Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: zSyCnErHIHk3RVNx+vIvHqDodx8oUWCDzUSKvSZvJlk=
Subject key identifier: F5:00:11:1C:15:8A:58:66:9F:F3:02:29:BA:FC:77:7C:A3:05:93:64
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 019D38664292092433CDEF194C7544845522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 096B
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: g4Jr6ngTpgzrgw6hfZ7TmhFcQvZ3tQ1HDvaKePYVZlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:42:92:09:24:33:cd:ef:19:4c:75:44:84:55:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=f500111c158a58669ff30229bafc777ca3059364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:58:9b:1e:6f:f2:75:12:c8:6f:1a:81:95:
be:06:1f:09:0e:7a:99:5a:49:83:98:65:eb:2a:ef:
ff:22:83:c1:6d:43:02:07:50:2c:7a:31:4a:33:85:
25:34:af:69:b9:82:39:fb:95:67:1e:7d:b7:85:49:
13:39:c4:dc:ab:96:98:d3:e1:04:66:41:c8:c5:fb:
4b:d0:d8:ac:ac:a2:3c:31:1f:23:b8:41:30:04:85:
b6:90:8f:da:e5:0e:0e:d6:16:f9:24:e4:82:7c:e1:
37:40:b7:d8:f2:8f:f9:2f:02:02:61:e6:4d:6b:21:
39:62:0c:cc:f2:60:a6:77:85:6d:9b:a9:6a:86:0b:
2f:7c:52:bb:cb:a8:9c:8a:85:3e:7c:3a:9e:57:e1:
35:a0:63:5b:96:2d:5e:d3:83:88:71:35:0f:c4:94:
11:08:bc:f7:01:12:22:1a:04:f9:41:28:db:4c:de:
de:aa:53:5a:38:fb:7a:6b:4c:bd:b8:a4:67:1d:ec:
91:4a:fb:e1:4d:3b:87:f3:44:11:59:7c:cd:5c:78:
50:36:a5:49:2b:8f:77:d4:d7:55:5c:d0:a2:30:16:
e9:97:1f:8a:bf:4c:61:c0:8f:66:69:a9:60:b7:b3:
2d:71:b9:96:bf:08:d2:de:b6:83:79:29:59:cc:e0:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:00:11:1C:15:8A:58:66:9F:F3:02:29:BA:FC:77:7C:A3:05:93:64
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:06:49:9b:94:d0:02:fc:b7:b5:e4:9c:1a:9f:df:d6:86:fc:
31:27:39:5a:d4:52:5c:52:25:bd:d9:cf:cf:79:a8:7c:22:a9:
62:d8:b4:fd:25:5e:d6:c0:f3:61:84:ca:f6:df:4a:8d:6f:02:
b6:4b:78:7a:c5:6c:49:bd:08:2a:d3:32:bc:9a:e0:42:e5:3f:
b2:6e:83:ec:f2:a1:57:f6:40:ee:aa:96:e2:08:48:ab:7f:ef:
2c:5b:d8:bc:e5:2d:0c:83:da:ff:7a:e4:f8:2b:30:67:5f:3b:
e0:41:a6:7f:c5:24:0d:46:31:01:af:9c:3e:d0:cb:f5:75:c7:
76:f2:fa:47:57:cc:86:26:7f:5c:24:f4:82:16:d2:cc:2e:d1:
01:b6:8b:a6:55:d9:97:bd:55:5a:73:18:84:17:2a:67:e1:17:
65:7f:bc:9b:c8:eb:c8:d9:83:11:ab:1b:5e:b7:4d:33:d7:53:
ac:18:9e:42:99:95:5c:0d:98:ae:e1:c5:a4:cd:4f:31:02:e5:
e9:2a:f0:72:e1:61:41:88:a2:70:c3:69:4a:9e:98:69:64:ce:
43:3a:44:00:71:6f:a5:b3:bc:91:7c:63:04:d1:77:6e:20:d3:
c6:64:06:f2:ab:b2:67:4b:5c:b9:88:75:68:5a:df:96:93:37:
de:fa:52:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZkKSCSQzze8ZTHVEhFUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2M5MjQxMzY2NWJkNmIwZGRlNTFhOWE2YjU2NWU3MmMz
MjFlNTIwHhcNMjYwMzI5MDcwMTU4WhcNMjYwMzMwMDcwMTU4WjAzMTEwLwYDVQQD
EyhmNTAwMTExYzE1OGE1ODY2OWZmMzAyMjliYWZjNzc3Y2EzMDU5MzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2NYmx5v8nUSyG8agZW+Bh8JDnqZ
WkmDmGXrKu//IoPBbUMCB1AsejFKM4UlNK9puYI5+5VnHn23hUkTOcTcq5aY0+EE
ZkHIxftL0NisrKI8MR8juEEwBIW2kI/a5Q4O1hb5JOSCfOE3QLfY8o/5LwICYeZN
ayE5YgzM8mCmd4Vtm6lqhgsvfFK7y6icioU+fDqeV+E1oGNbli1e04OIcTUPxJQR
CLz3ARIiGgT5QSjbTN7eqlNaOPt6a0y9uKRnHeyRSvvhTTuH80QRWXzNXHhQNqVJ
K4931NdVXNCiMBbplx+Kv0xhwI9maalgt7MtcbmWvwjS3raDeSlZzOCEZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUAERwVilhmn/MCKbr8d3yjBZNkMB8GA1UdIwQY
MBaAFHDMkkE2Zb1rDd5Rqaa1ZecsMh5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWIt
YmExNzdjMTk3OTY1LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWItYmExNzdjMTk3OTY1
LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwZJm5TQ
Avy3teScGp/f1ob8MSc5WtRSXFIlvdnPz3mofCKpYti0/SVe1sDzYYTK9t9KjW8C
tkt4esVsSb0IKtMyvJrgQuU/sm6D7PKhV/ZA7qqW4ghIq3/vLFvYvOUtDIPa/3rk
+CswZ1874EGmf8UkDUYxAa+cPtDL9XXHdvL6R1fMhiZ/XCT0ghbSzC7RAbaLplXZ
l71VWnMYhBcqZ+EXZX+8m8jryNmDEasbXrdNM9dTrBieQpmVXA2YruHFpM1PMQLl
6SrwcuFhQYiicMNpSp6YaWTOQzpEAHFvpbO8kXxjBNF3biDTxmQG8quyZ0tcuYh1
aFrflpM33vpS3A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:14 2026 by rpki-client