Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
File: tRHa8IloP-FhzqiMVw_HPLnkGXA.mft (raw, json)
Hash identifier: wJPALR6H3OqCgVh59AibVaW3Zm1vFV+0v5QLLTqRyyg=
Subject key identifier: CC:B0:98:D3:F9:A7:C7:F3:32:67:80:44:C8:EC:C3:1A:4B:17:E8:66
Authority key identifier: B5:11:DA:F0:89:68:3F:E1:61:CE:A8:8C:57:0F:C7:3C:B9:E4:19:70
Certificate issuer: /CN=b511daf089683fe161cea88c570fc73cb9e41970
Certificate serial: 019D3941A09F4AADCDA4CF2D5CB80D8C90D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRHa8IloP-FhzqiMVw_HPLnkGXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
Manifest number: 36
Signing time: Sun 29 Mar 2026 11:01:35 +0000
Manifest this update: Sun 29 Mar 2026 11:01:35 +0000
Manifest next update: Mon 30 Mar 2026 11:01:35 +0000
Files and hashes: 1: tRHa8IloP-FhzqiMVw_HPLnkGXA.crl (hash: bP6TXZCAZs2uRw4wCVru2o4W/u7NN1pmX0HKjKSyd+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRHa8IloP-FhzqiMVw_HPLnkGXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a0:9f:4a:ad:cd:a4:cf:2d:5c:b8:0d:8c:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b511daf089683fe161cea88c570fc73cb9e41970
Validity
Not Before: Mar 29 11:01:35 2026 GMT
Not After : Mar 30 11:01:35 2026 GMT
Subject: CN=ccb098d3f9a7c7f332678044c8ecc31a4b17e866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:13:39:19:51:47:44:14:61:42:03:35:20:
05:02:de:15:c2:f8:72:e9:0b:de:8b:1a:27:6e:02:
c7:c1:2b:2a:3c:d7:5b:5f:ba:23:c7:a5:fd:4b:d0:
52:fb:5b:75:7e:6d:1d:5e:b1:4a:11:a7:34:70:ec:
49:19:b1:38:7a:c6:01:66:b7:df:50:ec:01:4d:ca:
3b:63:a9:9a:fe:c7:d7:7d:be:72:06:26:c5:42:49:
ce:13:f7:81:ab:02:81:aa:0a:a5:9f:31:1e:52:f6:
8d:e3:f3:b9:e2:a4:0e:07:6d:0c:53:67:af:5c:6f:
ec:15:2b:15:18:be:79:07:86:a7:89:c3:54:a5:fb:
11:65:92:d5:fc:4c:ee:12:b1:3c:bf:de:84:92:b7:
32:d5:ca:54:ac:c7:6e:b0:d1:c3:8e:ce:aa:81:49:
fd:f5:f4:c7:c4:2a:d7:54:9e:9d:fd:93:bd:5f:95:
5c:b3:2e:db:db:23:d2:a3:0f:5b:69:26:a7:89:fd:
68:73:c0:a2:82:12:f0:d4:b1:07:ea:63:5b:97:8e:
4d:b8:8e:8a:e8:b3:e8:e7:60:df:ff:e8:f9:1b:52:
59:a5:8e:78:37:7d:a5:8c:14:ed:67:6e:7a:2b:9c:
be:5d:05:f5:e0:65:61:f7:15:3d:35:e1:e2:3e:18:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B0:98:D3:F9:A7:C7:F3:32:67:80:44:C8:EC:C3:1A:4B:17:E8:66
X509v3 Authority Key Identifier:
keyid:B5:11:DA:F0:89:68:3F:E1:61:CE:A8:8C:57:0F:C7:3C:B9:E4:19:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRHa8IloP-FhzqiMVw_HPLnkGXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/98dbb0-6a1e-4929-ad30-d294cbfe2d9f/1/tRHa8IloP-FhzqiMVw_HPLnkGXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:02:55:be:e5:aa:35:1c:24:23:c8:6a:5a:c8:2d:01:98:64:
fa:70:23:0e:44:dd:08:5a:5a:8b:ef:1a:94:4d:97:1c:92:7c:
36:bd:ef:45:2b:08:a1:26:11:2b:c8:9d:8b:15:e7:00:72:01:
7c:90:74:8f:af:c2:2f:c8:d2:10:8b:24:57:9f:90:30:2d:04:
0a:d8:6a:58:d9:f7:a7:75:77:9d:b9:33:17:98:de:f3:ec:73:
fe:ab:63:9a:37:21:83:c6:79:02:5f:26:64:1f:48:9c:b5:18:
7d:43:c8:5a:44:05:78:f1:87:81:81:7b:ee:bb:ec:54:d6:91:
12:38:91:9d:11:45:34:46:f1:f4:e2:cf:e4:30:0e:dc:39:d5:
9c:54:ad:d7:2b:d2:2c:10:5c:56:ba:56:c5:e1:8d:02:39:b2:
82:12:97:22:73:d6:84:be:66:63:6b:22:4c:03:4e:e0:1b:4e:
ab:09:a0:bc:fa:34:11:ee:11:86:e4:c5:8d:db:7e:99:ce:d4:
a2:0c:7e:29:39:41:79:c6:18:0e:a4:cd:ad:27:0f:14:8f:3e:
80:4a:28:da:e4:80:22:df:0a:71:89:73:91:26:5d:ae:13:16:
6e:76:2d:c6:b0:72:96:c5:32:59:7e:08:e3:8b:9d:58:0c:76:
03:0b:c7:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QaCfSq3NpM8tXLgNjJDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTFkYWYwODk2ODNmZTE2MWNlYTg4YzU3MGZjNzNjYjll
NDE5NzAwHhcNMjYwMzI5MTEwMTM1WhcNMjYwMzMwMTEwMTM1WjAzMTEwLwYDVQQD
EyhjY2IwOThkM2Y5YTdjN2YzMzI2NzgwNDRjOGVjYzMxYTRiMTdlODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHUTORlRR0QUYUIDNSAFAt4Vwvhy
6QveixonbgLHwSsqPNdbX7ojx6X9S9BS+1t1fm0dXrFKEac0cOxJGbE4esYBZrff
UOwBTco7Y6ma/sfXfb5yBibFQknOE/eBqwKBqgqlnzEeUvaN4/O54qQOB20MU2ev
XG/sFSsVGL55B4anicNUpfsRZZLV/EzuErE8v96Ekrcy1cpUrMdusNHDjs6qgUn9
9fTHxCrXVJ6d/ZO9X5Vcsy7b2yPSow9baSanif1oc8CighLw1LEH6mNbl45NuI6K
6LPo52Df/+j5G1JZpY54N32ljBTtZ256K5y+XQX14GVh9xU9NeHiPhgeRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMywmNP5p8fzMmeARMjswxpLF+hmMB8GA1UdIwQY
MBaAFLUR2vCJaD/hYc6ojFcPxzy55BlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJIYThJbG9QLUZoenFpTVZ3X0hQTG5rR1hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85OGRiYjAtNmExZS00OTI5LWFkMzAt
ZDI5NGNiZmUyZDlmLzEvdFJIYThJbG9QLUZoenFpTVZ3X0hQTG5rR1hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85OGRiYjAtNmExZS00OTI5LWFkMzAtZDI5NGNiZmUyZDlm
LzEvdFJIYThJbG9QLUZoenFpTVZ3X0hQTG5rR1hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwJVvuWq
NRwkI8hqWsgtAZhk+nAjDkTdCFpai+8alE2XHJJ8Nr3vRSsIoSYRK8idixXnAHIB
fJB0j6/CL8jSEIskV5+QMC0ECthqWNn3p3V3nbkzF5je8+xz/qtjmjchg8Z5Al8m
ZB9InLUYfUPIWkQFePGHgYF77rvsVNaREjiRnRFFNEbx9OLP5DAO3DnVnFSt1yvS
LBBcVrpWxeGNAjmyghKXInPWhL5mY2siTANO4BtOqwmgvPo0Ee4RhuTFjdt+mc7U
ogx+KTlBecYYDqTNrScPFI8+gEoo2uSAIt8KcYlzkSZdrhMWbnYtxrBylsUyWX4I
44udWAx2AwvHCQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:39:01 2026 by rpki-client