
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File: iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier: 6qZjzEIqIqyLmumL3NyXKl70hLqtBp8EE5JlVvTiW4c=
Subject key identifier: AF:54:BD:B1:D1:AF:5A:A0:F5:A5:6D:1C:DD:9B:A9:D6:C8:05:AB:89
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer: /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial: 019D284D2F8105CB4802B9537E0CD24DE541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number: 08AE
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: m15mAWnM9ZDxfgGhKOFDIp1U59cEwh0Ku7H1Aoa0bZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:2f:81:05:cb:48:02:b9:53:7e:0c:d2:4d:e5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=af54bdb1d1af5aa0f5a56d1cdd9ba9d6c805ab89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:ec:5f:53:07:5a:4d:fd:33:b0:0c:14:4a:
bd:fc:2b:2f:e1:c2:d5:53:2f:1f:a4:7b:05:0c:5a:
e8:6a:1d:e9:c1:b3:0a:a1:9b:63:be:61:fb:ee:f6:
25:69:3d:80:b6:cc:31:c1:80:67:df:fe:ba:33:0c:
9d:f2:66:59:14:38:dd:80:3c:c3:04:a4:04:6e:1b:
2e:2d:73:b4:76:81:21:22:a1:40:37:1e:9a:1f:fc:
95:5d:fb:8d:1c:51:8a:cd:9c:40:3b:ec:b3:f7:35:
74:c3:7a:d3:82:93:b0:f5:72:72:24:c9:87:fb:ed:
99:3a:9f:8b:a4:dd:5c:7b:c2:a3:e8:1b:86:ca:f2:
d8:a0:5f:d2:32:7e:e4:ef:76:d7:a7:a8:26:c6:4c:
f5:bb:5e:50:24:b2:96:4a:de:cc:50:62:dc:59:7c:
af:7b:89:36:62:49:5a:2d:05:bc:35:a4:04:5e:a2:
e4:a0:08:9f:a4:ba:ba:e4:d5:44:48:10:1a:40:65:
4b:4d:84:58:46:4e:a9:50:9e:2a:93:df:49:18:38:
3a:8b:dc:41:80:05:0b:e6:a2:a8:68:72:04:69:cb:
c5:c1:16:dc:94:8d:ff:35:2c:aa:a1:8f:da:e9:4d:
a1:82:9d:5e:96:88:09:2f:c5:f5:b4:30:09:b8:01:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:54:BD:B1:D1:AF:5A:A0:F5:A5:6D:1C:DD:9B:A9:D6:C8:05:AB:89
X509v3 Authority Key Identifier:
keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3a:06:cf:a9:87:02:1a:3f:d5:8c:f5:4e:9f:7a:65:d6:d2:
00:da:c9:e5:8d:34:e8:54:40:98:39:18:b0:1f:ab:30:ae:1b:
2f:6f:eb:38:82:5b:6f:0e:2e:7e:0f:59:38:d1:8f:44:70:38:
a4:97:2e:bb:07:cf:40:9e:e7:36:8b:64:5c:19:08:1a:05:31:
d6:50:39:94:e1:ec:eb:a4:c3:ea:69:25:7e:de:85:23:0a:7c:
7f:82:fb:9c:47:dc:72:c6:8c:50:8d:c8:5b:37:43:78:a8:e7:
cd:a2:7e:9b:58:a6:17:a4:3e:7b:5f:ee:2b:f5:30:b3:e3:41:
8d:c8:08:49:c1:6e:b0:d6:c1:ab:94:a0:71:15:6f:21:05:00:
5b:9e:f7:b7:58:b4:ff:a6:a3:8e:1b:89:5a:89:b8:fb:33:bd:
95:61:55:7c:23:57:dc:61:b9:cb:5c:99:87:7d:83:2e:f3:95:
f5:bd:e1:21:2b:ab:5e:b2:c6:9b:ff:c6:02:31:2b:9b:de:49:
5e:cc:97:c3:8a:af:a7:1b:f6:37:5d:66:d2:cd:a1:c4:5e:80:
19:48:9c:f1:4c:6f:a9:d2:11:b6:4d:df:a3:b8:b7:ae:bb:22:
4f:f4:9d:b9:67:54:1c:a3:f8:03:f5:4c:68:f6:42:23:46:45:
1d:f3:f6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTS+BBctIArlTfgzSTeVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWFmYWZmZjgxYjk1ZGNlZTU3NzI3MDU3ZWQ2NzExNGEz
MzgxOTMwHhcNMjYwMzI2MDQwMDQwWhcNMjYwMzI3MDQwMDQwWjAzMTEwLwYDVQQD
EyhhZjU0YmRiMWQxYWY1YWEwZjVhNTZkMWNkZDliYTlkNmM4MDVhYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZDsX1MHWk39M7AMFEq9/Csv4cLV
Uy8fpHsFDFroah3pwbMKoZtjvmH77vYlaT2AtswxwYBn3/66Mwyd8mZZFDjdgDzD
BKQEbhsuLXO0doEhIqFANx6aH/yVXfuNHFGKzZxAO+yz9zV0w3rTgpOw9XJyJMmH
++2ZOp+LpN1ce8Kj6BuGyvLYoF/SMn7k73bXp6gmxkz1u15QJLKWSt7MUGLcWXyv
e4k2YklaLQW8NaQEXqLkoAifpLq65NVESBAaQGVLTYRYRk6pUJ4qk99JGDg6i9xB
gAUL5qKoaHIEacvFwRbclI3/NSyqoY/a6U2hgp1elogJL8X1tDAJuAEy8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9UvbHRr1qg9aVtHN2bqdbIBauJMB8GA1UdIwQY
MBaAFIjq+v/4G5Xc7ldycFftZxFKM4GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mOWVkNjQtNWNjMy00YTBkLWE3MGMt
MWEzODdhNDU2NTc5LzEvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9mOWVkNjQtNWNjMy00YTBkLWE3MGMtMWEzODdhNDU2NTc5
LzEvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkToGz6mH
Aho/1Yz1Tp96ZdbSANrJ5Y006FRAmDkYsB+rMK4bL2/rOIJbbw4ufg9ZONGPRHA4
pJcuuwfPQJ7nNotkXBkIGgUx1lA5lOHs66TD6mklft6FIwp8f4L7nEfccsaMUI3I
WzdDeKjnzaJ+m1imF6Q+e1/uK/Uws+NBjcgIScFusNbBq5SgcRVvIQUAW573t1i0
/6ajjhuJWom4+zO9lWFVfCNX3GG5y1yZh32DLvOV9b3hISurXrLGm//GAjErm95J
XsyXw4qvpxv2N11m0s2hxF6AGUic8UxvqdIRtk3fo7i3rrsiT/SduWdUHKP4A/VM
aPZCI0ZFHfP2BA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:19 2026 by rpki-client