Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: vpD8c1mqTiFRm1SZClFV9AAJIHF8KDgcPQH9qCBqcMk=
Subject key identifier: 98:CB:88:D5:F2:44:9F:AD:6F:05:D4:93:8B:E2:D2:10:00:7C:57:81
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 019D28F284E8D2B737D495455BFD7ECE6F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 1556
Signing time: Thu 26 Mar 2026 07:01:15 +0000
Manifest this update: Thu 26 Mar 2026 07:01:15 +0000
Manifest next update: Fri 27 Mar 2026 07:01:15 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: WqaANGJaPmVJEVMzBGQ/w/tjEZDVu4348Zq9LFcGWrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:84:e8:d2:b7:37:d4:95:45:5b:fd:7e:ce:6f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: Mar 26 07:01:15 2026 GMT
Not After : Mar 27 07:01:15 2026 GMT
Subject: CN=98cb88d5f2449fad6f05d4938be2d210007c5781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:42:27:f3:19:01:a3:96:74:a0:3f:8d:71:
b1:25:c0:ea:8d:11:00:0f:ce:06:15:ef:47:93:f7:
07:22:28:f7:02:e8:33:93:8b:4e:d4:4f:6f:50:bb:
1f:f9:eb:d3:66:71:e3:24:47:31:10:f9:4a:f6:de:
df:78:ae:d5:4a:93:18:d2:d5:bc:04:aa:5e:e6:c7:
95:54:2c:36:3c:3b:d9:39:6e:e1:76:12:a4:2f:a9:
74:ce:eb:6f:fa:1b:3c:b1:8f:9d:77:d1:4a:15:58:
99:61:95:37:cd:d7:00:f2:0f:a2:07:90:b2:6b:13:
81:b1:cb:ff:92:c5:c0:46:d7:86:15:14:35:a8:67:
e4:d0:bf:57:d2:18:d2:ad:8f:1e:52:f6:47:ba:15:
5b:32:24:3f:af:d8:c6:3c:3e:0a:58:05:17:2f:c1:
d6:d7:10:8c:60:1d:31:5d:4f:b0:11:47:01:b9:09:
ec:5e:44:8a:79:4d:7f:a9:8e:c6:4d:90:ce:3b:70:
24:4f:5c:29:1f:63:ab:f0:a4:26:99:a3:dd:78:c6:
bc:d4:c6:58:5b:9c:af:ac:94:37:13:52:3d:df:13:
08:c4:cb:0b:60:08:35:58:54:89:d8:ee:56:02:7a:
e5:70:a3:2c:a8:eb:02:79:95:63:01:09:b7:5e:54:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CB:88:D5:F2:44:9F:AD:6F:05:D4:93:8B:E2:D2:10:00:7C:57:81
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7f:9d:29:06:b2:13:7f:5f:e3:12:35:1e:b8:3a:05:9e:61:
d5:cf:87:2e:6b:d4:e4:be:78:88:28:78:1c:e4:8d:48:91:d2:
a5:f9:ab:6c:73:0f:9f:99:08:4c:77:00:7d:95:69:86:2b:ac:
d3:ff:26:08:29:e9:82:50:ba:6a:40:a9:55:63:56:a5:47:c3:
eb:da:57:c7:53:91:ae:65:83:1f:63:fe:4d:b1:8e:54:2f:18:
a4:ff:04:b5:c1:0f:43:0f:57:9f:15:0d:11:95:52:ec:6d:83:
b9:42:44:94:dc:fb:95:93:36:d7:d9:70:06:5c:5a:80:61:82:
f4:ee:61:dd:8e:25:0d:28:38:a2:a4:33:e1:65:0c:6e:46:0a:
3c:dd:96:ba:89:eb:b5:1d:ba:49:ac:9d:fa:46:ef:22:7f:58:
55:b7:2b:b1:9f:24:a8:48:00:55:9a:92:77:6f:5c:08:6c:1c:
68:b1:77:8d:ec:26:cc:6c:1b:44:3f:c8:99:c0:86:da:d2:c9:
ed:d1:c2:7c:3d:02:f5:3a:a3:68:3a:d2:46:11:1a:aa:7a:30:
a6:8d:5e:5a:45:8e:28:b2:8a:43:c5:11:23:07:51:34:5e:37:
77:b5:15:be:39:80:4b:68:44:8a:34:d2:30:63:f7:0c:2d:13:
09:9b:68:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8oTo0rc31JVFW/1+zm9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTBiZDEzYjliNDY2YzMyZTEzNzY1ODA4OGQyODJhM2I3
ZDU2MzIwHhcNMjYwMzI2MDcwMTE1WhcNMjYwMzI3MDcwMTE1WjAzMTEwLwYDVQQD
Eyg5OGNiODhkNWYyNDQ5ZmFkNmYwNWQ0OTM4YmUyZDIxMDAwN2M1NzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt9CJ/MZAaOWdKA/jXGxJcDqjREA
D84GFe9Hk/cHIij3Augzk4tO1E9vULsf+evTZnHjJEcxEPlK9t7feK7VSpMY0tW8
BKpe5seVVCw2PDvZOW7hdhKkL6l0zutv+hs8sY+dd9FKFViZYZU3zdcA8g+iB5Cy
axOBscv/ksXARteGFRQ1qGfk0L9X0hjSrY8eUvZHuhVbMiQ/r9jGPD4KWAUXL8HW
1xCMYB0xXU+wEUcBuQnsXkSKeU1/qY7GTZDOO3AkT1wpH2Or8KQmmaPdeMa81MZY
W5yvrJQ3E1I93xMIxMsLYAg1WFSJ2O5WAnrlcKMsqOsCeZVjAQm3XlQxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjLiNXyRJ+tbwXUk4vi0hAAfFeBMB8GA1UdIwQY
MBaAFNLgvRO5tGbDLhN2WAiNKCo7fVYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVDOUU3bTBac011RTNaWUNJMG9LanQ5VmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZDc5OWYtYzVlYi00NGJjLWE0Mzkt
NmYzYTIzZmYwYzU4LzEvMHVDOUU3bTBac011RTNaWUNJMG9LanQ5VmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS85ZDc5OWYtYzVlYi00NGJjLWE0MzktNmYzYTIzZmYwYzU4
LzEvMHVDOUU3bTBac011RTNaWUNJMG9LanQ5VmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnX+dKQay
E39f4xI1Hrg6BZ5h1c+HLmvU5L54iCh4HOSNSJHSpfmrbHMPn5kITHcAfZVphius
0/8mCCnpglC6akCpVWNWpUfD69pXx1ORrmWDH2P+TbGOVC8YpP8EtcEPQw9XnxUN
EZVS7G2DuUJElNz7lZM219lwBlxagGGC9O5h3Y4lDSg4oqQz4WUMbkYKPN2Wuonr
tR26Sayd+kbvIn9YVbcrsZ8kqEgAVZqSd29cCGwcaLF3jewmzGwbRD/ImcCG2tLJ
7dHCfD0C9TqjaDrSRhEaqnowpo1eWkWOKLKKQ8URIwdRNF43d7UVvjmAS2hEijTS
MGP3DC0TCZtovQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:57:19 2026 by rpki-client