Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File: cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier: 6hyQ2Wkn4RxCkswaReIoOcbuoyOXGE7WhaC9rmPnVoE=
Subject key identifier: 1F:58:33:70:0E:98:56:EC:51:9E:13:0A:FF:0B:34:7D:B0:AE:E3:5C
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer: /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial: 019D29977284C35C84C6A8DD035C5B41F27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number: 07E3
Signing time: Thu 26 Mar 2026 10:01:24 +0000
Manifest this update: Thu 26 Mar 2026 10:01:24 +0000
Manifest next update: Fri 27 Mar 2026 10:01:24 +0000
Files and hashes: 1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: lcewsC6UW1OV6FmV7z2hIYmaYl8QSpAXcY/1ws7BgQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:72:84:c3:5c:84:c6:a8:dd:03:5c:5b:41:f2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Validity
Not Before: Mar 26 10:01:24 2026 GMT
Not After : Mar 27 10:01:24 2026 GMT
Subject: CN=1f5833700e9856ec519e130aff0b347db0aee35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:03:72:d9:6c:25:a2:41:98:9a:4f:15:98:
e5:33:53:ec:72:9e:b9:cd:54:f9:75:51:6b:b5:8b:
9f:74:f9:a2:a8:fa:20:73:69:ff:3b:c1:f9:d4:ab:
6c:2b:04:27:a8:06:31:45:02:d1:c7:58:ce:da:88:
70:7a:a9:e6:9e:5b:77:09:8a:52:63:43:e8:40:4f:
01:4a:bb:a2:c9:dd:39:43:74:30:f9:0b:de:23:10:
c5:24:7d:ac:ba:9d:d3:2c:af:d2:05:80:f9:f4:ad:
eb:80:ac:5f:1b:0f:b7:dc:67:99:dd:37:b5:49:71:
ef:6f:9c:ae:41:3f:59:3c:33:ed:33:7b:a2:d5:80:
e5:7d:fc:49:3c:38:a5:b3:47:48:15:0d:1c:42:32:
d9:a5:3c:a0:b6:56:57:c6:8f:57:13:48:64:0e:24:
62:b3:d2:7c:4b:3d:91:78:c1:01:10:10:42:81:6a:
cc:53:d4:ec:e1:c5:bb:5f:a0:d0:e0:83:62:87:fc:
55:15:30:79:8a:36:01:c8:d7:d0:a8:7b:a0:2a:cf:
4b:a5:97:cf:0e:d7:c0:d5:4d:3a:0d:72:ed:ab:bb:
6b:42:6b:99:e5:bd:c3:09:e3:f0:db:61:8f:ba:16:
a2:59:3f:81:89:89:95:f8:74:28:83:5d:0e:29:52:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:58:33:70:0E:98:56:EC:51:9E:13:0A:FF:0B:34:7D:B0:AE:E3:5C
X509v3 Authority Key Identifier:
keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:91:8d:cf:6d:c0:b6:95:ee:54:9a:95:d4:63:cd:d4:7a:7c:
04:d3:c6:3f:8b:9f:df:f6:18:ff:93:40:fb:4a:c2:e1:78:3a:
ef:7b:ca:0a:68:9c:ff:8d:da:3c:c4:ab:56:7f:0c:b4:5f:da:
bf:1d:b1:42:53:ce:b3:38:51:00:44:cc:ef:6e:70:7d:44:e6:
53:46:9b:69:f6:54:9a:df:d7:dc:80:8d:5a:54:d0:4f:01:ce:
69:51:68:ba:e2:f7:e0:a4:28:40:96:8c:c8:79:3b:a2:7e:e7:
69:ad:04:39:fb:e1:5a:26:cb:ad:a8:48:5c:4c:5a:18:c0:20:
b5:c0:7f:a0:53:a7:9d:72:98:3f:ec:b1:4b:0a:a5:8f:19:26:
1a:cd:fe:c3:24:ef:bb:e0:09:39:ee:a2:ae:28:fb:89:f2:5c:
31:40:8a:23:b2:ea:b3:c1:10:f4:2f:56:d8:e5:a4:7a:d0:46:
42:c6:55:c9:16:b4:14:a6:f0:ac:63:59:44:26:90:cf:95:fe:
c3:cd:13:a9:58:fb:c6:49:18:4a:5d:1d:9c:f9:75:58:6a:c7:
46:0b:a8:8a:cb:47:27:34:ae:20:86:71:3e:57:89:eb:59:43:
a5:3c:f8:04:94:d0:0d:51:7b:c4:76:68:0d:6b:ce:4d:07:4f:
b2:48:21:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl3KEw1yExqjdA1xbQfJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzNjZGFjYzFlMjhmMDIxM2RmYjI4ZjNkZmQ4YjljYmRk
M2M2MmUwHhcNMjYwMzI2MTAwMTI0WhcNMjYwMzI3MTAwMTI0WjAzMTEwLwYDVQQD
EygxZjU4MzM3MDBlOTg1NmVjNTE5ZTEzMGFmZjBiMzQ3ZGIwYWVlMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaoDctlsJaJBmJpPFZjlM1Pscp65
zVT5dVFrtYufdPmiqPogc2n/O8H51KtsKwQnqAYxRQLRx1jO2ohweqnmnlt3CYpS
Y0PoQE8BSruiyd05Q3Qw+QveIxDFJH2sup3TLK/SBYD59K3rgKxfGw+33GeZ3Te1
SXHvb5yuQT9ZPDPtM3ui1YDlffxJPDils0dIFQ0cQjLZpTygtlZXxo9XE0hkDiRi
s9J8Sz2ReMEBEBBCgWrMU9Ts4cW7X6DQ4INih/xVFTB5ijYByNfQqHugKs9LpZfP
DtfA1U06DXLtq7trQmuZ5b3DCePw22GPuhaiWT+BiYmV+HQog10OKVI6IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9YM3AOmFbsUZ4TCv8LNH2wruNcMB8GA1UdIwQY
MBaAFHJzzazB4o8CE9+yjz39i5y908YuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjIt
YzBhMjViMTA5MDJhLzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjItYzBhMjViMTA5MDJh
LzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJGNz23A
tpXuVJqV1GPN1Hp8BNPGP4uf3/YY/5NA+0rC4Xg673vKCmic/43aPMSrVn8MtF/a
vx2xQlPOszhRAETM725wfUTmU0abafZUmt/X3ICNWlTQTwHOaVFouuL34KQoQJaM
yHk7on7naa0EOfvhWibLrahIXExaGMAgtcB/oFOnnXKYP+yxSwqljxkmGs3+wyTv
u+AJOe6irij7ifJcMUCKI7Lqs8EQ9C9W2OWketBGQsZVyRa0FKbwrGNZRCaQz5X+
w80TqVj7xkkYSl0dnPl1WGrHRguoistHJzSuIIZxPleJ61lDpTz4BJTQDVF7xHZo
DWvOTQdPskghww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:40 2026 by rpki-client