Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: tmBP0IFeHQuJrPuNcsxMaW7J9gKuYOliyO8ZGcq5YC4=
Subject key identifier: 82:CF:23:5E:98:7B:91:06:13:E4:BC:2C:5D:36:95:F3:47:D9:73:13
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 019D27E0306CA0EBB4C34B3223E97E3FFCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: 04D5
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: PXMH8+nUVhjSa4vdEZKnvAylweUi83uU59+f8pwsXHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:30:6c:a0:eb:b4:c3:4b:32:23:e9:7e:3f:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=82cf235e987b910613e4bc2c5d3695f347d97313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:fb:d3:11:3d:3e:a1:44:85:c7:ed:ca:19:
60:ea:b6:09:4d:d7:50:9b:fb:76:f3:88:16:f1:00:
9c:76:6e:2f:9c:bf:f1:c9:b9:2f:37:43:40:b2:ae:
97:a9:48:39:6f:09:5d:62:38:1a:5a:04:0d:70:bd:
96:93:dc:08:6a:c7:4c:ec:40:1e:0d:07:3c:98:7d:
4f:7b:57:5d:ec:ef:3e:e5:88:3c:3c:b8:a1:a2:19:
fa:25:96:1b:e2:74:ff:96:92:1f:ff:ae:f1:a4:38:
a9:6f:9d:a6:94:6b:87:7c:02:a1:19:f9:9d:35:74:
39:a4:7f:e7:7b:20:f3:1b:9e:13:cf:10:87:bc:af:
63:cc:0a:d5:75:5c:bb:9d:75:20:60:c9:e2:f0:3b:
43:ba:91:67:11:00:96:0b:55:9d:33:91:99:f4:83:
c4:fb:e4:68:c0:75:84:ca:9a:55:22:e7:7a:69:17:
30:6a:82:42:88:86:5f:60:80:22:7e:d8:b8:7a:9a:
5f:d9:f8:1e:89:3a:1c:ce:45:d1:4f:01:f6:04:52:
ba:ca:75:5e:ca:65:bb:e3:3d:1e:b6:f9:0b:8c:e4:
35:00:0c:b6:49:9f:bc:80:ee:c3:a2:e3:0f:c4:34:
b4:ca:80:2f:1d:78:47:e2:a2:fd:8f:7c:94:96:23:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CF:23:5E:98:7B:91:06:13:E4:BC:2C:5D:36:95:F3:47:D9:73:13
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:65:b5:3b:6e:f1:93:07:cd:59:eb:20:fb:f1:8f:84:11:89:
d5:73:32:07:47:d0:78:b3:b2:02:b1:8d:b1:4b:b5:a5:c2:50:
d3:53:dc:4c:41:5b:fe:1f:41:c9:9f:8f:b7:05:3e:ea:70:73:
44:f1:bc:98:3e:91:f5:90:3f:f9:72:a3:52:a7:bb:78:f7:ee:
65:39:ab:cf:7f:f9:7d:50:5e:13:a5:43:cf:37:c2:7d:64:2d:
8f:9f:a4:c3:4b:72:6b:83:d5:f6:35:1b:79:1a:d6:6f:18:d1:
78:37:0d:6c:d2:95:38:3b:c2:3c:5c:2f:c7:bc:20:81:5e:11:
3c:21:8d:c7:ec:8c:34:82:0d:ce:9f:67:15:93:a5:d8:39:89:
fe:2c:4e:ed:26:97:62:4a:b5:bf:22:fe:d3:f3:94:2e:7a:ea:
2c:bf:de:a6:5f:04:8f:97:01:71:6d:e6:1d:12:fe:9f:e9:4d:
ad:66:47:0e:d5:2b:e6:c1:ea:5a:75:9c:c3:81:6b:aa:8f:04:
69:34:da:a0:1b:9b:49:86:08:f6:2b:87:e5:d1:cb:39:52:0f:
76:38:8b:77:1c:f9:e8:3b:d8:ad:0a:79:48:02:1c:14:d6:2c:
ed:87:5d:6a:99:d5:eb:7d:5f:bd:b5:c5:32:3d:32:34:34:8d:
7a:0a:aa:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4DBsoOu0w0syI+l+P/zLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmIwMmM0NWM3NWViZjcyZDU2ZDMzYzI4MDI5N2MyYWU4
N2ViMmQwHhcNMjYwMzI2MDIwMTM2WhcNMjYwMzI3MDIwMTM2WjAzMTEwLwYDVQQD
Eyg4MmNmMjM1ZTk4N2I5MTA2MTNlNGJjMmM1ZDM2OTVmMzQ3ZDk3MzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Xb70xE9PqFEhcftyhlg6rYJTddQ
m/t284gW8QCcdm4vnL/xybkvN0NAsq6XqUg5bwldYjgaWgQNcL2Wk9wIasdM7EAe
DQc8mH1Pe1dd7O8+5Yg8PLihohn6JZYb4nT/lpIf/67xpDipb52mlGuHfAKhGfmd
NXQ5pH/neyDzG54TzxCHvK9jzArVdVy7nXUgYMni8DtDupFnEQCWC1WdM5GZ9IPE
++RowHWEyppVIud6aRcwaoJCiIZfYIAifti4eppf2fgeiToczkXRTwH2BFK6ynVe
ymW74z0etvkLjOQ1AAy2SZ+8gO7DouMPxDS0yoAvHXhH4qL9j3yUliM3PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILPI16Ye5EGE+S8LF02lfNH2XMTMB8GA1UdIwQY
MBaAFHErAsRcdev3LVbTPCgCl8Kuh+stMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgt
MzUyNDczZGQ1MTc5LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgtMzUyNDczZGQ1MTc5
LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGW1O27x
kwfNWesg+/GPhBGJ1XMyB0fQeLOyArGNsUu1pcJQ01PcTEFb/h9ByZ+PtwU+6nBz
RPG8mD6R9ZA/+XKjUqe7ePfuZTmrz3/5fVBeE6VDzzfCfWQtj5+kw0tya4PV9jUb
eRrWbxjReDcNbNKVODvCPFwvx7wggV4RPCGNx+yMNIINzp9nFZOl2DmJ/ixO7SaX
Ykq1vyL+0/OULnrqLL/epl8Ej5cBcW3mHRL+n+lNrWZHDtUr5sHqWnWcw4Frqo8E
aTTaoBubSYYI9iuH5dHLOVIPdjiLdxz56DvYrQp5SAIcFNYs7YddapnV631fvbXF
Mj0yNDSNegqqPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:45:27 2026 by rpki-client