Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
File: sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json)
Hash identifier: 1uiyZZeImDil11HnDJdUShcRcndF1ETvFSfYCl4rT7o=
Subject key identifier: 49:3D:2A:E4:AF:04:18:E4:D3:39:35:85:27:E5:93:F5:30:89:52:8E
Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
Certificate issuer: /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Certificate serial: 019D9AE3023B72D5B5716DB870F7FFE05703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
Manifest number: 0616
Signing time: Fri 17 Apr 2026 10:01:01 +0000
Manifest this update: Fri 17 Apr 2026 10:01:01 +0000
Manifest next update: Sat 18 Apr 2026 10:01:01 +0000
Files and hashes: 1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: yMCHPw3rQldpJxNWGRSO4JS3LYbGzafW9a52hPP+Kvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:02:3b:72:d5:b5:71:6d:b8:70:f7:ff:e0:57:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Validity
Not Before: Apr 17 10:01:01 2026 GMT
Not After : Apr 18 10:01:01 2026 GMT
Subject: CN=493d2ae4af0418e4d339358527e593f53089528e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:ad:2d:82:8c:b2:a7:35:1b:86:32:19:40:
df:d9:01:44:c1:2c:88:d1:b8:f4:dc:be:2d:8b:2d:
3f:88:2c:c1:be:c4:f9:33:b5:f0:2f:92:49:7d:f2:
83:fc:ab:a4:f3:ad:67:d5:a0:94:c1:15:cf:8c:7f:
21:62:15:32:a2:f6:9c:c9:21:d5:b5:bf:54:af:3a:
88:1f:56:e6:c0:6e:c9:5b:22:78:f1:89:f9:60:be:
bb:3c:05:57:b1:c7:6e:a9:ba:df:4e:3c:16:cf:de:
c7:ae:59:98:e3:2d:f2:f8:60:14:56:0a:85:34:cb:
cd:0e:8b:c0:f0:36:7d:6c:2a:a8:78:dc:28:64:a2:
a4:2e:d9:cb:aa:5a:b5:98:cc:a0:e8:b8:31:21:6f:
db:c8:ee:ee:a9:86:18:99:47:54:7d:3e:03:7f:4f:
e1:b4:3c:a9:d2:cf:aa:45:b6:56:28:3a:a8:6d:43:
df:ba:15:44:e7:93:8d:da:9c:0b:ea:10:77:b2:be:
d9:56:18:e6:95:3e:02:42:f8:0b:89:19:15:e0:66:
6f:8e:87:0b:ef:91:3d:f4:6c:2b:48:d3:b0:a5:03:
da:79:72:b4:14:01:e7:5d:a6:cd:57:6a:d0:f7:52:
b9:57:d5:bf:1c:ec:3a:5a:f6:fc:ea:36:ab:8f:5f:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3D:2A:E4:AF:04:18:E4:D3:39:35:85:27:E5:93:F5:30:89:52:8E
X509v3 Authority Key Identifier:
keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:68:0b:45:c6:85:68:e3:cd:26:55:a9:91:78:4d:a6:c1:f4:
cd:5d:1c:e1:76:59:1b:73:e4:b7:39:bf:bb:10:2d:56:81:28:
4a:d9:c2:c8:14:ac:1c:e6:65:89:a5:3f:d9:04:2c:86:c8:78:
45:6f:17:99:82:40:3f:66:e7:6b:3c:0d:fe:70:25:e2:78:14:
c0:7a:4f:40:64:b6:83:9e:de:77:76:d1:cc:2a:0e:66:78:f6:
64:5f:a7:3c:3c:bc:19:0f:54:b4:a0:d0:bc:dc:33:7f:70:5d:
52:e4:13:b7:d9:17:6f:65:89:db:5a:91:05:87:3a:6b:eb:21:
9c:3b:46:f5:4d:cc:ee:72:88:d1:f6:6c:6f:c7:85:95:4a:b2:
08:b5:13:ac:5d:7b:18:b1:4e:fd:d6:0a:de:8a:1f:76:a4:10:
8f:25:80:8b:0c:59:4a:90:59:b0:69:4f:9b:b8:cd:6f:a8:71:
39:e8:a8:af:fc:ec:64:55:18:79:41:f0:3d:d9:46:aa:40:39:
77:b4:52:84:e1:c4:3e:9c:6b:ad:89:52:69:2f:26:07:53:24:
65:70:08:bf:1f:a7:b1:10:89:6a:61:0c:45:bd:a7:4d:15:7a:
c3:79:aa:a7:dc:88:57:ef:16:5b:b4:33:19:2c:8f:8a:6a:34:
b4:2e:1d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4wI7ctW1cW24cPf/4FcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzJiNWJkYzc1NGQ1ZjY0NGU0MDgxZGJjMDNiMmI0MGE4
OWYxNmQwHhcNMjYwNDE3MTAwMTAxWhcNMjYwNDE4MTAwMTAxWjAzMTEwLwYDVQQD
Eyg0OTNkMmFlNGFmMDQxOGU0ZDMzOTM1ODUyN2U1OTNmNTMwODk1MjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5utLYKMsqc1G4YyGUDf2QFEwSyI
0bj03L4tiy0/iCzBvsT5M7XwL5JJffKD/Kuk861n1aCUwRXPjH8hYhUyovacySHV
tb9UrzqIH1bmwG7JWyJ48Yn5YL67PAVXscduqbrfTjwWz97HrlmY4y3y+GAUVgqF
NMvNDovA8DZ9bCqoeNwoZKKkLtnLqlq1mMyg6LgxIW/byO7uqYYYmUdUfT4Df0/h
tDyp0s+qRbZWKDqobUPfuhVE55ON2pwL6hB3sr7ZVhjmlT4CQvgLiRkV4GZvjocL
75E99GwrSNOwpQPaeXK0FAHnXabNV2rQ91K5V9W/HOw6Wvb86jarj18cRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk9KuSvBBjk0zk1hSflk/UwiVKOMB8GA1UdIwQY
MBaAFLFytb3HVNX2ROQIHbwDsrQKifFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMt
ZWE1MmFlMDhkZTljLzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMtZWE1MmFlMDhkZTlj
LzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2gLRcaF
aOPNJlWpkXhNpsH0zV0c4XZZG3Pktzm/uxAtVoEoStnCyBSsHOZliaU/2QQshsh4
RW8XmYJAP2bnazwN/nAl4ngUwHpPQGS2g57ed3bRzCoOZnj2ZF+nPDy8GQ9UtKDQ
vNwzf3BdUuQTt9kXb2WJ21qRBYc6a+shnDtG9U3M7nKI0fZsb8eFlUqyCLUTrF17
GLFO/dYK3oofdqQQjyWAiwxZSpBZsGlPm7jNb6hxOeior/zsZFUYeUHwPdlGqkA5
d7RShOHEPpxrrYlSaS8mB1MkZXAIvx+nsRCJamEMRb2nTRV6w3mqp9yIV+8WW7Qz
GSyPimo0tC4drA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:23 2026 by rpki-client