Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: GWXHbS3bKPhxAocIBbcwTnjMVmmhNOjUu7nhDTLOObQ=
Subject key identifier: 97:CE:99:73:6C:5C:E3:5D:A0:B5:64:DE:4C:1D:D2:93:DA:6F:EA:8C
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 019D2AE0CA4CA241269277044F243B48CB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 16:01:08 +0000
Manifest this update: Thu 26 Mar 2026 16:01:08 +0000
Manifest next update: Fri 27 Mar 2026 16:01:08 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: V8JHMpZXZwkk3Q8nMzoO3IFH/Bc1ICWZUcuYcuvUA8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:ca:4c:a2:41:26:92:77:04:4f:24:3b:48:cb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Mar 26 16:01:08 2026 GMT
Not After : Mar 27 16:01:08 2026 GMT
Subject: CN=97ce99736c5ce35da0b564de4c1dd293da6fea8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:3e:ab:a6:82:c2:eb:b4:51:0d:4e:f7:22:
26:ab:b9:5f:80:b2:ae:cc:82:68:15:d0:07:75:f9:
e0:ed:e7:b2:50:0c:a4:38:28:e8:05:fa:d2:d1:40:
9d:e0:8e:99:17:44:8d:27:e8:09:6f:c8:e7:95:5b:
24:a4:51:27:87:82:dd:a3:2a:72:1e:d2:77:83:47:
8a:0d:d0:69:96:44:0d:03:e2:ac:8f:d7:16:4a:33:
4d:ee:ad:84:c9:0e:c4:5f:0a:b1:8b:24:e7:1d:46:
c5:ab:f3:c5:7b:cc:64:5b:7b:31:db:c0:b1:14:bf:
c4:ed:30:a9:96:37:b4:9f:27:5a:e7:b4:f6:52:b8:
5b:20:c1:5a:6a:36:59:1e:ef:33:46:53:65:3d:ea:
53:f9:e0:0e:4b:bc:c4:f8:90:fc:31:6b:ff:88:65:
42:55:67:9e:17:8f:a2:0e:7a:b9:f7:7d:36:e3:14:
bc:4f:ff:47:2b:b4:f1:8f:be:06:3a:47:07:b6:a3:
14:a3:5f:74:66:51:7c:4c:fa:27:5b:f4:d4:1f:44:
f5:28:4b:0b:b6:2a:4a:d2:2a:00:04:7f:fd:38:48:
f9:d8:07:78:66:58:16:1c:b2:47:98:83:a0:18:52:
75:e9:17:61:5d:47:e7:72:06:6c:ce:8c:7e:fb:b4:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CE:99:73:6C:5C:E3:5D:A0:B5:64:DE:4C:1D:D2:93:DA:6F:EA:8C
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8d:be:13:43:10:1f:7f:ba:bf:7f:21:b8:a5:da:77:65:a4:
31:89:c8:8a:8a:a7:57:94:61:48:63:b4:2c:4e:62:28:35:ad:
ff:c9:03:b1:1f:7d:3c:b3:6b:42:a6:0a:83:79:df:fa:23:7d:
eb:99:1e:76:02:09:10:d6:a1:c8:ea:c7:ce:a9:79:f8:bc:1f:
14:37:6d:c6:f4:fd:ac:a2:1f:39:14:f8:af:0f:8c:ae:53:a5:
9d:79:94:ff:53:5a:87:90:c9:36:c0:3d:c6:95:8d:28:8f:d6:
97:ec:16:e6:ee:67:74:19:eb:4e:22:3f:ed:77:07:aa:e8:f2:
4e:47:7c:c3:8f:c8:5c:4f:7d:6c:92:c1:89:e6:5b:61:e0:d0:
59:21:fb:e8:aa:9b:30:61:3a:d8:85:48:d0:24:06:ac:62:9b:
8a:43:96:18:93:c0:1b:fb:96:3a:be:15:ba:90:80:85:2a:24:
ac:a2:96:91:ff:a8:a8:0f:51:54:c1:52:70:66:6c:25:f8:9e:
34:99:e0:c3:63:95:80:7d:7a:78:c6:99:f4:9e:44:77:ad:a8:
ba:e2:57:bc:06:4e:d1:1c:d6:1a:88:b9:4d:cf:31:83:23:d4:
b9:53:b7:06:55:21:72:a8:7b:7c:99:b4:f9:46:64:7a:43:b8:
d0:08:59:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4MpMokEmkncETyQ7SMsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTlhNmFlZmQzY2E4ZjUwZmM4ZjM0YWIzZDE0NzkyNTZk
YjlkNzgwHhcNMjYwMzI2MTYwMTA4WhcNMjYwMzI3MTYwMTA4WjAzMTEwLwYDVQQD
Eyg5N2NlOTk3MzZjNWNlMzVkYTBiNTY0ZGU0YzFkZDI5M2RhNmZlYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm4+q6aCwuu0UQ1O9yImq7lfgLKu
zIJoFdAHdfng7eeyUAykOCjoBfrS0UCd4I6ZF0SNJ+gJb8jnlVskpFEnh4Ldoypy
HtJ3g0eKDdBplkQNA+Ksj9cWSjNN7q2EyQ7EXwqxiyTnHUbFq/PFe8xkW3sx28Cx
FL/E7TCplje0nyda57T2UrhbIMFaajZZHu8zRlNlPepT+eAOS7zE+JD8MWv/iGVC
VWeeF4+iDnq593024xS8T/9HK7Txj74GOkcHtqMUo190ZlF8TPonW/TUH0T1KEsL
tipK0ioABH/9OEj52Ad4ZlgWHLJHmIOgGFJ16RdhXUfncgZszox++7QROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfOmXNsXONdoLVk3kwd0pPab+qMMB8GA1UdIwQY
MBaAFHkZpq79PKj1D8jzSrPRR5JW2514MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAt
OTExZTgzOTA0Y2ExLzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAtOTExZTgzOTA0Y2Ex
LzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqo2+E0MQ
H3+6v38huKXad2WkMYnIioqnV5RhSGO0LE5iKDWt/8kDsR99PLNrQqYKg3nf+iN9
65kedgIJENahyOrHzql5+LwfFDdtxvT9rKIfORT4rw+MrlOlnXmU/1Nah5DJNsA9
xpWNKI/Wl+wW5u5ndBnrTiI/7XcHqujyTkd8w4/IXE99bJLBieZbYeDQWSH76Kqb
MGE62IVI0CQGrGKbikOWGJPAG/uWOr4VupCAhSokrKKWkf+oqA9RVMFScGZsJfie
NJngw2OVgH16eMaZ9J5Ed62ouuJXvAZO0RzWGoi5Tc8xgyPUuVO3BlUhcqh7fJm0
+UZkekO40AhZWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:59:18 2026 by rpki-client