Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.mft
File: vW0f5TRRGyC27i-44bI9OM0NIag.mft (raw, json)
Hash identifier: xHX9wM+HSZMU6MgBglUU1TH7r16s602ixb7nKB7o2Sw=
Subject key identifier: 6D:7A:97:D9:AB:9E:26:2A:C8:C6:80:2E:7C:BE:0A:BB:77:19:AE:E5
Authority key identifier: BD:6D:1F:E5:34:51:1B:20:B6:EE:2F:B8:E1:B2:3D:38:CD:0D:21:A8
Certificate issuer: /CN=bd6d1fe534511b20b6ee2fb8e1b23d38cd0d21a8
Certificate serial: 019D31F5C556C29DE25C1B9CF41260C29A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vW0f5TRRGyC27i-44bI9OM0NIag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.mft
Manifest number: C8
Signing time: Sat 28 Mar 2026 01:01:23 +0000
Manifest this update: Sat 28 Mar 2026 01:01:23 +0000
Manifest next update: Sun 29 Mar 2026 01:01:23 +0000
Files and hashes: 1: vW0f5TRRGyC27i-44bI9OM0NIag.crl (hash: 8JHY+wLj9Fgj16qzK1JvZgyCp9kmtpR7woFCcWuINFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.mft
rsync://rpki.ripe.net/repository/DEFAULT/vW0f5TRRGyC27i-44bI9OM0NIag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:c5:56:c2:9d:e2:5c:1b:9c:f4:12:60:c2:9a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6d1fe534511b20b6ee2fb8e1b23d38cd0d21a8
Validity
Not Before: Mar 28 01:01:23 2026 GMT
Not After : Mar 29 01:01:23 2026 GMT
Subject: CN=6d7a97d9ab9e262ac8c6802e7cbe0abb7719aee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:30:d2:e1:a3:5e:34:b3:71:df:47:e9:5d:
7b:04:63:76:8e:dd:1e:c1:df:39:2b:91:a8:6d:4f:
79:75:5f:d2:e0:1e:ab:f3:7f:88:11:d5:77:95:b7:
82:a1:7e:09:ed:62:57:50:17:aa:b6:60:28:08:52:
49:83:cd:9b:de:9a:ce:5e:35:83:b9:32:67:11:0c:
1e:bf:bd:1a:f1:50:2e:de:89:e8:5e:19:9e:3d:fc:
95:c7:2e:26:a4:6d:f7:b8:2d:46:5a:e5:24:d7:4c:
08:de:1a:67:ea:c9:31:c3:46:4e:dd:4a:bb:09:84:
2f:55:da:6f:e1:05:35:87:03:e4:e5:d8:41:42:79:
d4:9e:d5:85:01:fb:60:19:43:2a:c8:15:39:cc:a8:
52:47:fd:b0:d5:98:62:a8:93:05:fe:f0:3c:a0:21:
a1:04:3c:82:94:e0:b3:e5:76:20:11:e5:89:1c:3b:
78:4a:79:b7:0a:39:63:a7:1a:45:ac:9b:7a:a0:93:
50:14:57:a3:8c:2d:5c:c0:37:2c:05:e8:dc:e2:08:
09:d7:db:e9:b1:42:73:4c:2a:bc:d6:88:b0:9a:20:
21:ce:67:cc:de:d7:c8:cb:95:cd:28:a7:91:27:02:
be:c6:3d:a6:0b:e7:6b:84:18:91:81:75:82:a4:ec:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:97:D9:AB:9E:26:2A:C8:C6:80:2E:7C:BE:0A:BB:77:19:AE:E5
X509v3 Authority Key Identifier:
keyid:BD:6D:1F:E5:34:51:1B:20:B6:EE:2F:B8:E1:B2:3D:38:CD:0D:21:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW0f5TRRGyC27i-44bI9OM0NIag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:75:b5:75:64:70:7c:4e:c5:79:48:12:97:dc:81:cb:74:
3d:38:cc:b1:01:f3:2d:50:d2:ef:8e:4c:d8:06:66:0d:74:cc:
1f:95:28:56:da:53:16:a8:df:89:8a:76:b8:6e:31:bc:7e:66:
cd:c3:55:0f:1a:db:69:07:bb:cd:f3:f2:3d:51:0e:29:1e:56:
68:74:d9:ab:e3:3a:3c:69:0f:20:18:bb:0f:d9:04:d5:66:45:
e5:af:1c:32:2e:11:79:bd:8a:92:ad:4f:80:ce:d4:bf:f0:e9:
4c:a9:cc:19:c5:df:b5:ee:6c:37:97:98:8d:23:94:0c:7d:cd:
a9:21:1a:80:cb:c3:0c:4a:40:65:a1:eb:b0:7a:50:e1:76:93:
fa:a1:4f:e4:c7:8e:d4:f5:04:20:0a:39:0a:ea:e7:92:be:9c:
46:01:af:ce:f3:0f:35:3a:e4:3a:2b:8b:36:16:ec:78:27:09:
78:a0:ba:98:f2:f5:9f:f7:10:0a:09:73:f4:9c:97:ed:4c:5b:
b9:b0:13:9f:cb:5e:78:cc:78:59:9c:d3:51:33:99:4b:0a:4b:
fa:d8:8b:33:cc:1f:02:d5:ab:6e:db:85:1c:70:ad:e4:80:45:
03:88:10:11:0d:16:cd:c4:d4:db:c9:e1:a4:23:04:a5:39:62:
78:2c:46:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0x9cVWwp3iXBuc9BJgwpqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNmQxZmU1MzQ1MTFiMjBiNmVlMmZiOGUxYjIzZDM4Y2Qw
ZDIxYTgwHhcNMjYwMzI4MDEwMTIzWhcNMjYwMzI5MDEwMTIzWjAzMTEwLwYDVQQD
Eyg2ZDdhOTdkOWFiOWUyNjJhYzhjNjgwMmU3Y2JlMGFiYjc3MTlhZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokgw0uGjXjSzcd9H6V17BGN2jt0e
wd85K5GobU95dV/S4B6r83+IEdV3lbeCoX4J7WJXUBeqtmAoCFJJg82b3prOXjWD
uTJnEQwev70a8VAu3onoXhmePfyVxy4mpG33uC1GWuUk10wI3hpn6skxw0ZO3Uq7
CYQvVdpv4QU1hwPk5dhBQnnUntWFAftgGUMqyBU5zKhSR/2w1ZhiqJMF/vA8oCGh
BDyClOCz5XYgEeWJHDt4Snm3CjljpxpFrJt6oJNQFFejjC1cwDcsBejc4ggJ19vp
sUJzTCq81oiwmiAhzmfM3tfIy5XNKKeRJwK+xj2mC+drhBiRgXWCpOy7qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG16l9mrniYqyMaALny+Crt3Ga7lMB8GA1UdIwQY
MBaAFL1tH+U0URsgtu4vuOGyPTjNDSGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlcwZjVUUlJHeUMyN2ktNDRiSTlPTTBOSWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lYmI2NjItNDU4ZS00NTI0LWI5ZTct
NzZjYjk4OWNjMjQ4LzEvdlcwZjVUUlJHeUMyN2ktNDRiSTlPTTBOSWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lYmI2NjItNDU4ZS00NTI0LWI5ZTctNzZjYjk4OWNjMjQ4
LzEvdlcwZjVUUlJHeUMyN2ktNDRiSTlPTTBOSWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBF1tXVk
cHxOxXlIEpfcgct0PTjMsQHzLVDS745M2AZmDXTMH5UoVtpTFqjfiYp2uG4xvH5m
zcNVDxrbaQe7zfPyPVEOKR5WaHTZq+M6PGkPIBi7D9kE1WZF5a8cMi4Reb2Kkq1P
gM7Uv/DpTKnMGcXfte5sN5eYjSOUDH3NqSEagMvDDEpAZaHrsHpQ4XaT+qFP5MeO
1PUEIAo5Curnkr6cRgGvzvMPNTrkOiuLNhbseCcJeKC6mPL1n/cQCglz9JyX7Uxb
ubATn8teeMx4WZzTUTOZSwpL+tiLM8wfAtWrbtuFHHCt5IBFA4gQEQ0WzcTU28nh
pCMEpTlieCxGYQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:07 2026 by rpki-client