Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
File: mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json)
Hash identifier: +JeRDmIK309fV5226vNG6b0efkSJHO+dLLOI/a7n6hM=
Subject key identifier: 61:55:1E:10:DF:93:1A:BE:D6:FE:20:8F:AD:CB:CF:F5:88:4F:2F:A6
Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
Certificate issuer: /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Certificate serial: 019D27049E798258FA5951F41B7F4F068665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
Manifest number: 0CC1
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: 8E5T2N7neax+Qd8sOES/ss6TGyqh+vSkI/7K51sjH8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9e:79:82:58:fa:59:51:f4:1b:7f:4f:06:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=61551e10df931abed6fe208fadcbcff5884f2fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:0b:19:cd:27:d8:b1:46:0d:9a:93:a0:ff:
93:17:39:5a:b9:43:50:a8:5c:6b:fe:eb:13:85:3b:
90:61:f0:49:d1:1f:83:0e:11:cd:21:57:a5:01:d7:
58:98:d5:cd:11:5a:0c:c2:d4:7f:be:16:5b:5c:73:
34:fe:13:72:28:df:33:20:7f:e5:51:8b:ca:66:ab:
10:fa:cf:c9:dc:3c:4d:74:4a:53:4a:da:8e:c4:ca:
c1:38:60:ed:76:d5:6f:59:95:4f:cf:f0:8f:a6:53:
80:ce:ee:05:c3:aa:08:4c:fa:56:c9:52:dd:c0:36:
b0:71:7c:b2:74:2b:6e:ce:f5:15:4b:1f:8c:6f:ba:
52:84:ab:c1:3f:73:07:28:c7:6f:2a:33:d2:ef:23:
f6:5f:35:a5:88:e4:2f:2f:ad:04:6c:f2:ea:74:55:
08:6b:d6:b8:78:6c:f6:fc:6b:e4:2d:9c:e4:68:c2:
55:db:96:ed:bc:de:83:32:9f:6c:b9:07:9e:bd:6e:
35:bb:2b:da:a1:79:93:4e:b7:24:93:17:37:64:f4:
8f:af:df:86:d8:0d:7b:97:b5:84:af:ad:72:cd:9a:
d3:e6:bb:82:73:27:97:a6:81:2a:66:84:af:f5:fd:
61:b8:97:9b:7a:1c:5b:e3:dd:50:e5:d1:5a:e5:3b:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:1E:10:DF:93:1A:BE:D6:FE:20:8F:AD:CB:CF:F5:88:4F:2F:A6
X509v3 Authority Key Identifier:
keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5c:bd:22:07:f8:92:14:5f:80:c9:6f:59:2d:8f:0b:cf:d1:
15:51:62:34:dc:60:f1:cd:11:7d:ff:1e:a2:90:b0:73:c3:3a:
f8:16:87:43:65:15:45:76:6b:be:c0:6a:8d:7c:83:b3:30:1a:
27:a4:d3:84:30:76:09:fe:77:62:4b:ff:99:76:41:87:65:0c:
6b:a8:df:09:ae:78:e7:0a:8e:18:49:6f:a0:58:d3:d5:27:3e:
9f:cd:b3:c9:dc:47:67:f6:71:3f:06:29:3a:3f:8b:b1:9d:5c:
d7:54:34:b2:78:e9:c6:eb:33:66:28:8d:da:e0:01:00:34:6c:
b4:0a:b1:a6:e5:b5:4d:5e:b6:9b:de:aa:47:d6:75:84:ec:f7:
48:20:50:13:cc:b5:c6:66:39:54:6f:e1:83:ed:4a:26:30:5b:
73:5e:5f:0d:bb:5b:f0:83:44:1c:70:12:5b:08:9d:c1:d0:a6:
2f:b4:7d:38:84:e4:39:f0:98:e2:41:f4:14:a3:dc:12:cf:dd:
89:06:8a:7b:a0:bf:94:13:91:62:c0:7a:22:8b:5d:56:51:db:
ae:51:9e:15:e3:d1:d5:4c:3c:82:e0:a4:93:65:7f:b7:34:69:
bf:42:43:3d:80:19:86:a1:d4:d9:d2:f4:b3:79:fd:d7:ca:ba:
b6:ee:9d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJ55glj6WVH0G39PBoZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZWUxYzQyOWNlN2YzMmUzMTBkY2I0NDEzZDhhZmU4Yzc2
NDVhNjEwHhcNMjYwMzI1MjIwMTQ3WhcNMjYwMzI2MjIwMTQ3WjAzMTEwLwYDVQQD
Eyg2MTU1MWUxMGRmOTMxYWJlZDZmZTIwOGZhZGNiY2ZmNTg4NGYyZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIELGc0n2LFGDZqToP+TFzlauUNQ
qFxr/usThTuQYfBJ0R+DDhHNIVelAddYmNXNEVoMwtR/vhZbXHM0/hNyKN8zIH/l
UYvKZqsQ+s/J3DxNdEpTStqOxMrBOGDtdtVvWZVPz/CPplOAzu4Fw6oITPpWyVLd
wDawcXyydCtuzvUVSx+Mb7pShKvBP3MHKMdvKjPS7yP2XzWliOQvL60EbPLqdFUI
a9a4eGz2/GvkLZzkaMJV25btvN6DMp9suQeevW41uyvaoXmTTrckkxc3ZPSPr9+G
2A17l7WEr61yzZrT5ruCcyeXpoEqZoSv9f1huJebehxb491Q5dFa5TsbJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFVHhDfkxq+1v4gj63Lz/WITy+mMB8GA1UdIwQY
MBaAFJjuHEKc5/MuMQ3LRBPYr+jHZFphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU80Y1Fwem44eTR4RGN0RUU5aXY2TWRrV21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lM2EzODEtNzdlMy00MjkwLTkxZWMt
ZmRhNThlZGVlNWU2LzEvbU80Y1Fwem44eTR4RGN0RUU5aXY2TWRrV21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lM2EzODEtNzdlMy00MjkwLTkxZWMtZmRhNThlZGVlNWU2
LzEvbU80Y1Fwem44eTR4RGN0RUU5aXY2TWRrV21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1y9Igf4
khRfgMlvWS2PC8/RFVFiNNxg8c0Rff8eopCwc8M6+BaHQ2UVRXZrvsBqjXyDszAa
J6TThDB2Cf53Ykv/mXZBh2UMa6jfCa545wqOGElvoFjT1Sc+n82zydxHZ/ZxPwYp
Oj+LsZ1c11Q0snjpxuszZiiN2uABADRstAqxpuW1TV62m96qR9Z1hOz3SCBQE8y1
xmY5VG/hg+1KJjBbc15fDbtb8INEHHASWwidwdCmL7R9OITkOfCY4kH0FKPcEs/d
iQaKe6C/lBORYsB6IotdVlHbrlGeFePR1Uw8guCkk2V/tzRpv0JDPYAZhqHU2dL0
s3n918q6tu6dWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:27 2026 by rpki-client