
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: M5a9LtyLLWi7/UGbSNqFQo6ZcB5jEuY51uWdMGMKl/U=
Subject key identifier: CF:27:F9:FA:2C:0B:50:40:BB:A8:D8:9C:6D:C5:D5:5E:5B:A9:24:04
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 019D25F1CED5899BE348F559D9219D33ABE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0B07
Signing time: Wed 25 Mar 2026 17:01:37 +0000
Manifest this update: Wed 25 Mar 2026 17:01:37 +0000
Manifest next update: Thu 26 Mar 2026 17:01:37 +0000
Files and hashes: 1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: iPsBRtPXNOn1TxR9YPmF/UR7sqy/XrGxB4A8HxrAipQ=)
2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ce:d5:89:9b:e3:48:f5:59:d9:21:9d:33:ab:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Mar 25 17:01:37 2026 GMT
Not After : Mar 26 17:01:37 2026 GMT
Subject: CN=cf27f9fa2c0b5040bba8d89c6dc5d55e5ba92404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:9e:06:21:de:86:47:9b:6b:92:2a:ab:a4:
ba:9c:94:2a:d7:37:c5:87:bf:eb:b7:08:e5:c2:91:
d9:6b:cd:21:f4:c0:fd:bb:31:27:69:2d:6d:1e:18:
11:da:3e:ef:88:d2:30:5b:39:0f:e7:25:62:6d:ff:
0b:6d:2e:ff:39:07:be:04:1a:20:5f:35:c3:12:05:
aa:4b:4f:c0:45:bd:2a:a3:8e:b0:b9:31:28:7f:22:
1a:ab:82:01:c9:a0:66:b3:53:e2:3c:18:ed:86:d9:
b0:f0:10:ab:05:b2:54:d3:a9:9e:1f:cd:72:b1:56:
8d:f1:21:d7:57:ee:f4:24:92:5c:c3:e9:de:93:8b:
72:41:b3:a3:69:2b:f5:93:ab:bb:d3:08:79:37:7b:
a7:cc:cc:b8:c9:38:8b:46:dc:3a:c5:33:c5:0c:0b:
06:93:27:a6:61:c7:a9:cb:df:76:b6:36:d0:71:e8:
2e:71:20:ea:da:33:9b:a9:dd:f2:ca:08:c7:b6:b9:
2e:16:27:41:e2:a2:a8:9c:be:f9:e6:e1:96:61:c6:
3e:72:0a:b2:8e:e7:55:2c:2a:9b:8f:59:33:ae:82:
4b:d6:c0:bb:6a:1a:62:da:1e:d1:b1:2f:55:8f:80:
83:83:a1:02:dd:f9:39:a8:7a:e5:cc:21:48:79:3a:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:F9:FA:2C:0B:50:40:BB:A8:D8:9C:6D:C5:D5:5E:5B:A9:24:04
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0c:d5:b8:e9:cd:69:86:20:64:7e:18:bc:57:20:52:73:df:
c8:44:70:56:2b:23:61:ab:83:72:a6:a9:5c:39:af:0c:b4:c6:
d3:f0:cf:0f:92:14:9d:22:4a:83:63:dd:21:59:32:f2:4d:8a:
81:e3:e2:7b:06:90:2b:02:57:c7:70:7a:2d:bf:1c:08:ba:aa:
1b:17:ad:b9:fa:de:7b:83:00:cc:a7:f9:a7:ad:0d:63:a8:cf:
7c:50:44:79:94:f3:85:5b:f2:7c:0e:8f:5d:9e:8e:a7:29:98:
f0:ab:50:d6:d8:32:d4:e4:31:92:d5:15:2c:10:05:98:a6:03:
fa:95:b2:6c:ed:41:ad:b2:2e:e8:14:89:b6:4b:a2:73:32:e5:
9c:e0:b8:e1:c5:78:86:e2:1c:b0:04:94:01:5d:46:6a:21:53:
5e:f3:81:79:50:04:b1:67:91:a7:07:5a:b2:0c:e6:8b:9c:f7:
e1:d6:c0:92:83:b2:42:10:ec:fa:90:bb:97:48:36:36:d3:d0:
db:ef:bf:9f:3a:1d:03:05:4b:21:7f:ac:67:19:75:f9:bf:19:
4c:76:a0:39:9a:37:f9:c5:12:f1:26:4f:31:6e:83:df:7b:fe:
da:14:71:af:68:b3:95:e2:a4:08:e2:fe:0f:8b:2f:84:93:0b:
a2:ba:66:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8c7ViZvjSPVZ2SGdM6vmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl
YzJlNjgwHhcNMjYwMzI1MTcwMTM3WhcNMjYwMzI2MTcwMTM3WjAzMTEwLwYDVQQD
EyhjZjI3ZjlmYTJjMGI1MDQwYmJhOGQ4OWM2ZGM1ZDU1ZTViYTkyNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVWeBiHehkeba5Iqq6S6nJQq1zfF
h7/rtwjlwpHZa80h9MD9uzEnaS1tHhgR2j7viNIwWzkP5yVibf8LbS7/OQe+BBog
XzXDEgWqS0/ARb0qo46wuTEofyIaq4IByaBms1PiPBjthtmw8BCrBbJU06meH81y
sVaN8SHXV+70JJJcw+nek4tyQbOjaSv1k6u70wh5N3unzMy4yTiLRtw6xTPFDAsG
kyemYcepy992tjbQcegucSDq2jObqd3yygjHtrkuFidB4qKonL755uGWYcY+cgqy
judVLCqbj1kzroJL1sC7ahpi2h7RsS9Vj4CDg6EC3fk5qHrlzCFIeTokCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8n+fosC1BAu6jYnG3F1V5bqSQEMB8GA1UdIwQY
MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt
Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5
LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQzVuOnN
aYYgZH4YvFcgUnPfyERwVisjYauDcqapXDmvDLTG0/DPD5IUnSJKg2PdIVky8k2K
gePiewaQKwJXx3B6Lb8cCLqqGxetufree4MAzKf5p60NY6jPfFBEeZTzhVvyfA6P
XZ6OpymY8KtQ1tgy1OQxktUVLBAFmKYD+pWybO1BrbIu6BSJtkuiczLlnOC44cV4
huIcsASUAV1GaiFTXvOBeVAEsWeRpwdasgzmi5z34dbAkoOyQhDs+pC7l0g2NtPQ
2++/nzodAwVLIX+sZxl1+b8ZTHagOZo3+cUS8SZPMW6D33v+2hRxr2izleKkCOL+
D4svhJMLorpmzQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:23 2026 by rpki-client