Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier: XwiUm9M69wYpFrxlur6OLX4YarDG6BsfNAm3dkoWYKY=
Subject key identifier: 86:C4:9F:A4:29:B2:37:A6:3E:B4:4F:37:25:98:3C:00:7A:06:C2:30
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial: 019D25BA4EEFBCCB8F8A596120203B026E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number: 0B36
Signing time: Wed 25 Mar 2026 16:00:59 +0000
Manifest this update: Wed 25 Mar 2026 16:00:59 +0000
Manifest next update: Thu 26 Mar 2026 16:00:59 +0000
Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: GVomgEYy4KANGn9bAOoH60W08xDvzZAW7Mg0bX+yno0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:4e:ef:bc:cb:8f:8a:59:61:20:20:3b:02:6e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
Validity
Not Before: Mar 25 16:00:59 2026 GMT
Not After : Mar 26 16:00:59 2026 GMT
Subject: CN=86c49fa429b237a63eb44f3725983c007a06c230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:c9:e2:40:84:c5:4a:b7:98:9d:d7:7f:d0:
83:13:28:c3:8e:a6:c5:c0:d1:e3:05:39:b2:ce:a9:
d8:99:b2:a2:3a:1a:3e:cf:bf:b5:b7:d8:60:8f:1e:
06:12:bb:9e:76:0e:a0:63:0b:4f:cd:bf:ef:c0:d9:
fa:e6:ce:c1:82:97:6c:dc:67:7a:0a:bb:b6:b3:7e:
4d:82:60:ee:b0:40:d4:0c:08:02:c7:d5:1d:52:d0:
0c:db:e0:94:1a:aa:dd:31:75:47:34:75:75:75:48:
d7:03:79:6b:0e:b7:7f:a6:b0:96:69:1a:22:e0:51:
44:99:cc:b3:b3:b5:e8:88:f8:8d:9f:98:00:77:72:
71:7f:ff:fd:46:21:08:4c:d0:60:f9:31:6f:34:3d:
52:cf:1d:ab:fa:36:f5:3d:40:41:7f:a3:12:46:85:
a2:03:45:1f:b1:22:70:1a:3c:38:db:8e:2c:ea:fb:
f9:8f:b0:20:87:b2:5a:b7:59:32:11:06:fc:19:79:
a1:79:cd:cc:c2:d6:cb:bd:c2:3e:18:da:d1:04:71:
1f:c0:f5:48:b6:cb:5e:86:b5:ca:b3:6d:e9:fc:ac:
b0:8d:ca:00:e4:4a:9d:ec:a9:76:98:22:9b:06:b7:
ca:9f:f0:ce:e4:e1:05:9f:42:e9:af:45:dd:9a:39:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C4:9F:A4:29:B2:37:A6:3E:B4:4F:37:25:98:3C:00:7A:06:C2:30
X509v3 Authority Key Identifier:
keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4a:b3:ac:89:3c:b3:56:89:74:b2:f9:bd:0b:3f:ce:e8:08:
c5:06:f5:5b:44:fa:6a:07:25:41:fa:05:d3:97:1f:40:06:05:
87:aa:42:25:15:8f:ef:6f:54:f4:5d:66:f4:52:57:da:d4:6d:
f0:f2:c8:21:23:75:ba:6d:ca:73:8b:00:13:bf:5a:3d:58:a6:
e5:9f:15:ac:8d:07:7a:15:f4:14:7b:db:6a:f8:06:1c:3a:ff:
dc:34:10:48:01:ba:04:f8:4d:9a:03:d8:83:f3:fd:89:85:46:
be:8f:b8:4c:a0:6c:0f:da:cf:0e:5a:1f:d0:08:93:a1:3a:5d:
15:dc:fa:10:5a:a0:b9:d7:cc:31:1f:5e:d9:af:2c:3a:67:60:
a2:6a:92:32:38:e9:95:75:43:02:64:5a:2d:bd:35:3c:64:d5:
26:67:03:ec:61:67:bb:6a:04:24:5c:83:d0:74:b3:04:cc:7c:
8a:5a:31:88:a5:03:cf:ce:f6:ae:db:d6:a5:4c:f0:8a:92:53:
fe:89:dd:97:de:42:35:d3:6f:70:23:c4:d8:ea:7c:29:5c:8f:
32:f5:20:66:50:b5:63:7e:0f:57:e3:41:5b:29:b9:75:db:53:
2f:29:cb:d4:ef:4e:3b:e5:c4:67:81:a1:2c:d5:d7:d5:89:64:
aa:23:4f:6f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0luk7vvMuPillhICA7Am5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OWU4ODIyNzZmODBlNjc1MDQ5MGVlZjAwNmRlOTQzZGFj
YjZlMGYwHhcNMjYwMzI1MTYwMDU5WhcNMjYwMzI2MTYwMDU5WjAzMTEwLwYDVQQD
Eyg4NmM0OWZhNDI5YjIzN2E2M2ViNDRmMzcyNTk4M2MwMDdhMDZjMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R/J4kCExUq3mJ3Xf9CDEyjDjqbF
wNHjBTmyzqnYmbKiOho+z7+1t9hgjx4GEruedg6gYwtPzb/vwNn65s7Bgpds3Gd6
Cru2s35NgmDusEDUDAgCx9UdUtAM2+CUGqrdMXVHNHV1dUjXA3lrDrd/prCWaRoi
4FFEmcyzs7XoiPiNn5gAd3Jxf//9RiEITNBg+TFvND1Szx2r+jb1PUBBf6MSRoWi
A0UfsSJwGjw4244s6vv5j7Agh7Jat1kyEQb8GXmhec3MwtbLvcI+GNrRBHEfwPVI
tstehrXKs23p/KywjcoA5Eqd7Kl2mCKbBrfKn/DO5OEFn0Lpr0XdmjkiSQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIbEn6QpsjemPrRPNyWYPAB6BsIwMB8GA1UdIwQY
MBaAFPieiCJ2+A5nUEkO7wBt6UPay24PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KNklJbmI0RG1kUVNRN3ZBRzNwUTlyTGJnOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNjVlOTczLWI0MWItNDEwMy1hYTU2
LWZjY2NlYTY4MWI3YS8xLzEtSjZJSW5iNERtZFFTUTd2QUczcFE5ckxiZzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk5LzY1ZTk3My1iNDFiLTQxMDMtYWE1Ni1mY2NjZWE2ODFi
N2EvMS8xLUo2SUluYjREbWRRU1E3dkFHM3BROXJMYmc4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUqz
rIk8s1aJdLL5vQs/zugIxQb1W0T6agclQfoF05cfQAYFh6pCJRWP729U9F1m9FJX
2tRt8PLIISN1um3Kc4sAE79aPVim5Z8VrI0HehX0FHvbavgGHDr/3DQQSAG6BPhN
mgPYg/P9iYVGvo+4TKBsD9rPDlof0AiToTpdFdz6EFqgudfMMR9e2a8sOmdgomqS
MjjplXVDAmRaLb01PGTVJmcD7GFnu2oEJFyD0HSzBMx8iloxiKUDz872rtvWpUzw
ipJT/ondl95CNdNvcCPE2Op8KVyPMvUgZlC1Y34PV+NBWym5ddtTLynL1O9OO+XE
Z4GhLNXX1YlkqiNPbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:20 2026 by rpki-client