+dryEXQQatl7xv6TpVr1iuhoc71NKdI=
Subject key identifier: 86:E2:76:B5:D9:2E:4A:D4:D5:F6:1B:3B:A8:C5:FD:01:1A:54:72:6D
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 019D37532E5519E9E7CD3E63C29D3BFEBD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 178E
Signing time: Sun 29 Mar 2026 02:01:31 +0000
Manifest this update: Sun 29 Mar 2026 02:01:31 +0000
Manifest next update: Mon 30 Mar 2026 02:01:31 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: 3qB7FOijb+WNPmCv2YKjg0PMWWdmCsLPgKS5gNrivtQ=)
2: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (hash: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:2e:55:19:e9:e7:cd:3e:63:c2:9d:3b:fe:bd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Mar 29 02:01:31 2026 GMT
Not After : Mar 30 02:01:31 2026 GMT
Subject: CN=86e276b5d92e4ad4d5f61b3ba8c5fd011a54726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:dc:57:2e:39:df:ea:f1:7a:e8:65:69:f7:
f9:29:d5:9f:e8:0e:2e:51:7b:e4:65:8b:2b:97:53:
da:5a:0b:b3:8f:05:65:5e:8a:31:4d:af:87:bc:ea:
95:09:f9:23:ed:aa:7b:e5:d3:ce:af:ba:cd:7f:b2:
54:b1:39:c7:ab:51:1a:89:67:7c:e7:31:e8:7e:2f:
e3:70:ce:a7:72:c6:df:f9:39:87:50:f0:21:eb:b4:
67:11:1d:fc:51:8f:57:09:5b:2c:c9:70:fe:fd:f1:
7b:ce:5b:c2:69:ca:87:1b:f4:01:98:a6:5c:31:e1:
7f:7b:2c:d1:5c:f1:c1:c7:88:df:c9:a8:0e:fe:fd:
9c:4b:8d:16:88:40:ea:68:07:be:04:95:f5:04:5b:
76:df:cf:76:d6:ca:2a:c8:9c:82:03:b1:27:45:c6:
d0:f2:c6:d6:1f:82:0d:8f:05:bd:9b:fd:b9:f7:3a:
98:d9:e4:35:15:d4:83:ed:8d:44:7f:ad:1f:0b:e2:
ad:03:6a:eb:3c:c7:c3:dc:04:d5:af:38:75:41:c0:
a7:36:ee:76:e6:dc:b7:0e:a1:c3:15:61:3b:3c:03:
22:33:05:50:09:ea:94:ba:82:59:d6:21:46:88:e4:
c7:a7:23:a7:f0:81:8c:5b:d3:a2:77:63:d4:c9:f5:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E2:76:B5:D9:2E:4A:D4:D5:F6:1B:3B:A8:C5:FD:01:1A:54:72:6D
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8a:70:03:81:91:47:aa:36:01:f4:8b:31:68:0a:aa:4b:cc:
d5:ad:31:b3:dc:7b:f4:66:3d:39:94:a6:fa:f2:8b:e2:4e:e2:
39:52:57:6f:e8:6a:b6:0b:d2:c5:cb:db:39:c0:27:e8:27:8d:
c7:e7:37:ab:c2:68:93:b7:fa:44:19:89:6d:85:a5:0d:26:ee:
71:ca:0b:91:01:b6:ff:d9:f1:2a:c2:34:ce:8d:dc:f4:0c:c7:
4c:73:84:a9:d9:99:5d:c9:83:ea:e4:a7:2c:6d:83:5a:07:f7:
a0:69:e6:f8:1e:9a:bf:e4:39:3a:c0:da:0f:87:5a:24:dc:46:
b9:88:59:f4:57:98:40:df:8a:b7:70:7a:c6:e6:39:43:bd:b3:
9e:62:41:ea:38:fb:f3:e0:5e:62:f7:c9:73:58:1b:4f:d8:f7:
c2:14:df:5e:bb:ad:e2:db:24:b4:c5:5c:e5:78:db:65:f4:87:
2c:12:97:f1:33:ee:b9:f2:3f:05:0c:b4:19:94:4c:63:84:95:
cb:06:54:fd:79:68:9e:84:a0:e0:34:50:bc:1c:e5:e4:35:9d:
7e:ed:5e:fe:63:75:f6:a6:2e:4b:5f:28:9b:b3:d5:63:e0:71:
de:20:62:d1:b7:f6:46:1b:d4:a0:81:76:b5:82:32:07:b6:80:
34:ed:0e:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uy5VGennzT5jwp07/r0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx
MTA2YmIwHhcNMjYwMzI5MDIwMTMxWhcNMjYwMzMwMDIwMTMxWjAzMTEwLwYDVQQD
Eyg4NmUyNzZiNWQ5MmU0YWQ0ZDVmNjFiM2JhOGM1ZmQwMTFhNTQ3MjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N3cVy453+rxeuhlaff5KdWf6A4u
UXvkZYsrl1PaWguzjwVlXooxTa+HvOqVCfkj7ap75dPOr7rNf7JUsTnHq1EaiWd8
5zHofi/jcM6ncsbf+TmHUPAh67RnER38UY9XCVssyXD+/fF7zlvCacqHG/QBmKZc
MeF/eyzRXPHBx4jfyagO/v2cS40WiEDqaAe+BJX1BFt238921soqyJyCA7EnRcbQ
8sbWH4INjwW9m/259zqY2eQ1FdSD7Y1Ef60fC+KtA2rrPMfD3ATVrzh1QcCnNu52
5ty3DqHDFWE7PAMiMwVQCeqUuoJZ1iFGiOTHpyOn8IGMW9Oid2PUyfUf5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbidrXZLkrU1fYbO6jF/QEaVHJtMB8GA1UdIwQY
MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt
MGZlODM5OWRlNzI3LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3
LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIpwA4GR
R6o2AfSLMWgKqkvM1a0xs9x79GY9OZSm+vKL4k7iOVJXb+hqtgvSxcvbOcAn6CeN
x+c3q8Jok7f6RBmJbYWlDSbuccoLkQG2/9nxKsI0zo3c9AzHTHOEqdmZXcmD6uSn
LG2DWgf3oGnm+B6av+Q5OsDaD4daJNxGuYhZ9FeYQN+Kt3B6xuY5Q72znmJB6jj7
8+BeYvfJc1gbT9j3whTfXrut4tsktMVc5XjbZfSHLBKX8TPuufI/BQy0GZRMY4SV
ywZU/XlonoSg4DRQvBzl5DWdfu1e/mN19qYuS18om7PVY+Bx3iBi0bf2RhvUoIF2
tYIyB7aANO0OYg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:48 2026 by rpki-client