Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft
File: h679om6egcITEDruPQGowoqv_Pg.mft (raw, json)
Hash identifier: 34IkKQLcV++JqLMNJDoWTsRkn4j0i/nF/kdSJkjVX1E=
Subject key identifier: E5:BD:36:4F:48:55:1A:20:F5:BC:BF:4B:A0:89:88:37:F3:21:49:7F
Authority key identifier: 87:AE:FD:A2:6E:9E:81:C2:13:10:3A:EE:3D:01:A8:C2:8A:AF:FC:F8
Certificate issuer: /CN=87aefda26e9e81c213103aee3d01a8c28aaffcf8
Certificate serial: 019D27E00B58F9E514FBA605C797394EEE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft
Manifest number: 015D
Signing time: Thu 26 Mar 2026 02:01:27 +0000
Manifest this update: Thu 26 Mar 2026 02:01:27 +0000
Manifest next update: Fri 27 Mar 2026 02:01:27 +0000
Files and hashes: 1: h679om6egcITEDruPQGowoqv_Pg.crl (hash: rUbkmj193loTqElkLOEXoaBZ/IfSsZliaOkZZuMeWSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0b:58:f9:e5:14:fb:a6:05:c7:97:39:4e:ee:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87aefda26e9e81c213103aee3d01a8c28aaffcf8
Validity
Not Before: Mar 26 02:01:27 2026 GMT
Not After : Mar 27 02:01:27 2026 GMT
Subject: CN=e5bd364f48551a20f5bcbf4ba0898837f321497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:9e:10:5b:49:89:89:3d:78:6d:91:98:8b:
a2:1b:6a:92:62:6a:24:80:6e:82:72:5a:c0:d5:8a:
8a:0f:56:e1:dd:41:50:f4:08:c2:8c:89:1e:38:9f:
80:4f:be:dd:1b:bc:b0:1d:d7:15:76:12:43:fc:a7:
30:e9:60:1c:d4:f7:2f:eb:a2:bb:58:ad:f0:39:24:
89:2e:e0:f5:77:45:6c:e2:08:ca:e1:5e:16:39:a4:
c6:01:16:57:74:7d:6c:14:63:e3:d1:42:9e:77:38:
18:9d:f3:5c:e2:3b:88:70:7e:13:0d:b8:8b:90:a5:
35:fb:62:5f:77:89:6a:77:c2:22:a5:32:cb:13:b4:
a5:1a:5f:c3:26:2b:0e:47:c8:24:b0:f9:63:a3:c5:
93:61:0c:46:ee:ba:c5:99:99:62:af:8b:ba:85:f5:
fb:38:e3:c1:e2:66:f2:db:1e:97:35:18:40:1a:27:
a0:17:9e:cb:5a:01:15:ed:87:2e:01:a2:63:71:8c:
3f:fb:fd:44:c0:53:e1:82:15:3d:33:b6:a2:b9:5c:
c7:59:eb:cb:3c:61:17:be:85:85:67:79:86:69:eb:
a8:04:6d:e3:1e:f2:b3:ac:ce:3c:e0:e3:62:bd:3f:
d0:98:22:bb:57:1a:7d:d2:eb:76:b6:de:11:81:a7:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:36:4F:48:55:1A:20:F5:BC:BF:4B:A0:89:88:37:F3:21:49:7F
X509v3 Authority Key Identifier:
keyid:87:AE:FD:A2:6E:9E:81:C2:13:10:3A:EE:3D:01:A8:C2:8A:AF:FC:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:82:42:a9:3c:0c:cb:fb:1d:ae:42:26:e3:d5:3e:54:f3:2d:
df:a8:61:7f:20:d4:4f:f0:5b:f4:6e:06:0e:3a:72:8b:72:ad:
7b:06:37:18:15:3c:24:08:87:bb:36:92:3c:4c:b7:7d:f5:7b:
70:b0:d0:98:b3:40:9b:91:c9:f3:80:31:5f:1e:9d:da:fa:8c:
53:54:4a:d0:97:af:b4:db:4e:a5:e0:39:4a:99:ea:04:3e:26:
bf:39:ee:83:b4:25:5f:23:ac:60:a2:32:8f:7f:53:8e:c6:6e:
88:91:66:61:10:c8:3c:3e:61:ef:b5:76:d3:c2:ba:74:c6:d0:
26:0c:c5:24:a7:91:9d:9f:0e:2e:8d:7d:9d:a4:9e:9f:71:02:
fb:04:cc:a6:01:58:3a:73:96:09:19:bb:48:1c:ff:f9:cd:9f:
19:ae:3c:c0:b0:c6:d8:78:35:46:34:90:db:38:b8:8d:39:bd:
23:77:81:a5:b1:5c:ea:c5:50:ec:3b:8b:d3:9c:a8:d7:a7:43:
e5:94:ee:03:14:a6:2e:72:76:0c:be:47:e8:bc:a8:00:b4:8e:
f7:df:b2:e4:37:5e:7f:47:9b:6d:cb:b8:8e:57:36:89:60:88:
92:13:63:39:31:e0:c3:c7:cb:fd:bb:ae:27:b7:7e:6e:5b:b5:
6e:63:2a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4AtY+eUU+6YFx5c5Tu6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWVmZGEyNmU5ZTgxYzIxMzEwM2FlZTNkMDFhOGMyOGFh
ZmZjZjgwHhcNMjYwMzI2MDIwMTI3WhcNMjYwMzI3MDIwMTI3WjAzMTEwLwYDVQQD
EyhlNWJkMzY0ZjQ4NTUxYTIwZjViY2JmNGJhMDg5ODgzN2YzMjE0OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNWeEFtJiYk9eG2RmIuiG2qSYmok
gG6CclrA1YqKD1bh3UFQ9AjCjIkeOJ+AT77dG7ywHdcVdhJD/Kcw6WAc1Pcv66K7
WK3wOSSJLuD1d0Vs4gjK4V4WOaTGARZXdH1sFGPj0UKedzgYnfNc4juIcH4TDbiL
kKU1+2Jfd4lqd8IipTLLE7SlGl/DJisOR8gksPljo8WTYQxG7rrFmZlir4u6hfX7
OOPB4mby2x6XNRhAGiegF57LWgEV7YcuAaJjcYw/+/1EwFPhghU9M7aiuVzHWevL
PGEXvoWFZ3mGaeuoBG3jHvKzrM484ONivT/QmCK7Vxp90ut2tt4Rgac0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOW9Nk9IVRog9by/S6CJiDfzIUl/MB8GA1UdIwQY
MBaAFIeu/aJunoHCExA67j0BqMKKr/z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDY3OW9tNmVnY0lURURydVBRR293b3F2X1BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hYWE5YjMtNjdmYi00Mjc0LWI5NzEt
ZDJhNzNmM2RlZGI3LzEvaDY3OW9tNmVnY0lURURydVBRR293b3F2X1BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hYWE5YjMtNjdmYi00Mjc0LWI5NzEtZDJhNzNmM2RlZGI3
LzEvaDY3OW9tNmVnY0lURURydVBRR293b3F2X1BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIJCqTwM
y/sdrkIm49U+VPMt36hhfyDUT/Bb9G4GDjpyi3KtewY3GBU8JAiHuzaSPEy3ffV7
cLDQmLNAm5HJ84AxXx6d2vqMU1RK0JevtNtOpeA5SpnqBD4mvznug7QlXyOsYKIy
j39TjsZuiJFmYRDIPD5h77V208K6dMbQJgzFJKeRnZ8OLo19naSen3EC+wTMpgFY
OnOWCRm7SBz/+c2fGa48wLDG2Hg1RjSQ2zi4jTm9I3eBpbFc6sVQ7DuL05yo16dD
5ZTuAxSmLnJ2DL5H6LyoALSO99+y5Ddef0ebbcu4jlc2iWCIkhNjOTHgw8fL/buu
J7d+blu1bmMq+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:55 2026 by rpki-client