Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
File: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft (raw, json)
Hash identifier: a+ywdNwgF/flQIAhfwY8Na5L5myO1JmlI0KBLAbr1bM=
Subject key identifier: 54:5F:67:6D:5A:25:83:AD:19:CD:45:2C:E8:C2:CE:01:8D:80:FB:77
Authority key identifier: 98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
Certificate issuer: /CN=98ae843e7bc8748d015bc47f635b17561be72850
Certificate serial: 019D28F2289C54EC7FE89561D6481A4982BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 07:00:51 +0000
Manifest this update: Thu 26 Mar 2026 07:00:51 +0000
Manifest next update: Fri 27 Mar 2026 07:00:51 +0000
Files and hashes: 1: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl (hash: P8ZPBF+PNn0VDK68pWlIMDmx4t5yc94U3lYVYLXGRYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:28:9c:54:ec:7f:e8:95:61:d6:48:1a:49:82:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ae843e7bc8748d015bc47f635b17561be72850
Validity
Not Before: Mar 26 07:00:51 2026 GMT
Not After : Mar 27 07:00:51 2026 GMT
Subject: CN=545f676d5a2583ad19cd452ce8c2ce018d80fb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:92:bd:88:82:a1:a0:03:68:3c:f4:26:a8:54:
33:37:c1:76:58:1a:89:db:ea:51:3d:46:32:ba:d7:
00:73:79:44:db:11:31:3e:8d:9b:b6:06:55:e2:b6:
59:e8:80:ec:68:cb:96:51:20:f9:1b:54:fd:d5:ef:
20:95:74:8a:35:90:44:5b:47:45:b3:12:95:c5:1b:
0c:27:cc:76:b5:f2:44:ab:20:6b:bf:47:1b:0c:06:
38:e1:ce:a0:eb:68:f5:32:36:b0:b5:41:a9:51:e5:
a5:f9:50:60:49:93:31:86:3a:e4:80:ff:7e:5b:7c:
47:3a:52:a6:e0:ae:ec:83:a0:a5:d6:75:01:b7:2b:
c2:ea:f0:b5:60:80:be:aa:b0:cc:31:8e:28:55:fc:
62:22:c3:52:40:3b:cb:75:02:dc:09:99:36:e6:48:
a4:df:88:dd:2a:f5:c7:e1:ab:2d:b9:ec:3f:0a:32:
c8:fb:6e:d2:70:4b:55:84:05:80:6a:dc:6f:0d:c0:
06:06:72:44:5e:d3:bc:fa:d4:0a:41:f2:57:c1:2b:
c0:af:b6:6f:4b:2a:b3:42:64:a7:60:93:79:d3:95:
de:2d:9a:b1:5e:a2:fb:f9:bb:35:37:03:1c:ee:a1:
3b:99:5b:1f:70:4e:9e:18:af:72:7a:82:72:d0:50:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:67:6D:5A:25:83:AD:19:CD:45:2C:E8:C2:CE:01:8D:80:FB:77
X509v3 Authority Key Identifier:
keyid:98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d3:22:46:22:6c:5b:c1:25:98:1b:2e:1a:89:9f:94:61:a0:
3b:dc:2e:4f:e4:f4:3a:fa:5e:98:37:bb:4b:3d:88:73:e7:f5:
3b:54:ae:c4:0b:0b:92:93:7c:ac:2e:2d:cd:83:65:38:25:ad:
74:5e:d5:1c:82:45:0b:3a:b9:9b:7d:75:12:bf:24:6a:9f:17:
24:f6:a7:27:7d:70:a0:aa:77:d5:05:9a:d1:3e:1d:11:a9:52:
29:df:9c:85:a5:4e:73:94:5c:d1:de:80:68:e6:53:53:06:f5:
e0:65:d6:bd:c2:34:2a:ed:d4:8b:6b:3c:79:82:cd:03:97:ab:
3d:c5:bc:20:5f:94:b6:7f:53:d8:85:09:ce:cc:21:04:64:0e:
c7:f3:90:45:8e:1d:36:31:a6:75:4e:47:20:de:01:ef:f7:38:
cb:ba:6a:f5:1c:90:04:43:29:07:2c:04:66:a9:29:4e:5d:2d:
1c:ca:7e:6f:48:6b:6d:71:95:ef:2e:21:29:81:05:8d:eb:4d:
97:92:44:27:d6:a8:8f:01:52:e1:44:ca:55:0c:ae:ac:b2:83:
9d:cb:41:08:eb:a6:0b:47:7c:bd:fe:c1:8c:d1:af:75:65:35:
ff:a6:a3:0a:77:00:4e:17:15:b0:03:53:a6:8f:53:5c:c8:56:
04:c1:c8:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8iicVOx/6JVh1kgaSYK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWU4NDNlN2JjODc0OGQwMTViYzQ3ZjYzNWIxNzU2MWJl
NzI4NTAwHhcNMjYwMzI2MDcwMDUxWhcNMjYwMzI3MDcwMDUxWjAzMTEwLwYDVQQD
Eyg1NDVmNjc2ZDVhMjU4M2FkMTljZDQ1MmNlOGMyY2UwMThkODBmYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5K9iIKhoANoPPQmqFQzN8F2WBqJ
2+pRPUYyutcAc3lE2xExPo2btgZV4rZZ6IDsaMuWUSD5G1T91e8glXSKNZBEW0dF
sxKVxRsMJ8x2tfJEqyBrv0cbDAY44c6g62j1MjawtUGpUeWl+VBgSZMxhjrkgP9+
W3xHOlKm4K7sg6Cl1nUBtyvC6vC1YIC+qrDMMY4oVfxiIsNSQDvLdQLcCZk25kik
34jdKvXH4astuew/CjLI+27ScEtVhAWAatxvDcAGBnJEXtO8+tQKQfJXwSvAr7Zv
SyqzQmSnYJN505XeLZqxXqL7+bs1NwMc7qE7mVsfcE6eGK9yeoJy0FDGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRfZ21aJYOtGc1FLOjCzgGNgPt3MB8GA1UdIwQY
MBaAFJiuhD57yHSNAVvEf2NbF1Yb5yhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNGU1ZDMtYjkyMS00Mjc0LThjZDEt
ZWQwNzY3NjcxOGJhLzEvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wNGU1ZDMtYjkyMS00Mjc0LThjZDEtZWQwNzY3NjcxOGJh
LzEvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtMiRiJs
W8ElmBsuGomflGGgO9wuT+T0OvpemDe7Sz2Ic+f1O1SuxAsLkpN8rC4tzYNlOCWt
dF7VHIJFCzq5m311Er8kap8XJPanJ31woKp31QWa0T4dEalSKd+chaVOc5Rc0d6A
aOZTUwb14GXWvcI0Ku3Ui2s8eYLNA5erPcW8IF+Utn9T2IUJzswhBGQOx/OQRY4d
NjGmdU5HIN4B7/c4y7pq9RyQBEMpBywEZqkpTl0tHMp+b0hrbXGV7y4hKYEFjetN
l5JEJ9aojwFS4UTKVQyurLKDnctBCOumC0d8vf7BjNGvdWU1/6ajCncAThcVsANT
po9TXMhWBMHIIw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:08 2026 by rpki-client