Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: UemUyeB/lyKKfOGTASL74SX7Bim0hmdMwOFqnkf4GX4=
Subject key identifier: 80:AD:4D:73:B5:CA:69:3D:F9:9C:80:BF:71:E3:C5:96:E7:D3:43:9A
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 019D2B85703680E91F3C764D9F5F97A0843E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 077A
Signing time: Thu 26 Mar 2026 19:00:58 +0000
Manifest this update: Thu 26 Mar 2026 19:00:58 +0000
Manifest next update: Fri 27 Mar 2026 19:00:58 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: 8CodDa7W/GvpZut68Uv9pCyLtxCRKLXKO15l9Y/4fGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:70:36:80:e9:1f:3c:76:4d:9f:5f:97:a0:84:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Mar 26 19:00:58 2026 GMT
Not After : Mar 27 19:00:58 2026 GMT
Subject: CN=80ad4d73b5ca693df99c80bf71e3c596e7d3439a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:0f:87:7e:e7:fa:37:17:2c:ec:71:c4:2a:
e5:06:36:04:06:c2:bc:27:86:89:75:88:88:eb:02:
c5:b5:fa:a2:9b:0a:02:7c:59:92:29:61:07:0c:22:
26:ba:b6:a6:b9:d0:cc:a0:5c:fc:f7:3e:69:a8:f5:
d1:35:eb:b5:c6:8a:8f:9c:50:e3:fa:5e:7d:72:15:
44:4e:22:7e:17:d1:b4:cb:be:1a:d2:10:4b:f5:2a:
67:67:66:03:17:1b:4b:94:79:b2:6a:b8:c1:a5:bc:
83:94:32:ee:ae:ac:8e:a3:ba:79:34:08:3b:83:6f:
d0:b0:0e:b7:ce:78:f9:59:a7:2e:f5:32:65:1b:7f:
76:a5:f2:00:07:07:25:29:b9:5b:f2:94:5b:b6:41:
c4:94:76:52:bf:8b:68:f0:a3:1d:82:31:c0:b0:0e:
6e:31:10:4b:00:1a:7d:ea:b7:3f:2d:d0:11:8d:b6:
83:61:a3:0c:11:7c:e9:2e:d6:05:87:72:02:78:21:
ed:36:d3:67:a4:7c:d5:b5:f4:1b:c3:8a:23:4c:72:
e1:14:f4:5d:f0:80:2b:d5:20:7b:a1:3c:3d:76:63:
5a:be:ff:ec:27:f7:d9:2e:97:e6:ba:01:a0:1c:ec:
5b:a9:eb:d1:3b:85:69:1a:e3:49:71:7e:fb:aa:41:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AD:4D:73:B5:CA:69:3D:F9:9C:80:BF:71:E3:C5:96:E7:D3:43:9A
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:63:bb:1f:37:5b:ad:11:54:e7:e9:7a:09:5f:8b:29:fb:70:
b4:04:35:a0:82:6d:a7:bd:6b:2d:52:2f:20:40:6c:82:f1:38:
41:ec:81:d3:24:39:69:c4:c2:79:57:9c:1f:11:5c:d2:cb:6b:
db:95:89:a8:ce:2e:25:d3:13:20:4f:c2:32:9d:19:ee:06:2f:
c4:07:da:ae:57:05:ae:7c:af:f2:4c:c1:c7:70:9d:a1:61:c3:
67:ca:83:13:ef:de:9c:e0:6b:cf:35:42:e7:dc:36:f3:8e:a3:
4d:cf:79:33:a6:b6:50:1f:25:08:bc:73:22:41:ff:e5:f3:13:
98:5a:88:99:14:89:87:3d:39:79:96:ae:f6:73:a3:bd:e8:ef:
1b:8e:be:c3:bd:7e:b5:e6:df:a9:b9:62:7e:a4:ef:56:cb:bf:
85:2e:61:0f:9f:b8:f6:30:81:a8:09:a3:e3:bd:73:fa:14:e4:
a6:62:c8:04:86:87:69:cb:4c:42:86:b0:a3:48:d5:2f:78:72:
09:48:7b:70:a0:cd:39:dd:ae:9a:fe:4c:56:3e:bf:d9:da:49:
6d:b3:20:bc:b6:0f:5c:34:e5:cc:dc:4c:f1:4d:ba:82:2a:4d:
09:93:85:69:af:29:db:6f:2d:56:69:4a:af:78:55:a6:6c:7c:
c8:1e:57:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhXA2gOkfPHZNn1+XoIQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYWI4OTQ3YTg2MDFmNGJhMWE4NWJkMWMwN2IzZjM4NGY3
OTYxMWQwHhcNMjYwMzI2MTkwMDU4WhcNMjYwMzI3MTkwMDU4WjAzMTEwLwYDVQQD
Eyg4MGFkNGQ3M2I1Y2E2OTNkZjk5YzgwYmY3MWUzYzU5NmU3ZDM0MzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xIPh37n+jcXLOxxxCrlBjYEBsK8
J4aJdYiI6wLFtfqimwoCfFmSKWEHDCImuramudDMoFz89z5pqPXRNeu1xoqPnFDj
+l59chVETiJ+F9G0y74a0hBL9SpnZ2YDFxtLlHmyarjBpbyDlDLurqyOo7p5NAg7
g2/QsA63znj5Wacu9TJlG392pfIABwclKblb8pRbtkHElHZSv4to8KMdgjHAsA5u
MRBLABp96rc/LdARjbaDYaMMEXzpLtYFh3ICeCHtNtNnpHzVtfQbw4ojTHLhFPRd
8IAr1SB7oTw9dmNavv/sJ/fZLpfmugGgHOxbqevRO4VpGuNJcX77qkGiRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICtTXO1ymk9+ZyAv3HjxZbn00OaMB8GA1UdIwQY
MBaAFNGriUeoYB9Loahb0cB7PzhPeWEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEt
NDNjYzkwMTE3YWFjLzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEtNDNjYzkwMTE3YWFj
LzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2O7Hzdb
rRFU5+l6CV+LKftwtAQ1oIJtp71rLVIvIEBsgvE4QeyB0yQ5acTCeVecHxFc0str
25WJqM4uJdMTIE/CMp0Z7gYvxAfarlcFrnyv8kzBx3CdoWHDZ8qDE+/enOBrzzVC
59w2846jTc95M6a2UB8lCLxzIkH/5fMTmFqImRSJhz05eZau9nOjvejvG46+w71+
tebfqblifqTvVsu/hS5hD5+49jCBqAmj471z+hTkpmLIBIaHactMQoawo0jVL3hy
CUh7cKDNOd2umv5MVj6/2dpJbbMgvLYPXDTlzNxM8U26gipNCZOFaa8p228tVmlK
r3hVpmx8yB5XVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:50 2026 by rpki-client