Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
File: tRHa8IloP-FhzqiMVw_HPLnkGXA.mft (raw, json)
Hash identifier: KQpHM37Q6G643RMDsess0deg50WXFxLtTwJSWkCo1xk=
Subject key identifier: 83:E9:A8:44:DC:00:F1:4C:58:9A:E5:11:75:58:ED:5A:DE:8D:C0:93
Authority key identifier: B5:11:DA:F0:89:68:3F:E1:61:CE:A8:8C:57:0F:C7:3C:B9:E4:19:70
Certificate issuer: /CN=b511daf089683fe161cea88c570fc73cb9e41970
Certificate serial: 019D25F129388531AECD6C1DF8166A5E9CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRHa8IloP-FhzqiMVw_HPLnkGXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
Manifest number: 2C
Signing time: Wed 25 Mar 2026 17:00:54 +0000
Manifest this update: Wed 25 Mar 2026 17:00:54 +0000
Manifest next update: Thu 26 Mar 2026 17:00:54 +0000
Files and hashes: 1: tRHa8IloP-FhzqiMVw_HPLnkGXA.crl (hash: VQ315DA3g5F91yXPh2bqWR6cX4XFxsSL6UV1zkJ/6pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRHa8IloP-FhzqiMVw_HPLnkGXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:29:38:85:31:ae:cd:6c:1d:f8:16:6a:5e:9c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b511daf089683fe161cea88c570fc73cb9e41970
Validity
Not Before: Mar 25 17:00:54 2026 GMT
Not After : Mar 26 17:00:54 2026 GMT
Subject: CN=83e9a844dc00f14c589ae5117558ed5ade8dc093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:03:42:c5:b7:1a:1e:98:dc:27:c0:b7:4e:
fb:c6:3a:bf:4e:7c:0c:b8:cb:b1:c9:fb:1d:5e:51:
85:3f:25:83:6f:83:69:7b:cb:a9:63:6a:83:69:7e:
23:ce:21:4d:3a:d8:5d:8f:62:aa:6c:ac:a6:7d:74:
51:71:e4:2f:11:3f:65:17:7e:a8:76:ab:94:3a:c5:
60:a9:ed:55:33:83:30:55:39:72:34:1a:c2:ec:da:
ec:3d:71:67:4f:24:68:38:22:fa:6b:62:ca:5e:bf:
5f:6d:6f:b0:ee:1b:a1:ce:f9:4d:48:ba:b4:8b:17:
41:08:4b:b5:eb:c2:ee:07:f0:43:b2:9d:be:f8:93:
2e:4d:e0:80:61:c6:75:cc:6d:61:c4:51:6c:4b:c6:
3e:83:47:06:75:7c:22:47:a5:75:1f:d0:98:7f:7f:
6a:f1:ca:83:8b:59:9c:b8:af:01:f6:5e:23:05:ff:
0d:4a:cb:0e:2f:2d:3d:5d:38:42:53:36:20:44:4c:
78:9c:41:54:db:b7:14:1a:5f:45:50:02:fa:7b:85:
4d:9f:fa:41:9b:e9:d4:1d:2f:a0:d4:6d:2e:09:3f:
80:74:8e:56:ac:17:1f:04:ca:50:83:a2:bf:4b:fa:
17:69:c7:d7:51:42:01:e1:98:5b:b6:cd:0a:a4:62:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E9:A8:44:DC:00:F1:4C:58:9A:E5:11:75:58:ED:5A:DE:8D:C0:93
X509v3 Authority Key Identifier:
keyid:B5:11:DA:F0:89:68:3F:E1:61:CE:A8:8C:57:0F:C7:3C:B9:E4:19:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRHa8IloP-FhzqiMVw_HPLnkGXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:56:90:f5:13:5d:04:be:0d:77:79:65:e7:11:77:b8:ff:49:
03:23:f2:1f:5d:b3:4c:6c:6d:98:04:c4:1d:3d:36:c3:9f:16:
3a:17:f9:f5:ed:56:96:e7:54:0c:6e:e8:34:37:b0:ae:95:0a:
82:23:1b:31:7c:3b:01:a6:8e:09:dd:89:bd:e0:45:ff:db:4e:
05:e7:db:3f:37:03:c0:6e:08:aa:ce:e2:8e:65:75:c4:ab:94:
82:02:1d:0f:6e:d1:c5:41:8b:a5:40:0c:13:ea:14:95:68:86:
22:86:00:2b:73:19:6f:e7:4a:01:03:c7:d8:d7:e6:79:40:d9:
14:92:70:b0:53:e2:9d:b6:ce:7f:a9:12:0c:4f:0f:42:7e:ed:
92:af:8d:c5:fc:d4:3a:c5:73:0e:6f:e6:0e:16:c2:da:3c:e8:
78:fc:4c:b9:90:13:88:ab:b6:18:ba:fc:65:9c:35:6c:b8:ef:
40:29:6f:ee:56:bf:90:1a:99:88:f5:7c:92:92:ab:e8:10:24:
39:ad:83:0a:6a:a8:69:8e:39:3f:fe:ca:d5:eb:e5:35:e3:f8:
cc:eb:4c:88:3b:7f:5b:5c:29:b1:bb:57:b0:4b:8d:95:28:56:
49:75:6d:3c:d9:f9:77:cf:f9:6a:1c:d4:32:15:5a:12:47:47:
5a:a1:ea:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Sk4hTGuzWwd+BZqXpz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTFkYWYwODk2ODNmZTE2MWNlYTg4YzU3MGZjNzNjYjll
NDE5NzAwHhcNMjYwMzI1MTcwMDU0WhcNMjYwMzI2MTcwMDU0WjAzMTEwLwYDVQQD
Eyg4M2U5YTg0NGRjMDBmMTRjNTg5YWU1MTE3NTU4ZWQ1YWRlOGRjMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n4DQsW3Gh6Y3CfAt077xjq/TnwM
uMuxyfsdXlGFPyWDb4Npe8upY2qDaX4jziFNOthdj2KqbKymfXRRceQvET9lF36o
dquUOsVgqe1VM4MwVTlyNBrC7NrsPXFnTyRoOCL6a2LKXr9fbW+w7huhzvlNSLq0
ixdBCEu168LuB/BDsp2++JMuTeCAYcZ1zG1hxFFsS8Y+g0cGdXwiR6V1H9CYf39q
8cqDi1mcuK8B9l4jBf8NSssOLy09XThCUzYgREx4nEFU27cUGl9FUAL6e4VNn/pB
m+nUHS+g1G0uCT+AdI5WrBcfBMpQg6K/S/oXacfXUUIB4Zhbts0KpGKdEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPpqETcAPFMWJrlEXVY7VrejcCTMB8GA1UdIwQY
MBaAFLUR2vCJaD/hYc6ojFcPxzy55BlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJIYThJbG9QLUZoenFpTVZ3X0hQTG5rR1hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85OGRiYjAtNmExZS00OTI5LWFkMzAt
ZDI5NGNiZmUyZDlmLzEvdFJIYThJbG9QLUZoenFpTVZ3X0hQTG5rR1hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85OGRiYjAtNmExZS00OTI5LWFkMzAtZDI5NGNiZmUyZDlm
LzEvdFJIYThJbG9QLUZoenFpTVZ3X0hQTG5rR1hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1aQ9RNd
BL4Nd3ll5xF3uP9JAyPyH12zTGxtmATEHT02w58WOhf59e1WludUDG7oNDewrpUK
giMbMXw7AaaOCd2JveBF/9tOBefbPzcDwG4Iqs7ijmV1xKuUggIdD27RxUGLpUAM
E+oUlWiGIoYAK3MZb+dKAQPH2NfmeUDZFJJwsFPinbbOf6kSDE8PQn7tkq+NxfzU
OsVzDm/mDhbC2jzoePxMuZATiKu2GLr8ZZw1bLjvQClv7la/kBqZiPV8kpKr6BAk
Oa2DCmqoaY45P/7K1evlNeP4zOtMiDt/W1wpsbtXsEuNlShWSXVtPNn5d8/5ahzU
MhVaEkdHWqHqHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:46 2026 by rpki-client