Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: 2WPuXIsLhVX7lKLYfhDtfeMrCiwQ+ClT/Nd4YgYvwLs=
Subject key identifier: 9B:F1:AC:B0:5B:A2:5C:F2:F0:2F:37:70:A7:37:D0:FF:4A:CA:D5:0B
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 019D2772D8290D2228DDD6540A3F1F8A7AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 08BD
Signing time: Thu 26 Mar 2026 00:02:10 +0000
Manifest this update: Thu 26 Mar 2026 00:02:10 +0000
Manifest next update: Fri 27 Mar 2026 00:02:10 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: IQ4ytsA5UXnQamn+sYZT96hqqs1dQD1T9yjZ66XJXz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d8:29:0d:22:28:dd:d6:54:0a:3f:1f:8a:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Mar 26 00:02:10 2026 GMT
Not After : Mar 27 00:02:10 2026 GMT
Subject: CN=9bf1acb05ba25cf2f02f3770a737d0ff4acad50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:db:c9:d6:e4:dc:c7:1f:8e:bb:7f:67:5f:
eb:19:fc:91:90:2b:88:e9:77:89:85:7b:fa:bf:24:
41:a6:0e:7f:d0:8f:22:1d:0b:cf:91:92:98:0e:30:
80:48:04:68:70:5c:74:ce:9a:d0:2b:4c:4e:21:ff:
36:c1:4d:a4:ea:bc:58:0e:fb:a5:44:c1:4b:c9:5c:
ea:a3:63:24:8c:08:59:c5:61:3a:15:1d:76:f8:1a:
56:00:a2:12:ff:41:3c:fb:31:78:68:a4:56:16:6b:
ab:44:51:25:4d:7a:46:b3:44:94:ff:8e:d4:e6:7a:
c6:1e:00:86:fa:80:c4:d4:88:4f:73:92:58:ee:d8:
cd:db:9e:26:29:e8:ea:e7:33:10:e5:70:a0:11:42:
f4:4c:34:88:3a:6a:1f:46:80:6a:4f:b0:d5:25:43:
20:82:62:af:49:87:46:94:05:16:82:34:42:3e:6a:
4f:95:f4:9c:77:0b:4c:47:c4:3a:e9:53:7e:71:3f:
83:bb:3e:05:2b:e4:d5:c2:bb:22:1c:b7:79:ef:43:
4a:32:32:df:38:a2:2f:4e:3f:93:6d:5a:52:ed:07:
cc:ab:cd:6b:03:1c:36:3a:c9:c2:44:22:0c:4c:49:
b2:4c:b8:df:ab:aa:05:26:d8:5b:0b:a3:7a:d8:48:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:AC:B0:5B:A2:5C:F2:F0:2F:37:70:A7:37:D0:FF:4A:CA:D5:0B
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bd:3c:41:3d:f4:0d:a2:a7:da:98:7a:2f:35:45:b3:98:7f:
46:ac:df:04:4c:15:63:b5:66:3e:c1:58:48:83:46:f2:f9:7a:
8c:38:0e:94:52:51:0c:01:b1:60:79:88:33:0b:06:a5:e8:f7:
b4:e0:6b:d4:55:e9:9f:12:b0:3f:d6:39:e1:b5:40:0c:28:00:
b8:0f:0c:f4:ce:00:d3:f2:de:07:fb:6b:07:14:d2:97:f6:b6:
d9:c4:23:a4:13:47:28:77:10:f9:46:fb:0d:0e:38:6d:72:78:
4d:ca:4f:c1:ee:57:2e:ab:12:0f:a1:61:3a:2f:4b:d6:2a:d1:
f3:de:a5:6f:4c:1d:a3:1c:b1:44:6d:ef:30:a7:92:03:4d:cb:
24:57:74:d8:43:83:6d:d7:36:8b:c1:f7:a6:95:89:e7:5f:1e:
2c:d2:01:3a:de:c6:d8:ed:7c:89:45:22:95:92:eb:77:91:65:
6b:2a:42:7a:d4:b2:3a:55:dd:c2:f6:99:29:9d:54:c8:bb:eb:
1b:53:d2:48:a2:77:18:24:40:80:5b:40:e7:9f:ed:0a:76:fe:
96:95:fd:52:d6:da:47:42:23:54:26:7e:8a:6f:a8:5b:11:17:
a2:4f:f3:d6:67:c0:a0:d2:cc:f9:ba:9e:8a:e4:ea:38:15:2f:
dd:50:9a:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nctgpDSIo3dZUCj8finq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YzlmMDY3MDA3Njg0ZmFjY2E5YmU4Y2UwMmRhNDY3NmMw
OTk3MmEwHhcNMjYwMzI2MDAwMjEwWhcNMjYwMzI3MDAwMjEwWjAzMTEwLwYDVQQD
Eyg5YmYxYWNiMDViYTI1Y2YyZjAyZjM3NzBhNzM3ZDBmZjRhY2FkNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrvbydbk3Mcfjrt/Z1/rGfyRkCuI
6XeJhXv6vyRBpg5/0I8iHQvPkZKYDjCASARocFx0zprQK0xOIf82wU2k6rxYDvul
RMFLyVzqo2MkjAhZxWE6FR12+BpWAKIS/0E8+zF4aKRWFmurRFElTXpGs0SU/47U
5nrGHgCG+oDE1IhPc5JY7tjN254mKejq5zMQ5XCgEUL0TDSIOmofRoBqT7DVJUMg
gmKvSYdGlAUWgjRCPmpPlfScdwtMR8Q66VN+cT+Duz4FK+TVwrsiHLd570NKMjLf
OKIvTj+TbVpS7QfMq81rAxw2OsnCRCIMTEmyTLjfq6oFJthbC6N62Eg3TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvxrLBbolzy8C83cKc30P9KytULMB8GA1UdIwQY
MBaAFKTJ8GcAdoT6zKm+jOAtpGdsCZcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1ud1p3QjJoUHJNcWI2TTRDMmtaMndKbHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jZjFkODMtMTlmYS00MGM0LTg1NDMt
NTExYWFjZWI4OTAwLzEvcE1ud1p3QjJoUHJNcWI2TTRDMmtaMndKbHlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jZjFkODMtMTlmYS00MGM0LTg1NDMtNTExYWFjZWI4OTAw
LzEvcE1ud1p3QjJoUHJNcWI2TTRDMmtaMndKbHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoL08QT30
DaKn2ph6LzVFs5h/RqzfBEwVY7VmPsFYSING8vl6jDgOlFJRDAGxYHmIMwsGpej3
tOBr1FXpnxKwP9Y54bVADCgAuA8M9M4A0/LeB/trBxTSl/a22cQjpBNHKHcQ+Ub7
DQ44bXJ4TcpPwe5XLqsSD6FhOi9L1irR896lb0wdoxyxRG3vMKeSA03LJFd02EOD
bdc2i8H3ppWJ518eLNIBOt7G2O18iUUilZLrd5FlaypCetSyOlXdwvaZKZ1UyLvr
G1PSSKJ3GCRAgFtA55/tCnb+lpX9UtbaR0IjVCZ+im+oWxEXok/z1mfAoNLM+bqe
iuTqOBUv3VCaoA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:12 2026 by rpki-client