Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
File: mEL3HQwjZ4gu9HCLIGtLbimjezM.mft (raw, json)
Hash identifier: QMR6oSp14T3IWy+0nhCZRQCRUmHDBPa6Ufd6LEGIsh4=
Subject key identifier: AA:94:A0:59:6B:5E:7D:4A:EB:C9:B3:A7:84:F4:57:82:E2:FD:55:D0
Authority key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
Certificate issuer: /CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Certificate serial: 019D28F278EBE47313E84044FEEF78D31590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
Manifest number: 151C
Signing time: Thu 26 Mar 2026 07:01:12 +0000
Manifest this update: Thu 26 Mar 2026 07:01:12 +0000
Manifest next update: Fri 27 Mar 2026 07:01:12 +0000
Files and hashes: 1: mEL3HQwjZ4gu9HCLIGtLbimjezM.crl (hash: wgQpUQU2wNgV02IsFebeaIyefaipJMu7zwzqN58Egks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:78:eb:e4:73:13:e8:40:44:fe:ef:78:d3:15:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Validity
Not Before: Mar 26 07:01:12 2026 GMT
Not After : Mar 27 07:01:12 2026 GMT
Subject: CN=aa94a0596b5e7d4aebc9b3a784f45782e2fd55d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:b6:e9:54:28:2b:ba:cf:6a:bb:4a:cb:49:
d9:a8:b1:f7:b8:f5:8c:f0:dc:2e:5b:dc:22:60:f1:
97:6f:45:eb:7b:11:2f:cf:6a:f7:36:80:a9:38:ed:
e7:2c:e4:44:f6:a9:be:79:a9:47:01:fe:19:12:25:
ac:84:83:8b:b8:c6:e0:62:21:0c:2f:df:aa:3b:28:
d2:d2:2b:38:02:2f:ba:42:85:fc:a3:df:a8:91:fc:
97:57:99:fb:4a:f4:dd:8b:09:4a:29:90:b4:e6:3c:
1f:c3:5f:bc:2e:10:f7:0f:fa:ee:bc:b9:1b:97:50:
d4:c9:ec:5c:9c:ea:e0:ec:fe:de:9a:cd:1a:e0:88:
21:8c:3b:bf:e5:eb:ab:54:e0:a9:5c:30:77:1d:b2:
d9:cb:0e:62:2a:86:e6:83:91:c7:3f:4e:cb:f5:47:
2d:80:d6:88:12:30:26:1f:4e:23:2b:ee:c0:e9:95:
3a:36:ef:de:52:c1:a5:6e:af:a3:3b:16:1e:58:13:
bf:d0:a5:a6:30:da:82:aa:4e:a3:4e:a8:f8:2b:c2:
2e:d9:fd:2d:98:24:52:79:90:4e:15:11:ee:63:21:
2e:3e:17:15:65:52:9d:a7:75:50:47:e0:cc:fd:6d:
e0:67:50:bf:ee:39:5b:7f:23:c7:00:df:4b:8f:75:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:94:A0:59:6B:5E:7D:4A:EB:C9:B3:A7:84:F4:57:82:E2:FD:55:D0
X509v3 Authority Key Identifier:
keyid:98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:86:de:a3:f9:64:09:49:5d:e5:63:6a:68:84:fb:aa:22:b6:
6a:bc:3f:b4:52:ec:12:5c:e8:d1:b8:84:75:75:c4:a2:2e:e4:
95:68:68:54:ab:38:c3:5a:bc:08:58:e0:5d:48:9c:ed:59:05:
a7:cd:ea:b2:fc:e4:03:5e:9a:64:42:38:8d:7d:f7:a0:a8:dc:
2b:29:1e:2d:9a:58:1b:b3:24:94:d5:d3:89:77:ab:ee:62:f2:
0f:40:27:a4:33:a2:f8:67:91:6c:00:94:21:56:94:23:cf:cf:
5d:50:22:e2:59:91:d1:49:40:13:a6:ca:67:f2:d9:41:0c:84:
6c:f0:da:a8:df:a2:4a:35:c5:68:fa:42:6f:e2:a8:d8:ed:14:
f9:b1:80:83:b0:32:24:fb:fc:92:b3:c2:a7:f2:6e:5d:58:93:
45:9c:34:5e:e0:78:01:af:0e:97:dd:6d:6c:07:85:83:a4:a1:
11:c1:18:2b:d4:17:b4:aa:aa:4a:41:c0:63:b3:df:ca:33:20:
24:ae:30:f5:32:dc:75:54:e7:be:d8:36:39:ba:31:8f:f4:e8:
08:16:41:54:5e:5b:da:09:6f:a8:bd:a0:4a:d8:e7:f4:ff:ae:
5b:b0:a6:55:17:95:d6:00:15:88:90:61:bf:54:8b:71:3e:b3:
78:ab:89:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8njr5HMT6EBE/u940xWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NDJmNzFkMGMyMzY3ODgyZWY0NzA4YjIwNmI0YjZlMjlh
MzdiMzMwHhcNMjYwMzI2MDcwMTEyWhcNMjYwMzI3MDcwMTEyWjAzMTEwLwYDVQQD
EyhhYTk0YTA1OTZiNWU3ZDRhZWJjOWIzYTc4NGY0NTc4MmUyZmQ1NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2y26VQoK7rPartKy0nZqLH3uPWM
8NwuW9wiYPGXb0XrexEvz2r3NoCpOO3nLORE9qm+ealHAf4ZEiWshIOLuMbgYiEM
L9+qOyjS0is4Ai+6QoX8o9+okfyXV5n7SvTdiwlKKZC05jwfw1+8LhD3D/ruvLkb
l1DUyexcnOrg7P7ems0a4IghjDu/5eurVOCpXDB3HbLZyw5iKobmg5HHP07L9Uct
gNaIEjAmH04jK+7A6ZU6Nu/eUsGlbq+jOxYeWBO/0KWmMNqCqk6jTqj4K8Iu2f0t
mCRSeZBOFRHuYyEuPhcVZVKdp3VQR+DM/W3gZ1C/7jlbfyPHAN9Lj3WE9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqUoFlrXn1K68mzp4T0V4Li/VXQMB8GA1UdIwQY
MBaAFJhC9x0MI2eILvRwiyBrS24po3szMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUVMM0hRd2paNGd1OUhDTElHdExiaW1qZXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yNWM5NDctODUzNC00MzQxLWFkNmUt
N2RhOGRiYWVhOTRhLzEvbUVMM0hRd2paNGd1OUhDTElHdExiaW1qZXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yNWM5NDctODUzNC00MzQxLWFkNmUtN2RhOGRiYWVhOTRh
LzEvbUVMM0hRd2paNGd1OUhDTElHdExiaW1qZXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4beo/lk
CUld5WNqaIT7qiK2arw/tFLsElzo0biEdXXEoi7klWhoVKs4w1q8CFjgXUic7VkF
p83qsvzkA16aZEI4jX33oKjcKykeLZpYG7MklNXTiXer7mLyD0AnpDOi+GeRbACU
IVaUI8/PXVAi4lmR0UlAE6bKZ/LZQQyEbPDaqN+iSjXFaPpCb+Ko2O0U+bGAg7Ay
JPv8krPCp/JuXViTRZw0XuB4Aa8Ol91tbAeFg6ShEcEYK9QXtKqqSkHAY7PfyjMg
JK4w9TLcdVTnvtg2Oboxj/ToCBZBVF5b2glvqL2gStjn9P+uW7CmVReV1gAViJBh
v1SLcT6zeKuJsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:03 2026 by rpki-client