Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: GA/+jSEsncDNap39kSmvYyq90d7mI/jDpCdFbJU7Txs=
Subject key identifier: 2F:FC:CD:3B:EF:83:8E:12:E7:96:34:A0:B9:9D:54:7B:2B:89:EA:77
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 019D28BBA65331D669CF413BBF76D5C3811B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 0C88
Signing time: Thu 26 Mar 2026 06:01:19 +0000
Manifest this update: Thu 26 Mar 2026 06:01:19 +0000
Manifest next update: Fri 27 Mar 2026 06:01:19 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: 2j/XJ6nQ90m5YP1UbtAO7VkoHjiofRn1hFAX92Ui84o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a6:53:31:d6:69:cf:41:3b:bf:76:d5:c3:81:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Mar 26 06:01:19 2026 GMT
Not After : Mar 27 06:01:19 2026 GMT
Subject: CN=2ffccd3bef838e12e79634a0b99d547b2b89ea77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:ed:3e:26:ee:8e:f9:be:3c:fe:4a:86:be:
4c:4e:b3:99:eb:28:53:33:1a:60:50:06:66:02:96:
c1:50:2a:c2:98:17:fe:74:e8:77:0d:db:a0:75:42:
82:e2:b5:72:03:a2:5d:f5:49:6d:69:e9:97:9e:ec:
ea:d4:16:1e:bb:18:01:1f:c3:5c:17:f4:3a:a0:64:
22:8f:62:3f:03:04:09:21:95:2c:81:f4:e8:96:7c:
11:58:15:fd:66:99:23:e9:81:78:52:99:19:8c:f5:
4d:3f:3a:cf:96:b4:88:58:ad:23:a2:75:2f:9d:46:
98:bb:75:0a:cb:db:e8:c3:ee:3a:1d:31:87:89:04:
ce:0a:8e:c2:26:52:c8:e0:5c:b1:28:ee:d4:9b:c2:
b2:5f:ca:0a:8c:64:40:f6:c2:38:b5:6b:2e:b8:00:
ba:cb:12:1c:f8:1a:30:fb:2c:67:c5:6e:bf:14:0e:
36:7d:7d:67:25:f5:63:5b:42:70:6f:53:26:4f:6c:
5c:44:c7:7d:d1:aa:73:d9:9f:c4:bb:51:6c:6c:42:
64:38:55:dd:96:75:dc:9a:ba:85:38:75:4e:ce:ed:
54:24:cb:fb:45:83:be:f0:10:e7:af:71:5e:04:59:
49:4d:49:8e:2c:d0:2d:d1:66:92:db:f3:bb:ff:f6:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FC:CD:3B:EF:83:8E:12:E7:96:34:A0:B9:9D:54:7B:2B:89:EA:77
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fb:a7:8a:8b:45:e5:b3:bb:2d:4a:a2:4e:ba:71:16:56:06:
a7:55:b7:43:48:ae:df:83:4a:13:b0:1a:21:ff:c0:ad:56:e5:
a0:5e:36:9e:f1:96:b7:1f:b8:50:31:e0:e5:91:7c:37:b3:c6:
43:a8:6c:a7:c1:38:16:1b:f4:63:df:5a:9b:dc:f4:d0:97:52:
46:d5:ba:f2:fb:1b:b6:a1:1c:b8:9e:e7:3f:aa:e3:fd:79:e7:
d4:97:b1:f9:02:45:ce:e5:89:7d:ab:22:8e:65:9a:47:52:27:
cd:50:00:94:60:f3:18:22:46:ff:fb:de:66:e5:54:2e:98:f8:
25:42:f8:46:a8:08:a2:44:5f:81:4c:ce:b2:16:02:ce:37:a8:
5f:36:a3:95:53:88:50:be:fb:b4:74:35:3c:91:e3:20:05:c1:
0f:b0:90:81:a4:a5:b7:c0:0d:4b:c9:b8:20:75:51:ec:64:29:
47:2e:bf:6b:d8:e4:72:d4:a3:be:bf:00:ad:be:28:a7:c7:f5:
9a:ca:93:d0:53:eb:e2:70:69:10:0c:9d:6e:2d:5c:80:3f:3b:
10:e7:88:27:98:8a:c4:13:9d:ae:22:b3:4a:af:09:e1:15:8b:
42:2f:82:cc:24:69:f4:84:9c:1e:b8:71:66:b1:bd:f8:9a:ad:
9a:d6:d2:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6ZTMdZpz0E7v3bVw4EbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzYwNDJhYjdmMDcxOTU5OGViMzllNTNlZjkyZTBhY2Nm
YTRmYTMwHhcNMjYwMzI2MDYwMTE5WhcNMjYwMzI3MDYwMTE5WjAzMTEwLwYDVQQD
EygyZmZjY2QzYmVmODM4ZTEyZTc5NjM0YTBiOTlkNTQ3YjJiODllYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs/tPibujvm+PP5Khr5MTrOZ6yhT
MxpgUAZmApbBUCrCmBf+dOh3DdugdUKC4rVyA6Jd9UltaemXnuzq1BYeuxgBH8Nc
F/Q6oGQij2I/AwQJIZUsgfTolnwRWBX9Zpkj6YF4UpkZjPVNPzrPlrSIWK0jonUv
nUaYu3UKy9vow+46HTGHiQTOCo7CJlLI4FyxKO7Um8KyX8oKjGRA9sI4tWsuuAC6
yxIc+Bow+yxnxW6/FA42fX1nJfVjW0Jwb1MmT2xcRMd90apz2Z/Eu1FsbEJkOFXd
lnXcmrqFOHVOzu1UJMv7RYO+8BDnr3FeBFlJTUmOLNAt0WaS2/O7//YzJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/8zTvvg44S55Y0oLmdVHsriep3MB8GA1UdIwQY
MBaAFId2BCq38HGVmOs55T75LgrM+k+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNZRUtyZndjWldZNnpubFB2a3VDc3o2VDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85YmRiOGMtZDMwNy00MWY2LWFjODEt
ZTNjY2YzZWEzYzRhLzEvaDNZRUtyZndjWldZNnpubFB2a3VDc3o2VDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC85YmRiOGMtZDMwNy00MWY2LWFjODEtZTNjY2YzZWEzYzRh
LzEvaDNZRUtyZndjWldZNnpubFB2a3VDc3o2VDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/uniotF
5bO7LUqiTrpxFlYGp1W3Q0iu34NKE7AaIf/ArVbloF42nvGWtx+4UDHg5ZF8N7PG
Q6hsp8E4Fhv0Y99am9z00JdSRtW68vsbtqEcuJ7nP6rj/Xnn1Jex+QJFzuWJfasi
jmWaR1InzVAAlGDzGCJG//veZuVULpj4JUL4RqgIokRfgUzOshYCzjeoXzajlVOI
UL77tHQ1PJHjIAXBD7CQgaSlt8ANS8m4IHVR7GQpRy6/a9jkctSjvr8Arb4op8f1
msqT0FPr4nBpEAydbi1cgD87EOeIJ5iKxBOdriKzSq8J4RWLQi+CzCRp9IScHrhx
ZrG9+JqtmtbSrg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:06 2026 by rpki-client