Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier: ysmTiOFZOk2CdvMaNDVXOHSIpv0DEZ+oS+dORUqpWbc=
Subject key identifier: 6C:73:77:10:29:7C:F9:78:A7:7E:D9:DF:4F:6C:FC:42:CB:25:60:22
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial: 019D9AE31C169F08C12B5A35CC9B64881332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number: 15FA
Signing time: Fri 17 Apr 2026 10:01:08 +0000
Manifest this update: Fri 17 Apr 2026 10:01:08 +0000
Manifest next update: Sat 18 Apr 2026 10:01:08 +0000
Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: +ELiXsjuEddyxxbipTOFHXa01qp0pJyE+ux9HCs2uE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1c:16:9f:08:c1:2b:5a:35:cc:9b:64:88:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Validity
Not Before: Apr 17 10:01:08 2026 GMT
Not After : Apr 18 10:01:08 2026 GMT
Subject: CN=6c737710297cf978a77ed9df4f6cfc42cb256022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1c:ad:ce:ec:fa:58:36:9f:5f:79:71:6c:2a:
70:29:1d:fe:63:35:81:7e:61:d4:db:83:74:59:33:
7d:75:12:9b:5d:7b:d4:02:79:5d:6f:42:ba:2c:0c:
e9:81:a2:dc:6e:45:91:4d:e1:a9:8f:c3:45:17:93:
d3:c4:89:25:2b:21:cd:1b:b6:2a:78:4a:f4:77:13:
27:9e:ff:43:46:17:f8:e9:83:00:db:62:5e:73:a8:
ac:b3:d0:be:91:3b:31:cc:df:89:eb:46:a4:1f:d9:
2e:93:30:d7:c0:e8:44:f7:b4:c1:d9:36:29:b5:ec:
03:27:2b:98:0b:c1:ad:d0:eb:33:3b:ca:da:f3:21:
9c:04:27:19:43:16:31:4e:a2:d9:3a:75:9a:59:30:
04:b5:6c:b1:27:73:c4:b4:58:e2:90:a5:8f:cf:b1:
04:ae:28:57:92:af:bf:9f:b9:0f:2e:d1:46:75:cd:
b6:ff:cd:8b:ce:e6:55:51:52:c9:18:ad:42:61:93:
9e:eb:d4:b1:44:3f:55:57:fe:41:28:89:e2:21:40:
c5:fe:5c:12:fe:41:28:17:f9:81:40:a7:fe:62:97:
f2:da:e7:2e:47:ba:43:d9:d7:50:8f:d9:ab:ab:88:
b0:14:50:d0:33:ee:9f:51:f6:81:6c:54:7c:a0:51:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:77:10:29:7C:F9:78:A7:7E:D9:DF:4F:6C:FC:42:CB:25:60:22
X509v3 Authority Key Identifier:
keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:30:2f:d0:1a:46:96:f0:e0:57:ef:48:0e:e4:f2:c8:12:58:
d2:44:55:52:e1:c7:0d:93:31:07:97:50:df:10:b7:f0:ea:aa:
fd:6a:c6:18:02:57:fb:27:3c:6a:03:ab:a6:03:82:0e:31:3f:
d7:aa:1e:16:4c:64:54:2b:46:82:f0:9b:d8:89:d3:48:13:28:
40:86:f6:e2:e2:0f:23:37:b9:b3:05:0f:0d:05:9f:22:d7:47:
d0:0b:0b:fc:33:59:05:5b:ec:1d:96:3c:b5:dd:87:eb:4d:d8:
2c:d8:51:cc:b4:8d:df:17:49:8d:be:22:a3:48:19:b4:ce:71:
bc:28:0a:f7:48:fd:d6:04:2c:8d:54:34:1f:59:32:25:a5:dc:
cc:75:85:3f:2e:dd:51:38:ad:57:1d:51:6f:71:5a:ac:f0:8b:
82:b1:94:cd:c4:39:f2:21:ce:c1:77:f7:a2:7d:7d:e4:3c:af:
68:eb:96:38:d1:22:33:da:eb:12:97:b7:18:b8:17:3a:5d:2b:
5c:93:67:c8:4a:c8:a6:fb:7f:d1:bc:dd:2c:3e:28:b5:21:00:
af:46:8b:58:49:a7:6a:02:2a:2f:6a:e8:70:16:55:8f:c0:8d:
40:f7:5b:22:b9:aa:22:ed:0c:a1:da:9b:4a:04:9f:f7:5c:2d:
4c:ad:ec:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4xwWnwjBK1o1zJtkiBMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNWMwNTcwYjNiNzc3M2QxZTExODgyZTdkZDJjNjI1NTM3
ZWIwOWMwHhcNMjYwNDE3MTAwMTA4WhcNMjYwNDE4MTAwMTA4WjAzMTEwLwYDVQQD
Eyg2YzczNzcxMDI5N2NmOTc4YTc3ZWQ5ZGY0ZjZjZmM0MmNiMjU2MDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Rytzuz6WDafX3lxbCpwKR3+YzWB
fmHU24N0WTN9dRKbXXvUAnldb0K6LAzpgaLcbkWRTeGpj8NFF5PTxIklKyHNG7Yq
eEr0dxMnnv9DRhf46YMA22Jec6iss9C+kTsxzN+J60akH9kukzDXwOhE97TB2TYp
tewDJyuYC8Gt0OszO8ra8yGcBCcZQxYxTqLZOnWaWTAEtWyxJ3PEtFjikKWPz7EE
rihXkq+/n7kPLtFGdc22/82LzuZVUVLJGK1CYZOe69SxRD9VV/5BKIniIUDF/lwS
/kEoF/mBQKf+Ypfy2ucuR7pD2ddQj9mrq4iwFFDQM+6fUfaBbFR8oFHj3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxzdxApfPl4p37Z309s/ELLJWAiMB8GA1UdIwQY
MBaAFONcBXCzt3c9HhGILn3SxiVTfrCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMmY1NzktNzUwMS00YTViLThkZDct
ZjY5MTI4YTkxOTgzLzEvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jMmY1NzktNzUwMS00YTViLThkZDctZjY5MTI4YTkxOTgz
LzEvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjAv0BpG
lvDgV+9IDuTyyBJY0kRVUuHHDZMxB5dQ3xC38Oqq/WrGGAJX+yc8agOrpgOCDjE/
16oeFkxkVCtGgvCb2InTSBMoQIb24uIPIze5swUPDQWfItdH0AsL/DNZBVvsHZY8
td2H603YLNhRzLSN3xdJjb4io0gZtM5xvCgK90j91gQsjVQ0H1kyJaXczHWFPy7d
UTitVx1Rb3FarPCLgrGUzcQ58iHOwXf3on195DyvaOuWONEiM9rrEpe3GLgXOl0r
XJNnyErIpvt/0bzdLD4otSEAr0aLWEmnagIqL2rocBZVj8CNQPdbIrmqIu0Modqb
SgSf91wtTK3sjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:49 2026 by rpki-client