Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
File: rhVFyl4w95yXBeJw8eh_r6-5pjI.mft (raw, json)
Hash identifier: B16e4HPbwKhk7WOhfd6DvJYhKLBonhooZ6uXXwNP+HY=
Subject key identifier: 0B:A2:C9:CA:A1:0D:5C:C5:3E:3A:EE:0B:21:37:D6:B3:96:5E:99:0B
Authority key identifier: AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
Certificate issuer: /CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Certificate serial: 019D265F13015D4AD6D352A38DD1BA629852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
Manifest number: 84
Signing time: Wed 25 Mar 2026 19:00:58 +0000
Manifest this update: Wed 25 Mar 2026 19:00:58 +0000
Manifest next update: Thu 26 Mar 2026 19:00:58 +0000
Files and hashes: 1: rhVFyl4w95yXBeJw8eh_r6-5pjI.crl (hash: sTMuM8Y3hR3np9TwDCDJlLrjTHD74SIiJfPaGM3atsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:13:01:5d:4a:d6:d3:52:a3:8d:d1:ba:62:98:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Validity
Not Before: Mar 25 19:00:58 2026 GMT
Not After : Mar 26 19:00:58 2026 GMT
Subject: CN=0ba2c9caa10d5cc53e3aee0b2137d6b3965e990b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:b2:89:98:cc:50:9d:55:08:d1:1f:95:fb:
d9:cf:ab:6b:de:3a:fa:cc:bd:97:1b:1c:60:d0:e0:
8c:7b:b2:a1:b9:82:64:9d:f9:37:ae:cc:1b:b3:87:
c9:cb:f2:e3:b3:63:53:a1:f2:ad:a7:67:77:5a:ee:
2d:c5:d3:a6:37:6c:47:8b:bc:42:61:35:37:ae:42:
67:b4:63:d5:f7:52:ce:63:1b:70:78:e6:e7:ee:b0:
a7:40:0f:28:b4:12:3c:50:75:e1:72:3e:30:88:be:
eb:84:33:38:19:6a:77:c8:df:1e:75:fd:cf:45:08:
ef:1b:9c:c1:14:6f:7b:cf:25:96:12:e4:4e:96:79:
90:32:09:f2:e5:40:4b:12:8b:92:21:4c:46:78:12:
e1:50:17:17:48:23:6a:79:25:d2:ad:67:33:77:41:
ff:0b:6b:5e:80:42:b0:60:61:15:24:91:a4:fb:e0:
cb:5c:58:60:39:f8:da:0c:e3:72:3b:3b:0a:fa:41:
ec:86:0e:e6:05:0b:5d:77:78:ef:87:6e:e7:54:48:
45:23:45:02:30:e3:f2:c7:40:8c:f4:8b:23:ee:47:
e3:f2:86:78:48:2e:7c:31:6a:b5:74:cc:fe:8b:c9:
4c:cf:07:11:2f:ed:2e:93:1b:53:ce:22:9b:3a:90:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A2:C9:CA:A1:0D:5C:C5:3E:3A:EE:0B:21:37:D6:B3:96:5E:99:0B
X509v3 Authority Key Identifier:
keyid:AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:08:b5:98:49:cd:a3:a8:98:fe:f5:ef:18:8c:47:a4:65:5e:
bf:1c:18:0d:05:25:9f:a0:ea:c3:c6:d3:e9:f3:f2:1e:82:10:
32:e7:ec:55:cc:4b:95:68:83:ec:91:a1:60:8d:88:85:b8:04:
9f:d4:00:9c:a8:83:0f:f9:76:85:65:83:44:ff:04:f2:bd:e8:
3e:e3:c3:e1:dd:c1:02:2f:ef:48:76:7e:0f:5a:e3:3b:da:9f:
c9:fe:14:c7:c2:a5:12:5d:fb:3f:2d:2c:c7:1a:4e:5e:13:da:
fc:44:3c:93:bb:b5:bf:b5:b0:5c:78:9f:2a:d7:b5:8a:44:16:
e4:70:f6:70:c6:bb:5c:39:f7:3e:34:a5:cb:d1:dd:c0:32:d3:
b6:b2:12:fa:9c:19:41:99:31:7c:47:85:79:3f:09:9d:6d:c8:
b0:19:c2:9b:46:bb:23:44:23:7a:8f:02:38:73:77:c0:1c:e9:
5b:5e:03:8f:02:0f:14:57:87:63:ae:7b:b2:98:77:5c:e0:2c:
2f:76:fa:a6:f0:2a:33:fe:30:a6:4a:01:90:78:91:12:fd:3a:
ee:27:30:31:a2:44:f7:44:3e:09:11:84:8a:42:ef:55:cf:02:
b4:4e:bd:bc:37:1f:eb:0f:f8:3b:29:35:b2:88:74:50:42:01:
ed:6a:d4:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxMBXUrW01KjjdG6YphSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMTU0NWNhNWUzMGY3OWM5NzA1ZTI3MGYxZTg3ZmFmYWZi
OWE2MzIwHhcNMjYwMzI1MTkwMDU4WhcNMjYwMzI2MTkwMDU4WjAzMTEwLwYDVQQD
EygwYmEyYzljYWExMGQ1Y2M1M2UzYWVlMGIyMTM3ZDZiMzk2NWU5OTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6OyiZjMUJ1VCNEflfvZz6tr3jr6
zL2XGxxg0OCMe7KhuYJknfk3rswbs4fJy/Ljs2NTofKtp2d3Wu4txdOmN2xHi7xC
YTU3rkJntGPV91LOYxtweObn7rCnQA8otBI8UHXhcj4wiL7rhDM4GWp3yN8edf3P
RQjvG5zBFG97zyWWEuROlnmQMgny5UBLEouSIUxGeBLhUBcXSCNqeSXSrWczd0H/
C2tegEKwYGEVJJGk++DLXFhgOfjaDONyOzsK+kHshg7mBQtdd3jvh27nVEhFI0UC
MOPyx0CM9Isj7kfj8oZ4SC58MWq1dMz+i8lMzwcRL+0ukxtTziKbOpD8nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuiycqhDVzFPjruCyE31rOWXpkLMB8GA1UdIwQY
MBaAFK4VRcpeMPeclwXicPHof6+vuaYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmhWRnlsNHc5NXlYQmVKdzhlaF9yNi01cGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zM2YxMmEtOWZjYS00ODI4LWI4ZjEt
OWM3MDRmODE1YWFhLzEvcmhWRnlsNHc5NXlYQmVKdzhlaF9yNi01cGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zM2YxMmEtOWZjYS00ODI4LWI4ZjEtOWM3MDRmODE1YWFh
LzEvcmhWRnlsNHc5NXlYQmVKdzhlaF9yNi01cGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwi1mEnN
o6iY/vXvGIxHpGVevxwYDQUln6Dqw8bT6fPyHoIQMufsVcxLlWiD7JGhYI2IhbgE
n9QAnKiDD/l2hWWDRP8E8r3oPuPD4d3BAi/vSHZ+D1rjO9qfyf4Ux8KlEl37Py0s
xxpOXhPa/EQ8k7u1v7WwXHifKte1ikQW5HD2cMa7XDn3PjSly9HdwDLTtrIS+pwZ
QZkxfEeFeT8JnW3IsBnCm0a7I0Qjeo8COHN3wBzpW14DjwIPFFeHY657sph3XOAs
L3b6pvAqM/4wpkoBkHiREv067icwMaJE90Q+CRGEikLvVc8CtE69vDcf6w/4Oyk1
soh0UEIB7WrUqQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:48:15 2026 by rpki-client