Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
File: V25aWVM8ptDwtIgH0Md-FWhgTl4.mft (raw, json)
Hash identifier: woxnsZn1W3ABb8rWgrIaE8H60ykhbdxrRwlzfI6lBHg=
Subject key identifier: 6E:5E:47:54:14:BA:DD:A4:4D:76:E1:21:4B:61:25:70:F5:45:2A:30
Authority key identifier: 57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
Certificate issuer: /CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Certificate serial: 019D2960F23EE8D7150229EF9671D7A8B649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
Manifest number: 08C8
Signing time: Thu 26 Mar 2026 09:01:52 +0000
Manifest this update: Thu 26 Mar 2026 09:01:52 +0000
Manifest next update: Fri 27 Mar 2026 09:01:52 +0000
Files and hashes: 1: V25aWVM8ptDwtIgH0Md-FWhgTl4.crl (hash: 0C+YUviH0CHngn7xbjDaHuzI88KEkPsdehoD3/4Uw5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:f2:3e:e8:d7:15:02:29:ef:96:71:d7:a8:b6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Validity
Not Before: Mar 26 09:01:52 2026 GMT
Not After : Mar 27 09:01:52 2026 GMT
Subject: CN=6e5e475414badda44d76e1214b612570f5452a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:0d:b7:71:3b:4c:2b:00:f2:ea:7e:01:25:
1c:c4:20:38:20:13:62:80:e3:d3:52:ae:24:d6:63:
6d:a4:2c:4f:f3:56:5c:aa:61:d4:5a:8f:28:32:bc:
76:94:a4:3a:0b:4a:96:a5:53:7f:35:2a:6d:0f:4b:
b3:ec:5b:65:66:d9:62:48:f0:1d:ac:a0:84:42:cb:
d4:0b:0b:8f:9c:f0:ee:1b:5a:46:d1:42:b1:5d:b6:
06:e4:c2:f5:fd:6f:84:04:aa:71:e2:5e:8b:30:0f:
b9:8e:ba:91:27:fa:4e:24:5d:1d:86:c8:e5:32:f5:
b4:b7:0a:22:b9:ab:f6:69:d9:fe:6f:59:44:2d:60:
29:f7:ce:2e:6b:50:cb:94:3c:fb:33:dd:6b:25:0c:
98:30:a6:f4:78:95:5d:e9:6a:cc:aa:91:c9:9b:f1:
18:b0:90:75:e9:8e:8a:b1:eb:54:56:3c:e3:80:16:
97:19:7e:23:80:9a:57:16:01:0a:20:e6:a7:7b:a1:
b2:bc:2f:c0:4c:07:8e:ee:04:14:e1:4d:fc:2c:7f:
ef:cc:fb:b5:95:df:a0:c2:c9:1c:cc:0d:e5:fc:3d:
e9:88:df:26:3e:9c:96:83:34:75:ab:e4:d3:89:66:
c6:f0:ae:25:b4:47:f9:4f:c8:2d:5d:f9:b6:9d:d1:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:47:54:14:BA:DD:A4:4D:76:E1:21:4B:61:25:70:F5:45:2A:30
X509v3 Authority Key Identifier:
keyid:57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:be:b3:c0:18:33:2e:12:54:f3:6b:31:5b:7a:d5:c3:10:a7:
e5:12:74:a7:03:c6:67:a2:4a:ae:b0:86:e2:95:c9:dc:06:4b:
43:19:0b:be:26:39:11:62:18:9f:d0:9a:f3:b6:65:c2:10:21:
10:35:f6:d5:68:4f:e6:b5:f7:ce:d4:ac:d9:ee:9a:8f:76:65:
75:e8:a0:be:e3:3c:9f:ed:67:a1:f1:e3:0d:f7:e8:67:b1:43:
36:c8:88:3e:08:a9:e3:53:ed:6d:75:e7:c2:9d:b9:b3:ed:cb:
61:13:98:b5:42:c6:a2:09:aa:77:f3:d8:f1:27:ad:cf:3d:ae:
7b:19:c0:75:b1:ae:52:8e:82:8d:bb:e0:ba:98:41:49:f0:5f:
16:d4:97:65:66:9d:e6:07:73:62:7d:13:1b:e6:54:d7:bf:a6:
ae:1f:ca:c6:b0:38:3e:57:b4:09:f4:b3:61:98:89:eb:49:67:
1b:17:d3:1d:53:36:d4:6b:ea:77:78:9b:97:6f:8d:16:f7:5c:
35:fb:06:ea:e8:51:33:31:71:79:98:dd:2f:fa:3e:cb:79:98:
51:f8:e0:f1:49:aa:bf:b5:99:8e:3e:52:0c:2d:e3:89:bd:fb:
88:7d:65:b6:bf:a9:2e:df:de:1c:7f:72:1e:30:f2:d6:c0:d1:
85:5e:18:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYPI+6NcVAinvlnHXqLZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmU1YTU5NTMzY2E2ZDBmMGI0ODgwN2QwYzc3ZTE1Njg2
MDRlNWUwHhcNMjYwMzI2MDkwMTUyWhcNMjYwMzI3MDkwMTUyWjAzMTEwLwYDVQQD
Eyg2ZTVlNDc1NDE0YmFkZGE0NGQ3NmUxMjE0YjYxMjU3MGY1NDUyYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI0Nt3E7TCsA8up+ASUcxCA4IBNi
gOPTUq4k1mNtpCxP81ZcqmHUWo8oMrx2lKQ6C0qWpVN/NSptD0uz7FtlZtliSPAd
rKCEQsvUCwuPnPDuG1pG0UKxXbYG5ML1/W+EBKpx4l6LMA+5jrqRJ/pOJF0dhsjl
MvW0twoiuav2adn+b1lELWAp984ua1DLlDz7M91rJQyYMKb0eJVd6WrMqpHJm/EY
sJB16Y6KsetUVjzjgBaXGX4jgJpXFgEKIOane6GyvC/ATAeO7gQU4U38LH/vzPu1
ld+gwskczA3l/D3piN8mPpyWgzR1q+TTiWbG8K4ltEf5T8gtXfm2ndGdvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5eR1QUut2kTXbhIUthJXD1RSowMB8GA1UdIwQY
MBaAFFduWllTPKbQ8LSIB9DHfhVoYE5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjI1YVdWTThwdER3dElnSDBNZC1GV2hnVGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZDIxMTMtM2VjMC00NDQ1LThkZmUt
N2FkYjQwZGNhN2JkLzEvVjI1YVdWTThwdER3dElnSDBNZC1GV2hnVGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZDIxMTMtM2VjMC00NDQ1LThkZmUtN2FkYjQwZGNhN2Jk
LzEvVjI1YVdWTThwdER3dElnSDBNZC1GV2hnVGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkL6zwBgz
LhJU82sxW3rVwxCn5RJ0pwPGZ6JKrrCG4pXJ3AZLQxkLviY5EWIYn9Ca87ZlwhAh
EDX21WhP5rX3ztSs2e6aj3ZldeigvuM8n+1nofHjDffoZ7FDNsiIPgip41PtbXXn
wp25s+3LYROYtULGogmqd/PY8Setzz2uexnAdbGuUo6CjbvguphBSfBfFtSXZWad
5gdzYn0TG+ZU17+mrh/KxrA4Ple0CfSzYZiJ60lnGxfTHVM21Gvqd3ibl2+NFvdc
NfsG6uhRMzFxeZjdL/o+y3mYUfjg8Umqv7WZjj5SDC3jib37iH1ltr+pLt/eHH9y
HjDy1sDRhV4Y3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:14:50 2026 by rpki-client