
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
File: me99CIJJhFXF_BP4LXK07pMuHwI.mft (raw, json)
Hash identifier: IBUkof90G7lEJJGceQdzPCxfUZVlujH3PJPHmXbCqtk=
Subject key identifier: 19:F3:A6:6F:A8:FB:7C:6C:F6:08:42:1F:E5:FF:EF:2C:9D:D6:E2:FA
Authority key identifier: 99:EF:7D:08:82:49:84:55:C5:FC:13:F8:2D:72:B4:EE:93:2E:1F:02
Certificate issuer: /CN=99ef7d0882498455c5fc13f82d72b4ee932e1f02
Certificate serial: 019D397816ACC6F9BC78E82E7A04C9C66F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me99CIJJhFXF_BP4LXK07pMuHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
Manifest number: 31
Signing time: Sun 29 Mar 2026 12:01:04 +0000
Manifest this update: Sun 29 Mar 2026 12:01:04 +0000
Manifest next update: Mon 30 Mar 2026 12:01:04 +0000
Files and hashes: 1: me99CIJJhFXF_BP4LXK07pMuHwI.crl (hash: LCmmtSkueOXU+nfqS67SjcilwsZTnt7zvbEXQMBE1Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/me99CIJJhFXF_BP4LXK07pMuHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:16:ac:c6:f9:bc:78:e8:2e:7a:04:c9:c6:6f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ef7d0882498455c5fc13f82d72b4ee932e1f02
Validity
Not Before: Mar 29 12:01:04 2026 GMT
Not After : Mar 30 12:01:04 2026 GMT
Subject: CN=19f3a66fa8fb7c6cf608421fe5ffef2c9dd6e2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:5a:0b:e4:91:a7:51:6f:e5:b2:2a:57:f9:
cd:5e:a9:ff:17:1b:86:06:b4:43:03:d2:eb:2c:77:
93:dc:58:40:c8:21:ea:74:95:65:74:65:2c:20:26:
ce:39:19:8f:16:b7:ce:08:6b:39:c3:c6:0b:2f:55:
68:16:55:19:38:bd:61:d4:c0:1c:ba:00:35:1b:c4:
d6:af:77:41:4b:57:a3:66:10:7b:1b:3f:ca:67:8b:
d3:fa:df:b5:ba:db:c2:f2:c1:d0:71:94:63:27:7e:
1f:b5:fa:4b:9d:2a:af:82:59:7b:ed:fb:61:b5:52:
fd:e8:45:4b:3c:dc:7f:05:27:e1:cc:e2:6b:ae:fa:
0a:2f:0f:0c:9b:d7:18:0c:24:90:59:b5:95:f8:2b:
21:7d:a3:82:e3:be:6c:0a:ff:1b:b3:20:86:96:70:
ea:ec:e5:59:c8:39:da:09:a1:94:2b:a2:a3:d7:a9:
f3:a7:24:09:92:61:9d:92:ba:c4:f6:23:1b:ac:31:
c2:1e:66:c9:ec:4d:21:45:7b:53:b9:78:df:4c:08:
51:57:e3:4a:87:d8:ad:0b:c3:09:f2:ff:77:c7:ae:
c3:e3:6c:ea:7b:5b:69:fb:d1:84:52:26:d5:79:d6:
65:df:60:33:af:e4:85:c5:90:ad:ae:1b:9e:89:fc:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F3:A6:6F:A8:FB:7C:6C:F6:08:42:1F:E5:FF:EF:2C:9D:D6:E2:FA
X509v3 Authority Key Identifier:
keyid:99:EF:7D:08:82:49:84:55:C5:FC:13:F8:2D:72:B4:EE:93:2E:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me99CIJJhFXF_BP4LXK07pMuHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:26:62:b2:cd:9c:18:c0:c4:e1:7d:54:4a:df:63:43:75:ef:
9b:1f:cf:b9:ab:28:d6:d7:ba:0f:7e:7e:3c:74:75:90:83:3d:
4c:fa:d0:76:5c:1b:4a:29:01:8c:ad:1a:46:45:74:0d:95:82:
a4:1e:50:50:e7:e2:bb:84:34:5d:64:eb:46:59:ac:8b:78:a6:
bb:dd:6f:08:84:e2:2d:d8:3b:cf:7f:66:11:27:58:21:a6:64:
1e:54:f0:d5:ab:ad:ab:96:ab:ea:b1:2a:62:c7:2c:52:dc:6b:
c9:22:29:4e:10:e6:92:41:ad:d8:19:69:c2:ad:d4:5f:8a:e7:
d9:53:32:01:91:85:8d:a6:b3:4d:c4:34:51:d5:12:41:25:03:
fd:ab:85:10:fc:34:23:31:23:b7:f5:98:5a:07:12:0a:d2:eb:
61:2d:e9:44:f5:49:5d:e5:a1:17:5c:9c:6e:97:05:e9:1b:28:
29:fa:d9:58:a1:bc:12:d8:23:b3:56:ea:12:ce:b6:40:70:af:
87:b7:27:ec:63:be:db:05:90:ef:4d:79:64:b1:1d:c3:24:1a:
3a:45:74:d7:ad:04:f7:63:80:94:33:86:d7:d4:cf:34:50:c5:
36:0f:e3:8d:7e:70:65:02:bc:73:5a:7b:1c:0b:6a:2c:b3:03:
bf:08:2c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eBasxvm8eOguegTJxm8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZWY3ZDA4ODI0OTg0NTVjNWZjMTNmODJkNzJiNGVlOTMy
ZTFmMDIwHhcNMjYwMzI5MTIwMTA0WhcNMjYwMzMwMTIwMTA0WjAzMTEwLwYDVQQD
EygxOWYzYTY2ZmE4ZmI3YzZjZjYwODQyMWZlNWZmZWYyYzlkZDZlMmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O9aC+SRp1Fv5bIqV/nNXqn/FxuG
BrRDA9LrLHeT3FhAyCHqdJVldGUsICbOORmPFrfOCGs5w8YLL1VoFlUZOL1h1MAc
ugA1G8TWr3dBS1ejZhB7Gz/KZ4vT+t+1utvC8sHQcZRjJ34ftfpLnSqvgll77fth
tVL96EVLPNx/BSfhzOJrrvoKLw8Mm9cYDCSQWbWV+CshfaOC475sCv8bsyCGlnDq
7OVZyDnaCaGUK6Kj16nzpyQJkmGdkrrE9iMbrDHCHmbJ7E0hRXtTuXjfTAhRV+NK
h9itC8MJ8v93x67D42zqe1tp+9GEUibVedZl32Azr+SFxZCtrhueifyqowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnzpm+o+3xs9ghCH+X/7yyd1uL6MB8GA1UdIwQY
MBaAFJnvfQiCSYRVxfwT+C1ytO6TLh8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWU5OUNJSkpoRlhGX0JQNExYSzA3cE11SHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNDUxZmUtM2JkMi00ODdiLTk0ZTgt
ZWFjNGNlZWZhZmZiLzEvbWU5OUNJSkpoRlhGX0JQNExYSzA3cE11SHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lNDUxZmUtM2JkMi00ODdiLTk0ZTgtZWFjNGNlZWZhZmZi
LzEvbWU5OUNJSkpoRlhGX0JQNExYSzA3cE11SHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCZiss2c
GMDE4X1USt9jQ3Xvmx/Puaso1te6D35+PHR1kIM9TPrQdlwbSikBjK0aRkV0DZWC
pB5QUOfiu4Q0XWTrRlmsi3imu91vCITiLdg7z39mESdYIaZkHlTw1autq5ar6rEq
YscsUtxrySIpThDmkkGt2Blpwq3UX4rn2VMyAZGFjaazTcQ0UdUSQSUD/auFEPw0
IzEjt/WYWgcSCtLrYS3pRPVJXeWhF1ycbpcF6RsoKfrZWKG8Etgjs1bqEs62QHCv
h7cn7GO+2wWQ7015ZLEdwyQaOkV0160E92OAlDOG19TPNFDFNg/jjX5wZQK8c1p7
HAtqLLMDvwgs1w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:19 2026 by rpki-client