Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: mMaNt5pKBiED28XPS6A6E51podB+7PL5pa7ThxTuAH8=
Subject key identifier: 5A:8F:55:D7:36:C5:22:DC:20:B8:72:38:8D:DD:7F:03:C6:8E:6A:6C
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 019D2996C130E3A077FDCB7697F2961E1085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 079A
Signing time: Thu 26 Mar 2026 10:00:38 +0000
Manifest this update: Thu 26 Mar 2026 10:00:38 +0000
Manifest next update: Fri 27 Mar 2026 10:00:38 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: WmT3mM6HTQdJcp3oFmYsSLlY7yJcpUwolw4N5VwcNaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c1:30:e3:a0:77:fd:cb:76:97:f2:96:1e:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Mar 26 10:00:38 2026 GMT
Not After : Mar 27 10:00:38 2026 GMT
Subject: CN=5a8f55d736c522dc20b872388ddd7f03c68e6a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:63:37:38:cb:64:69:8c:cc:12:87:5e:dd:
5a:3f:65:b0:9a:a5:94:f7:9e:e1:5c:7d:22:dc:1a:
0d:48:4d:3e:95:2f:22:d5:ed:f7:b7:c7:84:79:19:
a9:ed:b7:00:ea:2b:b8:7c:c0:72:69:3d:c8:47:f5:
7c:fb:a9:da:0d:32:f2:7e:3d:e4:4c:f6:2e:34:67:
f3:61:62:dc:dd:88:44:2f:e2:8b:45:d4:38:f7:de:
c8:99:15:df:31:4f:be:bd:39:8a:5f:2c:b9:0c:0c:
e9:46:9f:e8:10:ec:4f:4e:e5:65:48:e4:5f:f1:cb:
21:ef:80:5a:1b:de:f0:2a:62:fd:ac:be:5e:e8:13:
c7:d1:a4:1f:4c:b6:48:25:3b:68:e6:94:3a:b2:df:
06:33:13:60:58:a8:7d:79:22:9a:3e:5d:61:ba:a1:
1d:70:f9:75:d9:70:d9:b3:6d:b0:c1:ef:a2:c4:bd:
32:f1:42:1e:47:b8:ed:c6:3a:47:ab:30:ee:2a:5a:
a7:a4:a0:98:75:3a:6c:ad:0d:a0:bc:c5:64:2a:ee:
f6:22:f6:a8:c6:f9:90:05:7a:5d:ad:7a:fd:57:34:
52:ca:a2:24:87:2a:11:a7:56:8d:78:fb:cc:ba:da:
95:06:79:d2:34:80:a0:61:6f:12:f0:e7:71:fc:9e:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:55:D7:36:C5:22:DC:20:B8:72:38:8D:DD:7F:03:C6:8E:6A:6C
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:42:7d:40:80:34:dd:12:03:8a:b6:96:a4:ac:fc:d4:54:9e:
3b:36:8c:26:10:2f:6b:0f:72:5c:4b:ef:66:7d:01:91:65:c3:
07:92:ab:ba:84:55:c8:1b:f2:7e:2e:d1:b2:b4:91:48:43:23:
01:42:b4:03:6f:ff:34:21:53:12:a8:dc:12:e7:3e:62:62:99:
c0:4a:6d:89:91:8d:f7:1b:10:36:c4:15:f5:03:04:e5:57:72:
e5:3b:a8:93:b8:28:04:a0:51:08:8e:13:a7:e4:ac:c2:c2:83:
92:67:93:70:fa:b5:60:6f:c2:6e:1e:ec:eb:70:3d:4b:7b:bd:
6c:bb:bd:55:73:c5:21:58:a5:8e:b4:5d:f0:be:b8:ba:aa:da:
4b:a3:8e:62:c1:22:69:5a:e2:18:1f:28:04:b5:c7:52:26:55:
89:5e:71:ef:a3:41:7a:ae:60:dd:fb:39:c1:08:ee:f6:ed:b6:
18:84:b7:25:1e:fe:e3:10:f9:39:f5:73:80:78:43:5f:4e:5f:
6d:a2:1f:00:f0:dc:13:53:7d:ff:ea:f9:be:99:c9:3b:1a:ba:
ac:ae:92:a7:02:68:f4:2b:e1:47:c4:6d:18:71:bd:3c:35:ce:
78:e7:fd:2e:36:60:69:d9:ad:d0:66:46:32:5b:16:90:ea:b1:
39:24:15:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plsEw46B3/ct2l/KWHhCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWU4OTM4ZjBlMGIxZWFiNjE0ODgzMzZkMjNjYTM5MTg3
ZDZlYTMwHhcNMjYwMzI2MTAwMDM4WhcNMjYwMzI3MTAwMDM4WjAzMTEwLwYDVQQD
Eyg1YThmNTVkNzM2YzUyMmRjMjBiODcyMzg4ZGRkN2YwM2M2OGU2YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOBjNzjLZGmMzBKHXt1aP2WwmqWU
957hXH0i3BoNSE0+lS8i1e33t8eEeRmp7bcA6iu4fMByaT3IR/V8+6naDTLyfj3k
TPYuNGfzYWLc3YhEL+KLRdQ4997ImRXfMU++vTmKXyy5DAzpRp/oEOxPTuVlSORf
8csh74BaG97wKmL9rL5e6BPH0aQfTLZIJTto5pQ6st8GMxNgWKh9eSKaPl1huqEd
cPl12XDZs22wwe+ixL0y8UIeR7jtxjpHqzDuKlqnpKCYdTpsrQ2gvMVkKu72Ivao
xvmQBXpdrXr9VzRSyqIkhyoRp1aNePvMutqVBnnSNICgYW8S8Odx/J7EWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqPVdc2xSLcILhyOI3dfwPGjmpsMB8GA1UdIwQY
MBaAFIeuiTjw4LHqthSIM20jyjkYfW6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYt
MjlkMGJhMTJlZGEyLzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYtMjlkMGJhMTJlZGEy
LzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA00J9QIA0
3RIDiraWpKz81FSeOzaMJhAvaw9yXEvvZn0BkWXDB5KruoRVyBvyfi7RsrSRSEMj
AUK0A2//NCFTEqjcEuc+YmKZwEptiZGN9xsQNsQV9QME5Vdy5Tuok7goBKBRCI4T
p+SswsKDkmeTcPq1YG/Cbh7s63A9S3u9bLu9VXPFIViljrRd8L64uqraS6OOYsEi
aVriGB8oBLXHUiZViV5x76NBeq5g3fs5wQju9u22GIS3JR7+4xD5OfVzgHhDX05f
baIfAPDcE1N9/+r5vpnJOxq6rK6SpwJo9CvhR8RtGHG9PDXOeOf9LjZgadmt0GZG
MlsWkOqxOSQV3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:48 2026 by rpki-client