Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier: lzTuhr+lhQYDesFCXllhholdooYf3MgrxWKb39rkdfM=
Subject key identifier: 58:2A:3B:E5:98:7D:F6:E4:B2:DC:CD:5B:98:E9:10:B4:98:64:FD:D0
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial: 019D2583FBB513B59F8E77768DACD328D687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 15:01:39 +0000
Manifest this update: Wed 25 Mar 2026 15:01:39 +0000
Manifest next update: Thu 26 Mar 2026 15:01:39 +0000
Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: rN6aK9dI8MXvYo5kAMFcvfK9f/pLjN+koU3UwOPEohc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:fb:b5:13:b5:9f:8e:77:76:8d:ac:d3:28:d6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
Validity
Not Before: Mar 25 15:01:39 2026 GMT
Not After : Mar 26 15:01:39 2026 GMT
Subject: CN=582a3be5987df6e4b2dccd5b98e910b49864fdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:f2:02:6e:c4:71:ad:78:5e:6f:a6:1f:07:
ba:5d:71:11:b8:ee:c9:a4:a7:c7:00:ff:bb:a5:3d:
e9:c0:c2:69:87:13:ac:92:31:86:e2:08:56:b4:3e:
2c:dd:75:a1:90:fb:fe:46:1b:4a:e4:57:38:bb:78:
17:ac:5e:01:67:92:55:7b:eb:82:4b:ca:a6:45:6d:
34:83:2a:9b:c2:09:ff:16:dc:bf:2b:eb:c6:4c:73:
4b:7a:ca:81:e4:4f:6c:83:b6:b1:a4:4c:27:ae:9b:
4d:a4:e4:be:ae:48:22:f3:5c:b5:92:e3:07:3d:2b:
1e:7f:39:49:e1:d9:2b:c8:25:47:0e:02:d6:1b:d2:
26:7f:3b:74:47:23:f0:0e:ba:ad:29:1a:ac:a6:21:
c0:c1:af:d7:cd:38:90:72:ae:6b:f7:46:6c:b3:7b:
c5:47:74:56:e1:8e:ad:f2:c5:af:0e:3f:27:22:86:
11:80:ec:ee:1c:19:a2:4e:65:53:1e:f3:15:96:59:
cd:1e:25:ce:d3:fa:21:2e:f2:ce:aa:a2:08:9c:cf:
64:f3:7f:20:d0:4d:ac:e8:ea:27:7e:e5:5e:dc:34:
15:b2:6e:97:02:4a:99:3e:e8:56:77:e6:ed:e0:e8:
e8:5a:71:31:a8:b3:de:89:57:29:a7:ff:2f:c8:af:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2A:3B:E5:98:7D:F6:E4:B2:DC:CD:5B:98:E9:10:B4:98:64:FD:D0
X509v3 Authority Key Identifier:
keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:f4:3e:ac:94:b9:71:6a:cd:a0:61:27:dd:fa:83:b1:0e:
dd:38:d6:b5:47:eb:8e:8a:9f:b4:0f:31:b2:39:a9:c7:10:81:
19:e3:ea:ff:51:f4:59:bd:0a:5d:ac:88:dd:b3:0e:8e:b5:2d:
17:e0:1c:49:ca:0c:d8:a6:d0:80:7c:6b:df:c1:f5:1b:23:af:
34:cc:e8:33:1a:89:3f:a8:ce:0c:5f:f8:61:5c:33:65:37:6b:
af:48:3f:aa:4e:c1:6c:c8:cb:73:8a:d3:45:f0:af:e2:49:e3:
b2:de:c3:da:50:a6:38:f5:5b:0a:60:68:45:2a:de:fa:d4:11:
16:13:4d:75:75:62:e7:bc:6b:70:0e:da:13:58:23:ff:9f:ad:
68:5c:12:12:ca:4e:cb:c4:b9:3b:76:86:40:87:5d:a9:27:8f:
56:6f:8b:13:ab:0b:47:6b:bf:0a:bb:db:1b:29:77:69:5d:b6:
7b:1c:25:d2:49:98:3c:24:c2:88:96:8d:bd:13:2d:20:6c:a1:
97:30:99:96:59:1a:e9:c8:8f:aa:07:78:71:76:c3:0d:70:a5:
b4:29:11:1b:a6:67:7a:de:6a:a3:dc:18:e9:21:55:0c:4e:b2:
42:a6:69:93:ea:3d:76:58:e4:14:22:e9:55:9a:5f:02:b4:fa:
ea:2d:70:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg/u1E7Wfjnd2jazTKNaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTNiNGMzMTUxMWI1NDgyZWI4NDI1YTM5MTM3OWQ0M2Zk
NmQ0NTUwHhcNMjYwMzI1MTUwMTM5WhcNMjYwMzI2MTUwMTM5WjAzMTEwLwYDVQQD
Eyg1ODJhM2JlNTk4N2RmNmU0YjJkY2NkNWI5OGU5MTBiNDk4NjRmZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/TyAm7Eca14Xm+mHwe6XXERuO7J
pKfHAP+7pT3pwMJphxOskjGG4ghWtD4s3XWhkPv+RhtK5Fc4u3gXrF4BZ5JVe+uC
S8qmRW00gyqbwgn/Fty/K+vGTHNLesqB5E9sg7axpEwnrptNpOS+rkgi81y1kuMH
PSsefzlJ4dkryCVHDgLWG9Imfzt0RyPwDrqtKRqspiHAwa/XzTiQcq5r90Zss3vF
R3RW4Y6t8sWvDj8nIoYRgOzuHBmiTmVTHvMVllnNHiXO0/ohLvLOqqIInM9k838g
0E2s6OonfuVe3DQVsm6XAkqZPuhWd+bt4OjoWnExqLPeiVcpp/8vyK8GVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgqO+WYffbkstzNW5jpELSYZP3QMB8GA1UdIwQY
MBaAFPZTtMMVEbVILrhCWjkTedQ/1tRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAt
MzE5MzY4ZDkxZmMzLzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAtMzE5MzY4ZDkxZmMz
LzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDb0PqyU
uXFqzaBhJ936g7EO3TjWtUfrjoqftA8xsjmpxxCBGePq/1H0Wb0KXayI3bMOjrUt
F+AcScoM2KbQgHxr38H1GyOvNMzoMxqJP6jODF/4YVwzZTdrr0g/qk7BbMjLc4rT
RfCv4knjst7D2lCmOPVbCmBoRSre+tQRFhNNdXVi57xrcA7aE1gj/5+taFwSEspO
y8S5O3aGQIddqSePVm+LE6sLR2u/CrvbGyl3aV22exwl0kmYPCTCiJaNvRMtIGyh
lzCZllka6ciPqgd4cXbDDXCltCkRG6Znet5qo9wY6SFVDE6yQqZpk+o9dljkFCLp
VZpfArT66i1wcg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:58 2026 by rpki-client