Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: vn3CLr8Lsyw+SGRU6muoYaEbDjv9f5ZxcC72GBVgV58=
Subject key identifier: D8:11:D7:FE:82:5C:AB:DD:DB:FC:6E:40:5C:28:D8:DD:CC:F1:01:4C
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 019D28F333550B9CC2B00DB3DC87EB6F7F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 10C9
Signing time: Thu 26 Mar 2026 07:02:00 +0000
Manifest this update: Thu 26 Mar 2026 07:02:00 +0000
Manifest next update: Fri 27 Mar 2026 07:02:00 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: HgmOpdHc90eb2p5DY4pIDFCubpjSZqeVfDxhBoNIGqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:33:55:0b:9c:c2:b0:0d:b3:dc:87:eb:6f:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Mar 26 07:02:00 2026 GMT
Not After : Mar 27 07:02:00 2026 GMT
Subject: CN=d811d7fe825cabdddbfc6e405c28d8ddccf1014c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:a7:e6:23:5f:f5:8d:82:c2:72:dd:6f:72:
ef:e0:0d:e7:a3:05:96:29:6e:37:c7:b5:7e:a5:22:
e5:c7:e5:81:7f:15:5c:87:46:86:6e:66:1c:d9:15:
3b:2b:c1:6a:46:e6:5b:78:1e:d3:69:22:32:2c:ee:
75:b8:63:c7:d9:ed:40:be:b4:58:09:e9:e2:f8:cf:
cc:b2:06:77:9a:34:f7:31:dc:50:36:73:b0:1f:58:
3a:ca:64:fb:e1:b4:9d:bc:e4:0b:8e:4a:8d:56:95:
d7:2c:25:04:4f:52:a5:60:0f:66:b9:a6:62:5f:01:
65:7e:be:e5:a5:be:99:4b:c8:50:8f:54:98:2e:eb:
15:af:77:1f:e1:8c:a8:80:ce:a8:3e:6d:5a:b5:b9:
15:b8:d2:dc:84:c1:5c:8b:e4:a0:1e:14:a0:10:c1:
6d:0a:8e:1f:e0:04:dc:de:26:75:8b:16:a2:f4:17:
ed:d5:fb:97:67:6d:92:7b:e6:ab:0c:18:6e:5b:88:
f1:6a:3d:7a:76:05:a0:b8:55:50:49:96:9f:8e:21:
8b:88:ae:b4:e8:d4:e4:a5:a0:ef:65:d8:f6:ee:0a:
2a:d3:03:5e:9d:dd:4a:6d:41:87:92:52:8c:ed:58:
7e:87:ca:1a:fe:82:ee:58:3c:62:d7:d2:77:9d:84:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:11:D7:FE:82:5C:AB:DD:DB:FC:6E:40:5C:28:D8:DD:CC:F1:01:4C
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a8:47:69:a1:63:61:31:eb:09:66:14:ad:82:3e:db:ab:dc:
88:96:4e:9c:6d:42:91:df:f9:a2:e2:bb:8b:df:0c:3a:41:95:
fa:02:9a:d3:f7:a6:ec:79:8e:26:6c:5c:ee:6e:7e:88:b1:47:
e5:b7:ee:cb:e2:43:c2:25:06:f0:23:d9:b6:be:1b:66:bd:1b:
40:34:7f:62:68:46:92:8e:ef:47:5f:f4:c6:05:aa:39:1b:06:
b7:b3:b3:d5:b2:2a:b4:b0:eb:7f:23:64:cb:0b:3c:db:15:3e:
8f:4c:c6:71:27:7b:4e:54:66:75:16:c9:cd:31:d8:58:6c:7c:
31:8d:3e:51:fe:59:6a:bb:2d:39:21:36:f9:0b:e8:bd:06:ff:
4f:26:f4:26:96:71:09:4a:f7:c5:45:e8:3b:e8:3d:4f:4a:3c:
2f:75:16:1d:f9:14:1b:90:c6:9c:fb:12:eb:ec:6b:ec:38:dc:
24:a2:4d:4d:d0:aa:fa:a1:c2:09:4c:15:d7:21:75:1f:e3:94:
ab:2d:26:cb:77:b9:b6:e9:cc:f8:db:9b:d8:ae:23:81:ad:79:
c9:4c:db:61:39:18:df:c3:84:55:e8:e5:da:7e:9f:72:79:ef:
48:2c:06:2a:fe:13:dd:62:44:6f:f0:e2:77:1a:59:23:c2:08:
96:da:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:56 2026 by rpki-client