Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: wNrhH6ru/1DrMG60VT2DAgPaHXfzmqXCySr+lc7OqQc=
Subject key identifier: 9D:5B:EB:6E:F9:43:42:29:74:56:C2:76:4C:FC:D9:75:13:FD:31:1A
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 019D38D3998EFA9067F3B70833E2624B253A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 086D
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: VjHYPgO0xllSLhOHPI09QPo8eQBp8BLZ5X17f9MenSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:99:8e:fa:90:67:f3:b7:08:33:e2:62:4b:25:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=9d5beb6ef94342297456c2764cfcd97513fd311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:23:a9:cc:91:74:f8:d3:b6:30:d5:b8:9c:
60:53:82:23:2d:01:f5:ea:77:1b:55:a8:d6:4c:82:
70:bd:9d:14:7a:91:d0:aa:cf:b0:68:c9:62:e2:e3:
f5:97:fb:b5:da:63:e8:02:9e:9c:7f:32:f1:18:b9:
9d:bd:01:3e:e3:87:1a:05:39:ad:3a:c6:bc:a3:60:
49:31:df:f4:ef:58:d6:b2:52:73:aa:35:20:44:dc:
27:6c:6c:1b:63:44:b7:49:b4:e3:2b:d4:b9:b7:89:
f9:1d:51:32:24:f8:6a:a5:65:96:d5:6d:2b:cb:a6:
d0:96:bd:fb:c4:dc:c5:22:72:7c:7e:e8:5b:4c:ff:
3f:0a:68:6a:aa:0a:12:7f:d2:1b:17:ad:c0:50:1a:
ee:20:15:44:d2:c2:c8:3b:c3:12:cb:46:da:b6:1b:
51:4d:43:b9:03:6c:d8:6f:d4:91:16:96:02:32:52:
07:c1:12:c5:c9:8c:09:6c:50:da:bf:12:9d:a2:05:
4a:4d:e2:d8:80:fc:f0:8d:cd:9e:8c:94:2b:13:6b:
f4:0e:41:26:43:03:95:35:f5:27:49:d2:22:20:10:
f8:62:c2:d5:29:03:38:32:09:32:08:4a:d7:b3:e5:
42:ea:0a:85:f6:75:b6:06:68:10:43:6b:63:99:99:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:EB:6E:F9:43:42:29:74:56:C2:76:4C:FC:D9:75:13:FD:31:1A
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a3:a6:f4:8f:b8:73:4d:49:18:48:03:0c:a3:7a:75:59:0b:
09:65:22:37:6b:9f:01:3b:bc:6b:f9:2d:00:f9:23:7c:1b:d7:
21:73:dc:75:a2:3c:e8:c8:40:7d:05:1e:67:c1:74:df:42:0b:
b6:9e:d0:b1:90:03:6c:28:53:e7:43:88:41:bb:4c:4c:82:4d:
dd:bc:0c:50:1b:de:c8:bb:a5:61:f1:92:19:5b:56:28:26:42:
70:2d:c0:51:7d:a8:59:38:75:be:df:59:72:d9:aa:1f:31:78:
91:11:7f:92:0a:d5:f3:40:6c:40:25:d7:d5:3c:37:e8:6f:e9:
93:af:23:9b:ce:ec:f1:c7:ca:d3:0c:01:47:ed:ac:36:ca:2e:
48:ab:dd:75:07:f8:04:d0:d8:39:a8:cb:fa:d3:a5:81:88:bd:
10:06:74:5a:ab:cd:8c:b7:4a:1d:92:c7:9d:c3:1f:fe:14:4e:
94:73:a6:fe:6b:0d:2d:4f:13:07:a9:5d:20:df:84:0e:9c:da:
d3:93:51:ee:45:c1:c3:d1:81:f6:66:c8:7e:b2:cf:be:70:0b:
bc:eb:04:77:8b:24:12:3d:a7:6d:40:db:c0:96:00:97:8b:f4:
ff:00:9c:6e:8b:d6:04:7e:a5:a0:c1:ff:6c:ee:73:02:fc:28:
20:c7:fb:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405mO+pBn87cIM+JiSyU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWE1M2Q5NjJkNjdhMDE0OGU2MzdiNGI0Njg5YmU0ZDA4
NGE5ZTUwHhcNMjYwMzI5MDkwMTI0WhcNMjYwMzMwMDkwMTI0WjAzMTEwLwYDVQQD
Eyg5ZDViZWI2ZWY5NDM0MjI5NzQ1NmMyNzY0Y2ZjZDk3NTEzZmQzMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo58jqcyRdPjTtjDVuJxgU4IjLQH1
6ncbVajWTIJwvZ0UepHQqs+waMli4uP1l/u12mPoAp6cfzLxGLmdvQE+44caBTmt
Osa8o2BJMd/071jWslJzqjUgRNwnbGwbY0S3SbTjK9S5t4n5HVEyJPhqpWWW1W0r
y6bQlr37xNzFInJ8fuhbTP8/CmhqqgoSf9IbF63AUBruIBVE0sLIO8MSy0bathtR
TUO5A2zYb9SRFpYCMlIHwRLFyYwJbFDavxKdogVKTeLYgPzwjc2ejJQrE2v0DkEm
QwOVNfUnSdIiIBD4YsLVKQM4MgkyCErXs+VC6gqF9nW2BmgQQ2tjmZlU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1b6275Q0IpdFbCdkz82XUT/TEaMB8GA1UdIwQY
MBaAFGvqU9li1noBSOY3tLRom+TQhKnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEt
ZTIwYjdlNjc5NjIyLzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEtZTIwYjdlNjc5NjIy
LzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKOm9I+4
c01JGEgDDKN6dVkLCWUiN2ufATu8a/ktAPkjfBvXIXPcdaI86MhAfQUeZ8F030IL
tp7QsZADbChT50OIQbtMTIJN3bwMUBveyLulYfGSGVtWKCZCcC3AUX2oWTh1vt9Z
ctmqHzF4kRF/kgrV80BsQCXX1Tw36G/pk68jm87s8cfK0wwBR+2sNsouSKvddQf4
BNDYOajL+tOlgYi9EAZ0WqvNjLdKHZLHncMf/hROlHOm/msNLU8TB6ldIN+EDpza
05NR7kXBw9GB9mbIfrLPvnALvOsEd4skEj2nbUDbwJYAl4v0/wCcbovWBH6loMH/
bO5zAvwoIMf7cA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:32 2026 by rpki-client