Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.mft
File: R2ehIMt9otZLgS5viOE4CVMFVWw.mft (raw, json)
Hash identifier: z0faTWjHn/fnRgxst5/AhwCUnSVbOGhdWqRI6ZIwO7M=
Subject key identifier: 07:F9:91:1D:D3:14:29:FA:A0:D7:E4:2B:16:5E:8D:AF:CA:FB:84:A5
Authority key identifier: 47:67:A1:20:CB:7D:A2:D6:4B:81:2E:6F:88:E1:38:09:53:05:55:6C
Certificate issuer: /CN=4767a120cb7da2d64b812e6f88e138095305556c
Certificate serial: 019D3262B9F1D90C97D917BE2C45E1AB3A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2ehIMt9otZLgS5viOE4CVMFVWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.mft
Manifest number: 68
Signing time: Sat 28 Mar 2026 03:00:24 +0000
Manifest this update: Sat 28 Mar 2026 03:00:24 +0000
Manifest next update: Sun 29 Mar 2026 03:00:24 +0000
Files and hashes: 1: R2ehIMt9otZLgS5viOE4CVMFVWw.crl (hash: I3uVasNB7MC5uxp6Bl3LFb0ec6GFAnTZXKDiTnmsvfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2ehIMt9otZLgS5viOE4CVMFVWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:b9:f1:d9:0c:97:d9:17:be:2c:45:e1:ab:3a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4767a120cb7da2d64b812e6f88e138095305556c
Validity
Not Before: Mar 28 03:00:24 2026 GMT
Not After : Mar 29 03:00:24 2026 GMT
Subject: CN=07f9911dd31429faa0d7e42b165e8dafcafb84a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:65:d8:45:db:1c:95:0e:ef:ad:c1:8b:97:
fa:5b:eb:19:dd:23:3f:9b:88:70:ec:84:74:b3:35:
c4:0a:0d:14:d5:8a:d1:96:85:70:f6:df:9c:0e:ac:
15:12:ef:00:16:36:dd:09:bc:77:1e:d4:35:cd:d4:
68:12:6d:b5:cf:22:fa:be:23:4b:fe:6f:3b:96:64:
d2:93:4b:43:2d:cb:80:98:6a:64:19:c0:57:6d:c8:
63:23:ce:34:af:b8:98:6f:f0:d9:88:ee:5b:e3:83:
1c:11:a0:d2:42:92:cc:6c:85:f8:9b:b0:2c:e9:12:
03:7a:e3:6a:b9:2d:48:a1:4b:22:58:e4:a6:d1:b7:
fb:a7:69:0c:8e:d3:f1:28:87:ce:20:e0:ff:dd:21:
d7:60:e9:76:c2:eb:dd:53:85:ac:0a:f0:7c:dd:52:
68:7d:13:e8:06:47:dc:61:67:e9:d3:f5:cb:4d:75:
3a:90:0d:17:43:82:77:8b:ab:f2:1d:fb:0b:8e:9a:
3d:75:1f:89:e2:09:7a:7a:17:f3:c6:cb:ea:3f:87:
35:13:eb:35:28:bf:5b:d0:6b:b3:32:68:f9:0e:74:
84:df:95:73:80:aa:e6:67:c7:ac:4f:39:03:68:82:
f3:17:59:ea:b7:cb:dc:e2:b6:1e:08:be:9d:d6:6a:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:91:1D:D3:14:29:FA:A0:D7:E4:2B:16:5E:8D:AF:CA:FB:84:A5
X509v3 Authority Key Identifier:
keyid:47:67:A1:20:CB:7D:A2:D6:4B:81:2E:6F:88:E1:38:09:53:05:55:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2ehIMt9otZLgS5viOE4CVMFVWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:03:fd:d7:9d:44:66:fb:a1:a4:f6:02:24:5f:ce:98:4a:a1:
fe:79:54:72:58:68:15:16:38:f8:12:07:c5:a6:98:c6:8b:98:
b1:36:6e:fa:f7:92:f4:30:3a:67:f1:9b:7b:22:ef:da:c8:6b:
4f:78:8b:df:92:11:71:1d:55:5e:eb:67:d1:e5:36:58:0a:02:
cd:31:f7:0d:9c:a4:cb:49:28:a4:17:15:9f:87:2b:ba:95:a3:
a7:49:79:03:56:04:b0:88:e7:03:0c:60:5a:80:5c:eb:be:58:
05:89:b1:a0:b7:dd:ce:16:2b:ee:56:be:df:c3:40:30:25:5c:
6b:cd:df:ab:6d:de:b0:f8:1f:3c:85:49:96:bc:73:ac:5a:91:
76:04:ce:80:83:65:ee:b7:d4:8c:f5:5e:5d:56:19:dc:05:75:
a6:39:6f:ab:0b:e4:31:6e:cf:cd:10:42:f7:e0:55:58:69:87:
6c:d0:31:5a:16:e5:aa:63:4b:32:bb:83:78:e5:25:3b:b0:b1:
cb:24:e2:98:17:50:fd:ca:71:93:fe:23:89:f0:e6:4a:1b:72:
cb:35:bd:8b:a9:9c:7c:5d:14:d0:6f:be:d7:bd:45:53:1e:94:
e6:24:17:de:dd:c3:dd:2b:d6:b5:21:50:03:4e:75:3a:34:3c:
8f:66:13:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yYrnx2QyX2Re+LEXhqzpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjdhMTIwY2I3ZGEyZDY0YjgxMmU2Zjg4ZTEzODA5NTMw
NTU1NmMwHhcNMjYwMzI4MDMwMDI0WhcNMjYwMzI5MDMwMDI0WjAzMTEwLwYDVQQD
EygwN2Y5OTExZGQzMTQyOWZhYTBkN2U0MmIxNjVlOGRhZmNhZmI4NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYZl2EXbHJUO763Bi5f6W+sZ3SM/
m4hw7IR0szXECg0U1YrRloVw9t+cDqwVEu8AFjbdCbx3HtQ1zdRoEm21zyL6viNL
/m87lmTSk0tDLcuAmGpkGcBXbchjI840r7iYb/DZiO5b44McEaDSQpLMbIX4m7As
6RIDeuNquS1IoUsiWOSm0bf7p2kMjtPxKIfOIOD/3SHXYOl2wuvdU4WsCvB83VJo
fRPoBkfcYWfp0/XLTXU6kA0XQ4J3i6vyHfsLjpo9dR+J4gl6ehfzxsvqP4c1E+s1
KL9b0GuzMmj5DnSE35VzgKrmZ8esTzkDaILzF1nqt8vc4rYeCL6d1mr4UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf5kR3TFCn6oNfkKxZeja/K+4SlMB8GA1UdIwQY
MBaAFEdnoSDLfaLWS4Eub4jhOAlTBVVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJlaElNdDlvdFpMZ1M1dmlPRTRDVk1GVld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xOTBiYTYtYzRiMy00YTUyLTgwMGIt
NDM1MmU4ODBhOGY5LzEvUjJlaElNdDlvdFpMZ1M1dmlPRTRDVk1GVld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xOTBiYTYtYzRiMy00YTUyLTgwMGItNDM1MmU4ODBhOGY5
LzEvUjJlaElNdDlvdFpMZ1M1dmlPRTRDVk1GVld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAP9151E
ZvuhpPYCJF/OmEqh/nlUclhoFRY4+BIHxaaYxouYsTZu+veS9DA6Z/GbeyLv2shr
T3iL35IRcR1VXutn0eU2WAoCzTH3DZyky0kopBcVn4crupWjp0l5A1YEsIjnAwxg
WoBc675YBYmxoLfdzhYr7la+38NAMCVca83fq23esPgfPIVJlrxzrFqRdgTOgINl
7rfUjPVeXVYZ3AV1pjlvqwvkMW7PzRBC9+BVWGmHbNAxWhblqmNLMruDeOUlO7Cx
yyTimBdQ/cpxk/4jifDmShtyyzW9i6mcfF0U0G++171FUx6U5iQX3t3D3SvWtSFQ
A051OjQ8j2YTFw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:19 2026 by rpki-client