Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: ce3gzxMNW8N2PKyCkJB6S2TzKkDmAqb2Zm1ZapspoUg=
Subject key identifier: E5:43:F2:F5:D9:4F:98:86:52:50:67:D9:3B:8E:20:77:E9:C7:0C:B6
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 019D98F4C74A270A76054ED0607327873F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 1021
Signing time: Fri 17 Apr 2026 01:01:11 +0000
Manifest this update: Fri 17 Apr 2026 01:01:11 +0000
Manifest next update: Sat 18 Apr 2026 01:01:11 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: cFHMVv53AeuKEFWFBLNJAXb8iS0NuTIsDwZducVX48I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c7:4a:27:0a:76:05:4e:d0:60:73:27:87:3f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Apr 17 01:01:11 2026 GMT
Not After : Apr 18 01:01:11 2026 GMT
Subject: CN=e543f2f5d94f9886525067d93b8e2077e9c70cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:96:9f:3e:1b:ca:ff:89:c1:3e:9c:c7:a2:
f2:2f:0c:83:9b:16:f5:f2:4c:f4:b2:c5:b9:13:bc:
79:1d:42:78:2a:c0:41:c1:0c:bd:1a:8e:bc:a5:9e:
ad:44:70:12:17:59:c3:97:e8:c3:c6:fa:85:f4:c0:
83:30:48:2c:d2:f2:ed:de:60:69:aa:1b:3b:35:96:
5a:9e:1a:b0:62:3a:d1:23:77:86:f1:97:8c:ab:b0:
ee:12:cb:ad:cf:ac:2d:13:2f:a2:9b:f9:9d:3d:87:
d5:e1:c3:a5:1c:e2:05:b8:b9:6b:e9:ab:43:49:55:
02:0f:d1:e6:6c:0a:e3:10:35:db:07:7a:46:64:27:
3f:1e:67:1d:5a:93:98:96:a1:65:3c:35:e7:f4:fa:
48:b9:4a:de:48:44:49:3c:44:09:aa:22:4f:5d:ab:
a9:8a:2d:b5:4f:56:8f:6b:0f:6f:3d:11:cb:50:14:
a4:03:9d:53:85:5f:9a:ad:ae:96:ab:f5:0a:0f:6d:
d5:a0:07:21:67:0e:78:7f:09:ea:72:e3:b3:6a:3c:
9b:fa:b9:21:a0:eb:43:38:ae:b5:52:0e:21:94:06:
de:62:43:48:03:9b:f4:b7:dc:f1:58:0f:63:93:42:
79:6c:f4:19:e5:48:2e:5f:07:17:e6:96:f7:39:d2:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:43:F2:F5:D9:4F:98:86:52:50:67:D9:3B:8E:20:77:E9:C7:0C:B6
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0f:32:7a:a0:65:d2:07:94:16:9f:08:86:73:11:54:e3:61:
ca:4d:ac:c0:f2:b6:6c:19:70:a3:be:0e:c4:2b:ac:96:b7:cb:
4a:b2:86:61:ff:3c:ac:3a:16:08:64:c9:23:e8:83:43:f0:a3:
99:9e:d2:87:fb:20:e4:81:06:e9:b6:6d:e1:00:88:87:b2:9e:
e5:7c:4c:ba:d0:7f:eb:04:64:97:28:b6:8c:1c:af:9d:c6:5f:
08:15:e5:b4:77:9f:7e:71:d0:e4:91:5a:62:eb:80:df:7a:a0:
84:b7:b1:76:e1:5b:b2:11:87:df:d1:08:3d:d2:a7:bb:b0:51:
2d:a3:88:d0:ee:3a:51:5e:c3:f5:bf:0c:a2:4a:99:97:49:fe:
35:28:cd:97:6b:ac:d7:14:21:2a:f6:b2:86:fb:52:45:8b:f8:
f6:33:f7:31:f8:95:c3:04:a1:4c:b7:22:0e:2d:9a:22:8a:49:
68:5e:73:99:5e:aa:f6:0d:59:51:a0:ec:d5:81:8d:03:f2:bb:
1b:6d:53:f9:12:e2:a1:e1:44:1b:6f:43:f0:aa:bd:17:5c:5e:
53:56:c4:98:1d:e3:6e:65:b1:6d:69:ad:d5:e1:9b:cb:9f:50:
16:6b:aa:cc:da:bf:34:e2:f6:09:d7:c6:1b:5e:6a:93:53:80:
14:5d:61:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9MdKJwp2BU7QYHMnhz93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMmVmNTFlNmIxNGEzZWViZmI0ODk4ZTBmYTgxM2FiNjc4
ODUxMzYwHhcNMjYwNDE3MDEwMTExWhcNMjYwNDE4MDEwMTExWjAzMTEwLwYDVQQD
EyhlNTQzZjJmNWQ5NGY5ODg2NTI1MDY3ZDkzYjhlMjA3N2U5YzcwY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMeWnz4byv+JwT6cx6LyLwyDmxb1
8kz0ssW5E7x5HUJ4KsBBwQy9Go68pZ6tRHASF1nDl+jDxvqF9MCDMEgs0vLt3mBp
qhs7NZZanhqwYjrRI3eG8ZeMq7DuEsutz6wtEy+im/mdPYfV4cOlHOIFuLlr6atD
SVUCD9HmbArjEDXbB3pGZCc/HmcdWpOYlqFlPDXn9PpIuUreSERJPEQJqiJPXaup
ii21T1aPaw9vPRHLUBSkA51ThV+ara6Wq/UKD23VoAchZw54fwnqcuOzajyb+rkh
oOtDOK61Ug4hlAbeYkNIA5v0t9zxWA9jk0J5bPQZ5UguXwcX5pb3OdIzcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVD8vXZT5iGUlBn2TuOIHfpxwy2MB8GA1UdIwQY
MBaAFPwu9R5rFKPuv7SJjg+oE6tniFE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0M3MUhtc1VvLTZfdEltT0Q2Z1RxMmVJVVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84M2UxNGItOWE0YS00MGM2LWExYTAt
YjVjOWQ3ZTU2NWE5LzEvX0M3MUhtc1VvLTZfdEltT0Q2Z1RxMmVJVVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC84M2UxNGItOWE0YS00MGM2LWExYTAtYjVjOWQ3ZTU2NWE5
LzEvX0M3MUhtc1VvLTZfdEltT0Q2Z1RxMmVJVVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbw8yeqBl
0geUFp8IhnMRVONhyk2swPK2bBlwo74OxCuslrfLSrKGYf88rDoWCGTJI+iDQ/Cj
mZ7Sh/sg5IEG6bZt4QCIh7Ke5XxMutB/6wRklyi2jByvncZfCBXltHeffnHQ5JFa
YuuA33qghLexduFbshGH39EIPdKnu7BRLaOI0O46UV7D9b8MokqZl0n+NSjNl2us
1xQhKvayhvtSRYv49jP3MfiVwwShTLciDi2aIopJaF5zmV6q9g1ZUaDs1YGNA/K7
G21T+RLioeFEG29D8Kq9F1xeU1bEmB3jbmWxbWmt1eGby59QFmuqzNq/NOL2CdfG
G15qk1OAFF1hCA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:39 2026 by rpki-client