Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
File: me99CIJJhFXF_BP4LXK07pMuHwI.mft (raw, json)
Hash identifier: hG4/KmJzL2S6EXGrNs6RhdsiXzC7yasnJFrOcz1NpXo=
Subject key identifier: 88:C4:CC:8D:DB:26:4F:27:E3:78:DE:A4:E6:C9:43:9E:9C:A8:02:86
Authority key identifier: 99:EF:7D:08:82:49:84:55:C5:FC:13:F8:2D:72:B4:EE:93:2E:1F:02
Certificate issuer: /CN=99ef7d0882498455c5fc13f82d72b4ee932e1f02
Certificate serial: 019D33AD28AF60A50F9107C33112BABE3A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me99CIJJhFXF_BP4LXK07pMuHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
Manifest number: 2E
Signing time: Sat 28 Mar 2026 09:01:19 +0000
Manifest this update: Sat 28 Mar 2026 09:01:19 +0000
Manifest next update: Sun 29 Mar 2026 09:01:19 +0000
Files and hashes: 1: me99CIJJhFXF_BP4LXK07pMuHwI.crl (hash: gD+3uJ38YQE9+pQBBLTofmvRNePWgE7aWtX4MuyteIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/me99CIJJhFXF_BP4LXK07pMuHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:28:af:60:a5:0f:91:07:c3:31:12:ba:be:3a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ef7d0882498455c5fc13f82d72b4ee932e1f02
Validity
Not Before: Mar 28 09:01:19 2026 GMT
Not After : Mar 29 09:01:19 2026 GMT
Subject: CN=88c4cc8ddb264f27e378dea4e6c9439e9ca80286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:98:84:ca:f6:77:b5:2d:5c:3f:79:92:41:
6b:4b:41:84:70:b8:58:21:87:06:a6:50:63:d5:bb:
1e:ef:52:16:6b:c8:43:79:6d:16:4b:00:c7:cc:6c:
c9:61:64:91:36:bc:81:79:8c:47:0d:86:10:32:82:
8e:e4:ed:b6:fa:d7:ea:3f:18:56:14:72:01:8a:03:
67:68:d6:60:a7:48:e4:c8:b9:b4:bf:fa:f3:f1:0e:
81:d6:fc:5b:6b:f9:51:39:c1:da:12:fb:2b:0d:e6:
76:c5:b6:9a:d1:f2:12:dc:a8:89:43:b0:4e:31:aa:
2e:40:86:9a:52:c1:80:9e:18:9c:e9:98:65:51:23:
07:f5:96:99:f6:11:77:18:0e:e1:dc:ef:94:81:bc:
a1:10:90:34:4a:ad:25:5c:e3:a6:c5:ef:a6:68:25:
ad:14:57:c4:4d:55:6e:a0:1b:e9:7e:9a:b7:8a:d7:
e0:3e:a4:50:85:35:b2:42:85:22:7d:03:f9:ce:b8:
1e:12:78:17:81:c1:0d:36:6a:3c:13:c2:0a:74:e1:
f0:5b:9f:1d:6b:db:43:29:bb:e4:63:85:cd:6e:89:
d9:ec:ff:fa:5e:45:cb:02:7f:51:94:47:b4:6d:09:
86:08:a9:4d:d2:d1:23:33:99:10:99:50:38:0c:5a:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C4:CC:8D:DB:26:4F:27:E3:78:DE:A4:E6:C9:43:9E:9C:A8:02:86
X509v3 Authority Key Identifier:
keyid:99:EF:7D:08:82:49:84:55:C5:FC:13:F8:2D:72:B4:EE:93:2E:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me99CIJJhFXF_BP4LXK07pMuHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c8:0b:b0:06:ff:ee:15:98:97:c0:7c:e9:94:45:8a:4d:10:
d2:84:f8:c1:d8:c5:99:5a:aa:00:f7:5f:96:78:fe:3b:d0:87:
cc:ce:fd:85:93:0c:a2:43:ef:e9:c2:b1:a2:d9:58:54:83:1d:
25:d0:89:6d:a3:80:06:4b:64:23:66:57:d1:19:43:76:a8:37:
01:50:86:3c:0a:aa:5a:23:27:18:5d:97:ee:63:68:e4:a9:bd:
18:a6:46:6a:48:de:6d:e3:8f:59:a1:88:2a:4a:3e:cf:22:11:
d5:ef:38:3f:9f:b7:bb:ab:c4:18:fe:a0:3d:b8:83:18:7d:10:
f7:2f:5b:88:5d:6f:2f:af:9d:dc:29:c7:d8:92:93:09:ed:f4:
77:18:8d:79:79:a9:fd:3c:1e:4f:f7:b6:be:17:5a:05:e0:17:
fc:76:64:81:49:e6:26:d4:e5:c8:02:cc:66:f6:74:b2:20:36:
a2:c3:e0:b7:9c:95:f5:c0:a6:c7:4e:16:9e:e0:c3:30:6c:74:
92:cb:3a:ff:41:36:7a:cb:09:53:70:85:7e:00:26:ee:07:36:
8a:90:76:b3:ad:b7:d9:b4:df:7e:f6:2f:3b:4a:25:a2:d6:fb:
cd:39:ef:ea:14:ad:8f:cf:03:2f:35:89:15:15:66:05:b7:b7:
8e:98:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:08 2026 by rpki-client