Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
File: d6ssFiF5lXMJnEAq6R_8V5ada5s.mft (raw, json)
Hash identifier: NZhxf4uEISlhdoKGEP79zE+lPt+Fvf0junp9TI+vYPs=
Subject key identifier: A7:53:EA:26:4E:C7:29:C0:40:82:1A:CD:10:2E:80:16:5B:B3:81:C6
Authority key identifier: 77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
Certificate issuer: /CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Certificate serial: 019D273A909BBCF1C8DD96956F369D04FAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
Manifest number: 0242
Signing time: Wed 25 Mar 2026 23:00:42 +0000
Manifest this update: Wed 25 Mar 2026 23:00:42 +0000
Manifest next update: Thu 26 Mar 2026 23:00:42 +0000
Files and hashes: 1: d6ssFiF5lXMJnEAq6R_8V5ada5s.crl (hash: ARrVMR5vm73hKVt0E3y320ZYC4RsE/0EX5X4zZ0GPmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:90:9b:bc:f1:c8:dd:96:95:6f:36:9d:04:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Validity
Not Before: Mar 25 23:00:42 2026 GMT
Not After : Mar 26 23:00:42 2026 GMT
Subject: CN=a753ea264ec729c040821acd102e80165bb381c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:93:09:14:9b:65:bc:1b:09:71:6e:ca:aa:
e2:8c:1f:38:9a:d5:57:23:26:7f:32:d3:af:bc:53:
72:89:55:64:1e:71:87:bd:31:c3:47:e0:37:57:d3:
d4:f1:98:7f:47:e8:45:cc:b1:c3:bf:eb:88:50:44:
90:7d:bd:c6:fe:e4:f0:13:a5:aa:5e:33:ac:25:c6:
73:79:ba:bf:54:8e:13:a7:c3:e3:a8:42:da:18:fd:
ac:db:a1:51:af:40:ec:43:0f:00:86:49:54:10:94:
3f:7c:83:9c:97:2e:07:16:a7:dd:13:99:9e:a3:e3:
4a:f5:66:87:c7:ac:11:ec:16:0c:11:d5:0c:ba:d4:
35:9e:77:5c:7f:51:fe:40:ab:49:74:59:30:41:99:
c5:c7:87:40:94:8d:47:82:61:ce:1a:b3:4d:34:22:
ff:cd:95:c1:11:f7:61:77:81:3e:9d:88:56:d4:00:
1e:16:d3:b0:6b:2a:dc:c4:9c:63:b1:70:36:87:a5:
d7:7e:4a:0f:fd:70:25:0d:b2:84:3d:36:78:02:da:
28:87:3a:23:b8:47:9f:e0:04:dc:a7:06:16:80:52:
25:38:9e:e4:2e:be:a3:87:c1:79:4e:50:ed:89:8a:
89:e4:fd:ce:8e:48:64:dc:2d:25:78:35:ca:93:84:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:53:EA:26:4E:C7:29:C0:40:82:1A:CD:10:2E:80:16:5B:B3:81:C6
X509v3 Authority Key Identifier:
keyid:77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8d:02:d4:fc:17:26:8e:05:db:50:45:90:d2:04:b3:59:77:
07:14:a4:f8:ec:43:9a:89:7f:38:b3:af:1d:62:56:27:70:ff:
f9:bc:4e:63:0c:da:32:97:a7:e3:46:8e:e5:77:e2:34:75:7a:
fd:d6:16:b9:04:4b:56:03:91:f2:69:2e:63:e1:6a:55:7b:c3:
0c:7f:dd:95:6a:64:00:ba:ed:c0:0a:cc:d2:85:53:56:a9:ed:
b0:9b:af:90:a4:8e:45:e3:76:24:ad:48:45:a8:08:4f:77:dc:
41:6c:06:2f:15:e1:87:7e:1c:96:13:f5:4e:5a:20:d5:67:5b:
45:ba:fe:d8:55:04:71:50:fd:3b:a3:7d:6f:87:ad:78:2c:b6:
43:46:8e:6f:06:ad:c5:ca:53:6d:0a:5a:f2:fe:75:ee:5f:4a:
3b:61:c6:fc:a3:ef:e7:16:75:9c:73:fe:1d:72:5f:56:a2:95:
b3:8d:7b:72:7f:fe:20:07:61:d4:eb:14:4b:dd:78:82:7d:bb:
3c:4b:6d:cd:5d:bb:94:06:62:b2:4d:93:b5:34:90:ff:60:3f:
94:77:18:e6:c6:92:f8:72:62:2d:27:86:60:e1:00:c0:05:6a:
f1:4c:53:fc:97:6f:5f:91:60:b4:8f:e0:e5:5a:b2:94:94:a1:
e7:fb:f7:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpCbvPHI3ZaVbzadBPrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YWIyYzE2MjE3OTk1NzMwOTljNDAyYWU5MWZmYzU3OTY5
ZDZiOWIwHhcNMjYwMzI1MjMwMDQyWhcNMjYwMzI2MjMwMDQyWjAzMTEwLwYDVQQD
EyhhNzUzZWEyNjRlYzcyOWMwNDA4MjFhY2QxMDJlODAxNjViYjM4MWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EyTCRSbZbwbCXFuyqrijB84mtVX
IyZ/MtOvvFNyiVVkHnGHvTHDR+A3V9PU8Zh/R+hFzLHDv+uIUESQfb3G/uTwE6Wq
XjOsJcZzebq/VI4Tp8PjqELaGP2s26FRr0DsQw8AhklUEJQ/fIOcly4HFqfdE5me
o+NK9WaHx6wR7BYMEdUMutQ1nndcf1H+QKtJdFkwQZnFx4dAlI1HgmHOGrNNNCL/
zZXBEfdhd4E+nYhW1AAeFtOwayrcxJxjsXA2h6XXfkoP/XAlDbKEPTZ4Atoohzoj
uEef4ATcpwYWgFIlOJ7kLr6jh8F5TlDtiYqJ5P3Ojkhk3C0leDXKk4RCnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdT6iZOxynAQIIazRAugBZbs4HGMB8GA1UdIwQY
MBaAFHerLBYheZVzCZxAKukf/FeWnWubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZzc0ZpRjVsWE1KbkVBcTZSXzhWNWFkYTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zMDY1NWYtNTljMy00ZGM1LWFiMmMt
Mzk3YmM0MDMxNTk0LzEvZDZzc0ZpRjVsWE1KbkVBcTZSXzhWNWFkYTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zMDY1NWYtNTljMy00ZGM1LWFiMmMtMzk3YmM0MDMxNTk0
LzEvZDZzc0ZpRjVsWE1KbkVBcTZSXzhWNWFkYTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS40C1PwX
Jo4F21BFkNIEs1l3BxSk+OxDmol/OLOvHWJWJ3D/+bxOYwzaMpen40aO5XfiNHV6
/dYWuQRLVgOR8mkuY+FqVXvDDH/dlWpkALrtwArM0oVTVqntsJuvkKSOReN2JK1I
RagIT3fcQWwGLxXhh34clhP1Tlog1WdbRbr+2FUEcVD9O6N9b4eteCy2Q0aObwat
xcpTbQpa8v517l9KO2HG/KPv5xZ1nHP+HXJfVqKVs417cn/+IAdh1OsUS914gn27
PEttzV27lAZisk2TtTSQ/2A/lHcY5saS+HJiLSeGYOEAwAVq8UxT/JdvX5FgtI/g
5VqylJSh5/v3IQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:12 2026 by rpki-client