Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: hbYOIa+FahwBsI211qYi2gOlLHeMxqzRnzX0Z/cwRUE=
Subject key identifier: 6C:81:AF:0A:59:EB:D1:8E:5D:A2:ED:8E:19:C6:DF:B7:61:8E:55:17
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 019D28F33B5A6D162F42BF2FB5147E171E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 1121
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: c0n99IijCHkXoA7hV/09wV+3S5cX0d1wJCVkRwH/D6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3b:5a:6d:16:2f:42:bf:2f:b5:14:7e:17:1e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=6c81af0a59ebd18e5da2ed8e19c6dfb7618e5517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:95:e0:42:88:71:6f:62:12:0d:6e:73:e2:
fd:72:8c:94:4a:e1:39:ba:5f:a9:5b:78:d2:53:de:
c4:ea:fd:73:f7:78:60:8b:d7:a7:e6:6b:29:39:b6:
d9:34:24:a1:fc:16:dc:62:8c:e6:37:8b:d0:33:a4:
d5:c3:d2:cd:3a:a3:24:1e:96:76:87:76:9c:29:e9:
95:fa:64:a3:db:57:75:cf:81:48:8d:02:37:68:be:
d4:c3:70:91:09:51:69:f0:fa:9c:37:dc:ae:c8:c2:
da:5a:10:c9:74:51:2a:ef:fc:1d:e7:9c:64:22:9f:
a2:60:16:eb:c1:32:42:82:a5:ae:f3:44:87:f5:99:
77:0b:26:e7:37:29:8c:9e:81:a9:74:22:6e:f0:7a:
04:3c:59:57:1c:6d:2a:c0:bc:56:80:db:0c:31:5d:
ff:2a:76:e9:7c:84:a2:f6:e6:d9:a1:c4:d6:1d:61:
88:75:42:37:af:f6:d1:5b:75:24:02:4b:7d:6f:72:
80:b7:6b:f9:6d:da:b4:8f:e0:08:b0:32:69:28:f7:
cc:42:22:c9:99:7f:c0:3f:b7:a7:06:c7:b4:4c:c6:
97:ec:37:80:bd:62:48:1d:1a:fc:6b:3b:c5:35:6e:
b8:db:cb:2c:62:57:30:65:02:dd:4d:42:e5:f8:cb:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:81:AF:0A:59:EB:D1:8E:5D:A2:ED:8E:19:C6:DF:B7:61:8E:55:17
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bd:f1:c4:a6:e9:36:b0:8e:64:50:04:6f:34:42:27:7b:fd:
b0:de:1b:79:93:50:29:a4:04:d0:47:b6:19:c8:d9:1a:78:04:
a1:a9:3c:5d:d2:60:e3:43:ba:9d:1e:ae:fe:20:d5:76:3f:cc:
ac:66:79:00:1c:c6:e6:ef:50:d1:1c:80:8b:ab:27:4a:27:22:
5c:c0:ac:5b:b7:a5:53:1f:6f:54:bb:25:e4:7b:b8:78:e8:f8:
7c:8c:23:e3:2c:23:34:20:68:d5:11:f8:95:de:84:8e:4d:e7:
af:4e:b7:9d:ad:17:30:0b:4e:4b:05:ec:eb:85:38:c4:79:8a:
ee:81:36:d7:99:e9:02:9a:d9:28:7b:cf:93:68:39:26:a6:6f:
0d:50:0a:78:a2:b9:9e:8e:89:8e:65:ac:78:05:11:e3:74:76:
b5:8f:6c:9d:c5:3f:3d:c8:01:64:3a:d6:77:63:46:c8:ff:f7:
e6:8d:e8:26:9c:85:10:39:14:68:82:8e:39:aa:dc:89:f9:5a:
5d:d0:19:8f:c0:18:5b:8e:d3:c3:5b:36:10:0f:a4:34:89:30:
6c:6f:39:5a:ed:f9:cd:ef:ec:8a:62:23:f9:1b:d8:ef:7a:1f:
4e:f2:d5:74:c3:90:0f:50:5a:40:ef:59:cc:3e:fb:9e:76:31:
88:f2:f9:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8ztabRYvQr8vtRR+Fx4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTNhODYzNjllZjc5ZGMxM2NmYjQzNzYxNWQ0OTIzODhi
ZjhjZTMwHhcNMjYwMzI2MDcwMjAyWhcNMjYwMzI3MDcwMjAyWjAzMTEwLwYDVQQD
Eyg2YzgxYWYwYTU5ZWJkMThlNWRhMmVkOGUxOWM2ZGZiNzYxOGU1NTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnWV4EKIcW9iEg1uc+L9coyUSuE5
ul+pW3jSU97E6v1z93hgi9en5mspObbZNCSh/BbcYozmN4vQM6TVw9LNOqMkHpZ2
h3acKemV+mSj21d1z4FIjQI3aL7Uw3CRCVFp8PqcN9yuyMLaWhDJdFEq7/wd55xk
Ip+iYBbrwTJCgqWu80SH9Zl3CybnNymMnoGpdCJu8HoEPFlXHG0qwLxWgNsMMV3/
KnbpfISi9ubZocTWHWGIdUI3r/bRW3UkAkt9b3KAt2v5bdq0j+AIsDJpKPfMQiLJ
mX/AP7enBse0TMaX7DeAvWJIHRr8azvFNW6428ssYlcwZQLdTULl+Mv/1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyBrwpZ69GOXaLtjhnG37dhjlUXMB8GA1UdIwQY
MBaAFLTjqGNp73ncE8+0N2FdSSOIv4zjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYt
ZjkwYThkY2UxYmZjLzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYtZjkwYThkY2UxYmZj
LzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD73xxKbp
NrCOZFAEbzRCJ3v9sN4beZNQKaQE0Ee2GcjZGngEoak8XdJg40O6nR6u/iDVdj/M
rGZ5ABzG5u9Q0RyAi6snSiciXMCsW7elUx9vVLsl5Hu4eOj4fIwj4ywjNCBo1RH4
ld6Ejk3nr063na0XMAtOSwXs64U4xHmK7oE215npAprZKHvPk2g5JqZvDVAKeKK5
no6JjmWseAUR43R2tY9sncU/PcgBZDrWd2NGyP/35o3oJpyFEDkUaIKOOarcifla
XdAZj8AYW47Tw1s2EA+kNIkwbG85Wu35ze/simIj+RvY73ofTvLVdMOQD1BaQO9Z
zD77nnYxiPL5oA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:59 2026 by rpki-client