Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: uWrIgCglm8DDBNZ+MQT4fA5qsoPL98KbKTcHcIAPq18=
Subject key identifier: 02:70:BF:11:69:D2:17:A2:C3:33:51:16:7A:39:57:35:E3:DE:C7:0C
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 019D2929393AFBEF92052D4E3F472857CDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 15E6
Signing time: Thu 26 Mar 2026 08:01:00 +0000
Manifest this update: Thu 26 Mar 2026 08:01:00 +0000
Manifest next update: Fri 27 Mar 2026 08:01:00 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: 70YqRw/QCmPesPGBPV27SuPCOMZA2TO2DppJ2TKfxyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:39:3a:fb:ef:92:05:2d:4e:3f:47:28:57:cd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: Mar 26 08:01:00 2026 GMT
Not After : Mar 27 08:01:00 2026 GMT
Subject: CN=0270bf1169d217a2c33351167a395735e3dec70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:5b:93:f8:31:0b:c6:2a:01:81:40:cf:79:
14:ab:4d:92:0f:4e:de:4a:52:9d:f6:d2:9d:4d:75:
04:5c:a5:1a:a0:c4:a1:77:cd:9a:d4:c6:17:c9:e5:
d6:d9:a9:e3:22:2d:bc:e1:03:32:d2:73:fd:c1:0e:
1a:3a:3a:99:59:9d:80:4c:01:ab:02:d6:df:3d:13:
c3:54:f7:29:a4:44:de:44:b6:aa:23:ea:c0:23:49:
c3:eb:50:cc:af:9a:91:4d:93:8b:27:15:e6:aa:2d:
23:8c:f6:c4:2b:1e:29:b8:f4:f4:e9:59:4c:d7:8d:
9d:7c:da:e8:0f:f3:7a:7e:9d:40:c1:ac:6a:18:89:
99:30:ef:4d:50:79:6e:94:9c:ce:27:1b:9a:a8:69:
be:b8:8d:54:26:1e:4a:ab:b2:85:70:7f:43:00:8c:
1d:3c:d4:c3:fd:7c:de:7d:4b:5a:ac:db:63:00:5c:
48:11:3d:4b:04:d4:8e:cc:5e:8e:7b:72:dc:73:e5:
0a:8c:10:db:e8:04:8c:05:3d:3e:aa:62:83:80:87:
f2:31:21:b6:5f:66:96:7f:9c:80:2c:c1:3a:03:0b:
e3:3d:4e:9e:79:ef:fd:e5:a7:22:3d:77:ab:4d:62:
68:78:78:30:c4:08:54:22:1c:52:77:96:39:d7:4d:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:70:BF:11:69:D2:17:A2:C3:33:51:16:7A:39:57:35:E3:DE:C7:0C
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:89:e1:4e:63:16:a9:bc:ef:97:de:17:dd:85:f1:42:47:d4:
76:a4:90:d1:6f:44:22:7e:ac:ce:79:19:ce:65:98:4f:25:2a:
58:3c:46:17:81:23:26:32:e6:09:65:bc:61:35:99:0f:37:9d:
11:86:41:3d:39:54:8e:c7:6f:eb:7b:c3:9f:b4:d8:10:5e:df:
dc:eb:ce:3d:3e:ed:7c:1b:79:ed:80:51:06:b1:cb:83:0e:ba:
15:cc:19:d3:4b:c7:0a:f5:23:d7:e3:5c:c8:f6:a6:5c:fb:b9:
fe:ed:74:94:60:bb:a1:59:19:7e:d6:5e:0d:2b:1a:50:00:ca:
81:61:dd:b8:f5:f6:1f:ee:d2:14:10:43:68:51:7c:b0:61:3b:
ad:76:b1:18:f1:d4:a5:82:54:9c:90:49:38:73:66:19:9a:ed:
96:c0:26:2a:e8:5a:b4:05:5e:53:d3:90:90:b8:ad:e7:37:a1:
df:df:8d:a8:28:b9:dc:12:89:d6:46:70:20:b9:ef:21:9c:89:
ec:12:e5:6d:5f:61:3a:53:2b:01:48:de:c6:8d:c1:17:cd:60:
76:8a:58:c6:e8:22:dd:7d:a7:e9:a8:24:12:f2:ea:66:cb:98:
a1:75:ce:23:00:6e:36:1a:3b:47:91:f4:d3:0a:34:af:c8:cf:
93:e5:dc:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKTk6+++SBS1OP0coV83HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YWUyMmVkYTk2Mjc0ZWU5Njk3Y2FhYWNiNTNkZjkxNzM3
MDllMDMwHhcNMjYwMzI2MDgwMTAwWhcNMjYwMzI3MDgwMTAwWjAzMTEwLwYDVQQD
EygwMjcwYmYxMTY5ZDIxN2EyYzMzMzUxMTY3YTM5NTczNWUzZGVjNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHdbk/gxC8YqAYFAz3kUq02SD07e
SlKd9tKdTXUEXKUaoMShd82a1MYXyeXW2anjIi284QMy0nP9wQ4aOjqZWZ2ATAGr
AtbfPRPDVPcppETeRLaqI+rAI0nD61DMr5qRTZOLJxXmqi0jjPbEKx4puPT06VlM
142dfNroD/N6fp1AwaxqGImZMO9NUHlulJzOJxuaqGm+uI1UJh5Kq7KFcH9DAIwd
PNTD/XzefUtarNtjAFxIET1LBNSOzF6Oe3Lcc+UKjBDb6ASMBT0+qmKDgIfyMSG2
X2aWf5yALME6AwvjPU6eee/95aciPXerTWJoeHgwxAhUIhxSd5Y5102V/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJwvxFp0heiwzNRFno5VzXj3scMMB8GA1UdIwQY
MBaAFLeuIu2pYnTulpfKqstT35FzcJ4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQt
MzcwZjAwMGMzYzBlLzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQtMzcwZjAwMGMzYzBl
LzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYnhTmMW
qbzvl94X3YXxQkfUdqSQ0W9EIn6sznkZzmWYTyUqWDxGF4EjJjLmCWW8YTWZDzed
EYZBPTlUjsdv63vDn7TYEF7f3OvOPT7tfBt57YBRBrHLgw66FcwZ00vHCvUj1+Nc
yPamXPu5/u10lGC7oVkZftZeDSsaUADKgWHduPX2H+7SFBBDaFF8sGE7rXaxGPHU
pYJUnJBJOHNmGZrtlsAmKuhatAVeU9OQkLit5zeh39+NqCi53BKJ1kZwILnvIZyJ
7BLlbV9hOlMrAUjexo3BF81gdopYxugi3X2n6agkEvLqZsuYoXXOIwBuNho7R5H0
0wo0r8jPk+Xc9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:06 2026 by rpki-client