Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json)
Hash identifier: Ne3DBv73nSQEi+ujhB04CEShJpfxDzq6Lm+BKCsby1s=
Subject key identifier: F0:0E:01:D9:BF:C4:74:E0:C0:41:2A:60:9D:89:05:94:21:F2:7F:0F
Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Certificate serial: 019D29970E51A14AE12A3603905C26F48B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 10:00:58 +0000
Manifest this update: Thu 26 Mar 2026 10:00:58 +0000
Manifest next update: Fri 27 Mar 2026 10:00:58 +0000
Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: 5hQ0PglmRFogE2PSXg28TnZryT/cR9cRe1qlfteLgtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:0e:51:a1:4a:e1:2a:36:03:90:5c:26:f4:8b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Validity
Not Before: Mar 26 10:00:58 2026 GMT
Not After : Mar 27 10:00:58 2026 GMT
Subject: CN=f00e01d9bfc474e0c0412a609d89059421f27f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:9f:3a:e2:47:4b:2a:c3:a8:5e:c9:27:ec:
37:c9:e4:65:6c:64:bc:24:61:63:7e:c1:de:cc:f5:
50:cf:13:59:83:16:0e:cb:9c:89:dd:61:84:61:00:
3c:17:e3:89:45:12:49:c4:b0:da:a9:c8:d4:11:de:
10:c8:df:af:8c:2a:82:bf:e4:61:60:28:00:ad:5f:
c8:d6:d2:83:88:41:95:a7:27:75:d1:28:ad:34:7e:
ff:f1:d2:2c:5e:a2:58:bc:29:54:1b:c0:e1:93:aa:
ef:1b:46:a3:0f:90:f5:72:48:27:ee:b7:95:dc:0c:
48:e6:4c:b9:65:43:e7:1f:cc:d0:82:f2:37:b4:93:
98:70:c9:69:4f:5f:6c:7e:20:40:4b:64:09:6c:de:
bf:a0:7e:37:62:47:ba:f0:ed:df:54:7f:a9:93:5a:
6c:2a:b6:2a:7c:cf:8b:99:71:65:aa:45:2f:ed:3d:
36:28:b4:09:51:75:5b:42:b1:71:5d:1a:64:01:5f:
02:ea:0c:9e:70:b4:05:2a:89:c5:f4:b5:bb:e4:ba:
e7:27:7e:73:07:60:a9:6c:f3:ee:4d:86:96:9f:3e:
c4:da:75:01:1a:16:91:13:35:c5:9c:03:f7:a0:20:
3f:10:4a:49:52:13:1b:4f:6a:72:88:71:0d:a3:42:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0E:01:D9:BF:C4:74:E0:C0:41:2A:60:9D:89:05:94:21:F2:7F:0F
X509v3 Authority Key Identifier:
keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:86:a3:e0:e3:31:22:33:cd:8d:be:8d:68:19:40:78:85:bc:
26:18:23:0a:38:8a:d0:16:af:6a:4e:64:b5:56:54:5e:19:26:
f0:ab:18:58:ee:30:6a:b8:21:c5:34:2b:10:6d:14:1f:8c:62:
a7:d5:ef:b6:25:e1:4a:f3:f8:55:a8:ea:84:c5:2a:37:9d:12:
61:8b:4c:be:c7:aa:66:74:33:b1:95:dd:7a:e0:a6:84:b0:32:
cd:67:8d:c8:6e:22:62:2f:58:57:60:fb:ce:76:a3:7e:03:a5:
54:72:6e:77:38:4a:61:c6:12:57:03:2a:c0:d5:d9:a0:63:9c:
21:96:b8:ba:b1:29:40:a1:b4:11:e5:ae:8a:c3:54:3f:8e:34:
61:2b:55:d2:8f:6c:0b:b5:f7:33:21:53:c1:88:e3:46:a9:87:
e0:a2:3b:99:a5:d1:85:29:2d:c3:91:74:96:a5:01:9c:ea:c7:
ef:aa:8a:f5:ff:36:d3:e2:19:7f:b5:21:8f:0d:04:e6:11:27:
33:2a:7b:69:1a:dc:4f:07:61:d6:8a:6f:1c:c6:9f:b0:8d:b0:
e6:a5:78:85:ae:77:55:b3:34:5a:3d:be:96:42:8f:ca:5d:34:
c2:d2:0c:de:ec:7b:79:37:01:36:96:81:1d:ca:6c:eb:42:8c:
df:02:6c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plw5RoUrhKjYDkFwm9IsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDQyYmQ3ODMyYTZhYmUxNmUxNTIyYTJkN2U0ZTQwZDNl
YmEwYTIwHhcNMjYwMzI2MTAwMDU4WhcNMjYwMzI3MTAwMDU4WjAzMTEwLwYDVQQD
EyhmMDBlMDFkOWJmYzQ3NGUwYzA0MTJhNjA5ZDg5MDU5NDIxZjI3ZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3afOuJHSyrDqF7JJ+w3yeRlbGS8
JGFjfsHezPVQzxNZgxYOy5yJ3WGEYQA8F+OJRRJJxLDaqcjUEd4QyN+vjCqCv+Rh
YCgArV/I1tKDiEGVpyd10SitNH7/8dIsXqJYvClUG8Dhk6rvG0ajD5D1ckgn7reV
3AxI5ky5ZUPnH8zQgvI3tJOYcMlpT19sfiBAS2QJbN6/oH43Yke68O3fVH+pk1ps
KrYqfM+LmXFlqkUv7T02KLQJUXVbQrFxXRpkAV8C6gyecLQFKonF9LW75LrnJ35z
B2CpbPPuTYaWnz7E2nUBGhaREzXFnAP3oCA/EEpJUhMbT2pyiHENo0JWkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAOAdm/xHTgwEEqYJ2JBZQh8n8PMB8GA1UdIwQY
MBaAFLvUK9eDKmq+FuFSKi1+TkDT66CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYt
ODBjOGE4NjdkNzcxLzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYtODBjOGE4NjdkNzcx
LzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYaj4OMx
IjPNjb6NaBlAeIW8JhgjCjiK0Bavak5ktVZUXhkm8KsYWO4warghxTQrEG0UH4xi
p9XvtiXhSvP4VajqhMUqN50SYYtMvseqZnQzsZXdeuCmhLAyzWeNyG4iYi9YV2D7
znajfgOlVHJudzhKYcYSVwMqwNXZoGOcIZa4urEpQKG0EeWuisNUP440YStV0o9s
C7X3MyFTwYjjRqmH4KI7maXRhSktw5F0lqUBnOrH76qK9f820+IZf7Uhjw0E5hEn
Myp7aRrcTwdh1opvHMafsI2w5qV4ha53VbM0Wj2+lkKPyl00wtIM3ux7eTcBNpaB
Hcps60KM3wJsuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:39:58 2026 by rpki-client