Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
File: a_CO0PpuGTufOlC_cmtB0MMpspc.mft (raw, json)
Hash identifier: vpsp+eSLNHXgUkLN2PCuEzCGwJyPEuWNwltYgjorgs4=
Subject key identifier: 45:1C:DD:2A:9F:D0:8A:A1:94:25:B8:FD:47:E2:D7:32:D0:7E:E0:A3
Authority key identifier: 6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97
Certificate issuer: /CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297
Certificate serial: 019CE2FE646182CD2849D0A393E77496C3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
Manifest number: 0452
Signing time: Thu 12 Mar 2026 17:00:48 +0000
Manifest this update: Thu 12 Mar 2026 17:00:48 +0000
Manifest next update: Fri 13 Mar 2026 17:00:48 +0000
Files and hashes: 1: a_CO0PpuGTufOlC_cmtB0MMpspc.crl (hash: 8hUQJmFbl5D1RjomTwtTIucGxj8b7QQ3+uWTY5g0ZI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:64:61:82:cd:28:49:d0:a3:93:e7:74:96:c3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297
Validity
Not Before: Mar 12 17:00:48 2026 GMT
Not After : Mar 13 17:00:48 2026 GMT
Subject: CN=451cdd2a9fd08aa19425b8fd47e2d732d07ee0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:31:b6:50:0e:41:f9:45:8b:96:e3:8d:90:
d7:37:1f:59:92:12:5d:cc:33:00:fb:f3:2a:25:84:
6c:22:0e:6c:c1:d4:10:ae:2a:e0:9a:e9:f4:a7:eb:
6b:da:c0:ca:59:ae:4d:73:ea:b6:aa:50:d9:2c:15:
91:eb:25:a5:93:73:d4:48:4e:cd:c3:a4:f3:99:22:
bf:8e:c7:a0:3c:cc:42:93:33:cd:4c:20:78:1a:5d:
e1:d5:7e:87:88:41:a5:9d:68:2d:95:2f:c9:dd:c5:
aa:e9:e3:4e:31:70:dc:95:4f:76:f9:28:50:67:85:
2d:6a:34:c8:44:0d:ed:ad:e4:a3:eb:f4:14:96:64:
8d:a5:e6:68:66:21:e7:5d:4c:21:b1:59:6d:7d:56:
43:21:69:ae:b5:13:f6:96:4d:ab:ca:01:59:e0:c0:
0c:00:f0:99:54:30:4c:f9:6e:60:57:43:7f:65:60:
61:42:78:40:5e:56:d0:6e:97:96:be:3b:87:03:c6:
ea:23:c9:24:f0:ee:e6:ac:64:e1:d7:ac:d9:89:62:
e5:49:55:45:d4:46:cd:f1:49:11:0c:1a:b2:74:1c:
61:2d:0d:ce:35:18:e8:98:eb:ad:7c:6c:f3:1f:9a:
1d:26:1c:4e:41:aa:04:43:29:0e:21:97:ce:7d:45:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1C:DD:2A:9F:D0:8A:A1:94:25:B8:FD:47:E2:D7:32:D0:7E:E0:A3
X509v3 Authority Key Identifier:
keyid:6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bf:46:23:97:82:dd:97:d0:04:66:e4:e1:34:07:fb:81:88:
7c:10:5e:d5:b0:c1:99:9a:cb:e3:0c:ac:a8:b9:85:12:ce:5a:
df:11:05:a7:01:ef:59:91:83:9e:68:15:92:51:2e:da:65:f5:
15:0e:07:f6:ba:3f:37:0f:85:93:a5:1f:6e:d8:ca:f7:cb:a9:
a6:fa:f7:b4:8c:75:e2:ee:bd:c3:b9:fc:d1:8b:b0:d0:76:b7:
d1:0d:8f:d8:e6:d9:68:7b:55:d9:d4:00:b6:bb:1e:3d:52:8f:
a9:80:bb:fb:04:24:77:cb:8e:b7:6a:ff:1d:e3:19:cd:3a:41:
a4:ee:5b:a0:5a:31:d7:9f:4f:4f:5b:b0:2f:d8:82:d2:96:5b:
25:fa:7c:5a:4c:38:e1:5d:b0:29:98:76:e1:fb:d2:85:c6:38:
51:57:bf:c6:3b:8c:bc:53:dd:72:bb:40:b1:85:45:24:5d:da:
67:67:d7:d3:11:69:7a:72:1c:27:9b:ac:dd:76:ac:df:79:b4:
dd:93:ec:57:bf:55:5e:94:93:c6:33:33:9a:29:9a:65:e9:6f:
8a:77:69:d0:dd:7e:db:38:04:70:03:cb:61:7d:90:36:da:58:
af:79:2d:35:36:c8:4a:62:c3:d6:cb:48:6a:6b:e1:c1:4b:a3:
b1:a1:d9:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzi/mRhgs0oSdCjk+d0lsPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjA4ZWQwZmE2ZTE5M2I5ZjNhNTBiZjcyNmI0MWQwYzMy
OWIyOTcwHhcNMjYwMzEyMTcwMDQ4WhcNMjYwMzEzMTcwMDQ4WjAzMTEwLwYDVQQD
Eyg0NTFjZGQyYTlmZDA4YWExOTQyNWI4ZmQ0N2UyZDczMmQwN2VlMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8kxtlAOQflFi5bjjZDXNx9ZkhJd
zDMA+/MqJYRsIg5swdQQrirgmun0p+tr2sDKWa5Nc+q2qlDZLBWR6yWlk3PUSE7N
w6TzmSK/jsegPMxCkzPNTCB4Gl3h1X6HiEGlnWgtlS/J3cWq6eNOMXDclU92+ShQ
Z4UtajTIRA3treSj6/QUlmSNpeZoZiHnXUwhsVltfVZDIWmutRP2lk2rygFZ4MAM
APCZVDBM+W5gV0N/ZWBhQnhAXlbQbpeWvjuHA8bqI8kk8O7mrGTh16zZiWLlSVVF
1EbN8UkRDBqydBxhLQ3ONRjomOutfGzzH5odJhxOQaoEQykOIZfOfUVHJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUc3Sqf0IqhlCW4/Ufi1zLQfuCjMB8GA1UdIwQY
MBaAFGvwjtD6bhk7nzpQv3JrQdDDKbKXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9DTzBQcHVHVHVmT2xDX2NtdEIwTU1wc3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82N2E2M2EtMWEwMy00ODIyLWFjOWUt
M2Q0MjA1ZjVlMmQzLzEvYV9DTzBQcHVHVHVmT2xDX2NtdEIwTU1wc3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC82N2E2M2EtMWEwMy00ODIyLWFjOWUtM2Q0MjA1ZjVlMmQz
LzEvYV9DTzBQcHVHVHVmT2xDX2NtdEIwTU1wc3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiL9GI5eC
3ZfQBGbk4TQH+4GIfBBe1bDBmZrL4wysqLmFEs5a3xEFpwHvWZGDnmgVklEu2mX1
FQ4H9ro/Nw+Fk6UfbtjK98uppvr3tIx14u69w7n80Yuw0Ha30Q2P2ObZaHtV2dQA
trsePVKPqYC7+wQkd8uOt2r/HeMZzTpBpO5boFox159PT1uwL9iC0pZbJfp8Wkw4
4V2wKZh24fvShcY4UVe/xjuMvFPdcrtAsYVFJF3aZ2fX0xFpenIcJ5us3Xas33m0
3ZPsV79VXpSTxjMzmimaZelvindp0N1+2zgEcAPLYX2QNtpYr3ktNTbISmLD1stI
amvhwUujsaHZOg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 00:13:59 2026 by rpki-client