Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: NOeMnYjPckFRIx8x7kiUJxD4ASpThap1VZBhQiPMRt0=
Subject key identifier: 15:A6:2E:3B:EA:0E:D2:49:B4:B1:01:2A:A1:DE:47:C2:98:9B:1C:3A
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 019D3940AAA97A7D6E5ED87A04457D8EF83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0B11
Signing time: Sun 29 Mar 2026 11:00:32 +0000
Manifest this update: Sun 29 Mar 2026 11:00:32 +0000
Manifest next update: Mon 30 Mar 2026 11:00:32 +0000
Files and hashes: 1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: 1weIg/J/pKq6j4tIe01SOll0Z63cQhiG+236K+Vw640=)
2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:aa:a9:7a:7d:6e:5e:d8:7a:04:45:7d:8e:f8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Mar 29 11:00:32 2026 GMT
Not After : Mar 30 11:00:32 2026 GMT
Subject: CN=15a62e3bea0ed249b4b1012aa1de47c2989b1c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:77:ab:c8:0f:ba:ef:18:f2:b3:08:7a:a1:
fa:c3:69:41:3a:7f:f0:62:a7:74:07:b5:9b:72:85:
04:b7:04:96:2d:ab:01:a1:bc:72:4d:6f:ca:cd:5f:
10:f1:70:dd:9d:44:c4:71:1a:39:bc:e1:31:fb:12:
6b:f8:52:5d:c1:fd:0c:2d:8d:ba:b4:cd:75:99:08:
4c:73:0e:84:84:3b:c7:0a:5d:f0:21:8f:86:3c:5d:
37:51:21:0b:e1:16:0b:90:da:15:d9:18:88:67:de:
7e:d4:52:94:5b:da:a7:11:2e:71:dc:c8:ae:8d:7d:
f1:d8:f5:1a:1b:85:d9:e7:07:3d:98:f2:31:91:59:
31:3b:9b:1a:1a:53:92:f7:af:40:27:70:b1:9e:a0:
b8:06:cf:f0:5a:5c:f5:69:fe:b0:f1:cd:c9:08:93:
48:c3:ff:a8:5c:c2:37:fe:39:01:20:8d:b6:40:04:
99:14:e4:f6:d4:49:94:a8:e8:90:65:87:19:37:90:
82:68:7b:6c:17:28:c6:52:47:c3:79:27:13:52:06:
60:a4:e6:27:9e:4c:72:26:75:23:7b:c6:75:6b:8b:
bb:67:bb:ca:71:cb:9a:dc:d2:db:71:84:ab:00:ab:
1c:58:86:5f:31:86:9d:70:3f:18:cd:70:78:31:37:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A6:2E:3B:EA:0E:D2:49:B4:B1:01:2A:A1:DE:47:C2:98:9B:1C:3A
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:50:a1:06:83:cc:15:c5:5f:f7:81:84:43:a7:e2:39:7f:
d1:21:7a:f2:84:03:5d:b9:4f:be:80:7e:f9:3b:04:69:6f:06:
4e:1b:2a:21:eb:34:f7:53:e6:ec:fe:9a:81:b6:42:53:ed:38:
12:38:e0:ef:95:4b:5c:45:6d:88:29:aa:42:25:9c:25:ea:68:
f7:27:74:d0:4b:46:6c:87:93:54:90:ba:26:bd:f3:e6:e9:56:
35:d9:1d:66:d0:52:74:d5:14:41:48:a7:f7:12:c3:62:fc:13:
f1:97:93:b6:a7:e1:3f:da:b1:c0:15:26:04:d5:1c:d1:fe:a0:
e7:f4:ce:d8:92:3f:74:08:3b:08:2d:1b:37:de:2d:19:12:6c:
b9:65:9e:55:3f:40:59:4f:ac:52:93:71:0a:88:90:49:de:8f:
ec:3c:d6:de:4c:30:1c:90:c7:18:a3:2d:16:aa:83:05:8e:a1:
10:0d:55:1e:ef:7d:83:17:48:f1:a1:12:a6:bf:69:37:89:cc:
8b:8b:1a:78:4c:af:86:39:87:8b:dc:b9:51:bb:17:fa:2a:80:
05:89:77:fd:59:73:f2:dc:db:b0:fc:20:62:af:ba:00:44:b6:
0d:1a:85:9c:26:f9:d6:3a:20:8a:c4:24:43:7d:ac:2a:cb:68:
2e:fc:1a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QKqpen1uXth6BEV9jvg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl
YzJlNjgwHhcNMjYwMzI5MTEwMDMyWhcNMjYwMzMwMTEwMDMyWjAzMTEwLwYDVQQD
EygxNWE2MmUzYmVhMGVkMjQ5YjRiMTAxMmFhMWRlNDdjMjk4OWIxYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCR3q8gPuu8Y8rMIeqH6w2lBOn/w
Yqd0B7WbcoUEtwSWLasBobxyTW/KzV8Q8XDdnUTEcRo5vOEx+xJr+FJdwf0MLY26
tM11mQhMcw6EhDvHCl3wIY+GPF03USEL4RYLkNoV2RiIZ95+1FKUW9qnES5x3Miu
jX3x2PUaG4XZ5wc9mPIxkVkxO5saGlOS969AJ3CxnqC4Bs/wWlz1af6w8c3JCJNI
w/+oXMI3/jkBII22QASZFOT21EmUqOiQZYcZN5CCaHtsFyjGUkfDeScTUgZgpOYn
nkxyJnUje8Z1a4u7Z7vKccua3NLbcYSrAKscWIZfMYadcD8YzXB4MTek1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWmLjvqDtJJtLEBKqHeR8KYmxw6MB8GA1UdIwQY
MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt
Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5
LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6pQoQaD
zBXFX/eBhEOn4jl/0SF68oQDXblPvoB++TsEaW8GThsqIes091Pm7P6agbZCU+04
Ejjg75VLXEVtiCmqQiWcJepo9yd00EtGbIeTVJC6Jr3z5ulWNdkdZtBSdNUUQUin
9xLDYvwT8ZeTtqfhP9qxwBUmBNUc0f6g5/TO2JI/dAg7CC0bN94tGRJsuWWeVT9A
WU+sUpNxCoiQSd6P7DzW3kwwHJDHGKMtFqqDBY6hEA1VHu99gxdI8aESpr9pN4nM
i4saeEyvhjmHi9y5UbsX+iqABYl3/Vlz8tzbsPwgYq+6AES2DRqFnCb51jogisQk
Q32sKstoLvwaJQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:11:25 2026 by rpki-client