Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
File: rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft (raw, json)
Hash identifier: gTrI8Qp7oZD6mefFhKUtKtWw+z61GB9TjRguoSO9tEk=
Subject key identifier: 9D:D1:AB:55:EE:A0:1D:B2:00:28:40:D6:3F:4D:1B:49:43:30:16:11
Authority key identifier: AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
Certificate issuer: /CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Certificate serial: 019CAD5971599877EA1115ABD660EDF397AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:00:45 +0000
Manifest this update: Mon 02 Mar 2026 07:00:45 +0000
Manifest next update: Tue 03 Mar 2026 07:00:45 +0000
Files and hashes: 1: rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl (hash: 2Faas/yfT7fXd+exxB5ssJBVtACp2fSUqm0QhIuinsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:71:59:98:77:ea:11:15:ab:d6:60:ed:f3:97:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Validity
Not Before: Mar 2 07:00:45 2026 GMT
Not After : Mar 3 07:00:45 2026 GMT
Subject: CN=9dd1ab55eea01db2002840d63f4d1b4943301611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:1f:1b:b5:92:a2:81:3c:0e:03:ff:c8:6c:
f4:4b:43:cd:5b:a6:c5:28:05:c4:db:40:88:ef:53:
34:75:d0:9d:b5:7c:d2:98:90:4d:99:7c:96:2b:e6:
0a:6d:3a:ba:d0:f5:04:83:76:08:2d:3e:d5:7e:39:
e0:d2:58:f6:fd:68:bc:25:59:d7:09:2f:4e:1b:23:
14:71:2e:ba:92:6e:0b:75:ce:61:d5:55:b4:d4:26:
f0:db:51:bc:56:9a:4d:8f:9f:be:59:82:d0:cf:99:
1d:16:4b:14:ba:1c:90:3e:5b:ec:ff:05:2c:9b:ac:
0b:e8:6d:97:28:3e:6b:c3:9f:67:95:fe:73:a7:3c:
ca:55:c8:33:ab:f9:fd:44:6c:5a:6d:45:0e:5b:df:
f3:0c:33:85:cd:c0:c0:b1:fc:1b:97:36:25:ee:47:
b4:18:51:f1:5f:a8:cc:27:34:6d:33:f0:a5:ff:56:
da:9c:3d:26:94:99:4c:9c:27:bb:7c:02:ab:f1:93:
35:3a:a7:cf:bc:26:3f:4b:6a:f5:ca:d9:5c:31:4c:
04:1b:52:9a:d6:30:58:6d:41:af:1b:fd:57:c9:6e:
e0:5a:41:60:25:5b:41:f0:2c:81:64:db:06:ac:43:
8d:3c:c6:cf:22:93:f0:37:e0:13:00:07:e7:a7:a8:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:AB:55:EE:A0:1D:B2:00:28:40:D6:3F:4D:1B:49:43:30:16:11
X509v3 Authority Key Identifier:
keyid:AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cc:62:bd:c4:7b:82:9b:4e:b6:35:c4:97:d3:ab:cd:7f:d8:
27:73:7f:fa:9b:b7:00:53:ae:eb:59:42:12:34:ad:24:d4:24:
fb:86:ce:7a:90:9b:a4:ff:de:59:24:44:fe:4a:9c:10:13:c2:
14:43:8b:31:32:b7:72:65:85:7e:68:3e:f4:36:76:00:e3:60:
d3:59:d2:0c:79:6f:b9:ca:86:06:4b:f2:10:a7:42:d6:3d:3e:
30:80:50:f5:b9:bf:15:27:12:5c:4e:71:ea:49:b4:86:f0:14:
62:06:64:42:12:af:99:90:4d:2b:6c:10:cd:95:44:50:18:57:
e1:38:23:55:7a:cc:f5:53:31:95:cc:bc:f4:0f:5a:72:d4:5a:
d2:68:a1:71:0a:2a:5c:85:f9:ff:17:8b:c4:bc:c6:0d:09:cb:
2d:e2:bd:cc:cf:20:37:b4:77:4f:53:68:2b:6a:a3:71:9d:83:
6b:3f:ff:c4:ab:05:24:55:bb:a3:0c:f4:93:d8:1a:71:0c:6e:
84:8e:c7:3c:64:24:fb:95:96:ed:7d:04:11:aa:1f:d1:19:e8:
c6:fd:9a:63:17:16:35:03:e3:eb:a4:1d:aa:04:ef:6d:26:cd:
d2:8d:ec:53:97:65:3a:24:f6:e9:4f:b2:be:3c:80:db:b5:ca:
41:90:29:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWXFZmHfqERWr1mDt85etMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzBmYjQzODhlZTY3MTQ0YWUwNGRkYzg2ODEyZDYzZTAy
OGY0NzgwHhcNMjYwMzAyMDcwMDQ1WhcNMjYwMzAzMDcwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZGQxYWI1NWVlYTAxZGIyMDAyODQwZDYzZjRkMWI0OTQzMzAxNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlEfG7WSooE8DgP/yGz0S0PNW6bF
KAXE20CI71M0ddCdtXzSmJBNmXyWK+YKbTq60PUEg3YILT7Vfjng0lj2/Wi8JVnX
CS9OGyMUcS66km4Ldc5h1VW01Cbw21G8VppNj5++WYLQz5kdFksUuhyQPlvs/wUs
m6wL6G2XKD5rw59nlf5zpzzKVcgzq/n9RGxabUUOW9/zDDOFzcDAsfwblzYl7ke0
GFHxX6jMJzRtM/Cl/1banD0mlJlMnCe7fAKr8ZM1OqfPvCY/S2r1ytlcMUwEG1Ka
1jBYbUGvG/1XyW7gWkFgJVtB8CyBZNsGrEONPMbPIpPwN+ATAAfnp6jqDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3Rq1XuoB2yAChA1j9NG0lDMBYRMB8GA1UdIwQY
MBaAFK0w+0OI7mcUSuBN3IaBLWPgKPR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclREN1E0anVaeFJLNEUzY2hvRXRZLUFvOUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMzQxYTYtOThhMi00YjFlLTliYTQt
YjY2MDQ0YWRiY2IxLzEvclREN1E0anVaeFJLNEUzY2hvRXRZLUFvOUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMzQxYTYtOThhMi00YjFlLTliYTQtYjY2MDQ0YWRiY2Ix
LzEvclREN1E0anVaeFJLNEUzY2hvRXRZLUFvOUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMxivcR7
gptOtjXEl9OrzX/YJ3N/+pu3AFOu61lCEjStJNQk+4bOepCbpP/eWSRE/kqcEBPC
FEOLMTK3cmWFfmg+9DZ2AONg01nSDHlvucqGBkvyEKdC1j0+MIBQ9bm/FScSXE5x
6km0hvAUYgZkQhKvmZBNK2wQzZVEUBhX4TgjVXrM9VMxlcy89A9actRa0mihcQoq
XIX5/xeLxLzGDQnLLeK9zM8gN7R3T1NoK2qjcZ2Daz//xKsFJFW7owz0k9gacQxu
hI7HPGQk+5WW7X0EEaof0Rnoxv2aYxcWNQPj66QdqgTvbSbN0o3sU5dlOiT26U+y
vjyA27XKQZApHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:15 2026 by rpki-client