Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier: bd4cMDaFiO1wATQLSKCUBmqzBrRLcEtjRYJJ5l56jpw=
Subject key identifier: 5C:C9:EF:B9:CC:15:73:43:70:E3:1C:3A:87:1A:07:04:82:59:38:9F
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial: 019D3865D2D1C415CA28E6D6B587AEE86E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number: 0E89
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: dgKMMI+njGXyjj7oQhqCl9FDQpTNJ5uJNxuag74mmOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d2:d1:c4:15:ca:28:e6:d6:b5:87:ae:e8:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=5cc9efb9cc15734370e31c3a871a07048259389f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:e7:ad:05:5a:a5:19:5e:d6:97:16:2a:00:
5b:d8:8c:41:81:61:71:85:6e:41:a3:da:5c:ba:b2:
c2:b8:5c:ae:b5:4e:26:81:3a:12:d7:d4:69:e4:82:
3f:2d:36:10:a6:96:4e:36:87:cd:f9:f7:ac:62:2d:
19:3a:e2:b4:9d:24:68:0f:e8:34:82:81:da:43:0b:
c7:5f:f8:a8:e3:f0:f7:71:a2:e7:6d:57:63:a2:d4:
0d:fb:be:a4:4f:c5:10:31:d5:6e:9a:61:fb:bc:55:
92:43:d9:eb:be:08:d8:d0:2b:32:f1:f9:ce:5e:9a:
a0:83:1a:e7:cc:7f:0b:4f:10:88:be:ce:56:94:c6:
20:21:28:07:89:ba:45:32:a7:0d:eb:3a:fd:86:f1:
c4:c2:90:1d:10:5b:70:8b:2f:4a:49:a6:3c:0d:56:
f7:28:1b:e2:0e:69:db:99:a7:f9:e0:72:20:43:88:
fe:76:9c:62:91:d6:27:8f:89:50:24:e3:b2:5b:bf:
a4:43:66:aa:b8:38:4f:91:5c:c3:b5:60:e3:24:e2:
47:e4:10:43:d4:84:5f:62:7d:cd:73:c9:0c:5b:d7:
3f:49:37:4b:ac:15:1e:2b:5c:d9:a3:00:d7:48:80:
03:be:85:35:4c:a0:d4:20:6b:a5:0f:82:6a:e5:3f:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C9:EF:B9:CC:15:73:43:70:E3:1C:3A:87:1A:07:04:82:59:38:9F
X509v3 Authority Key Identifier:
keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:31:47:01:e1:0c:68:50:71:6d:e8:d8:61:7e:72:ac:09:bf:
dc:63:96:84:4e:46:ff:98:47:24:a6:cb:6e:34:aa:f6:45:32:
ca:25:9d:b5:d3:27:c9:55:ed:c3:6a:83:a8:d3:5e:89:67:9c:
f2:43:c8:00:2a:8d:63:53:52:0b:f0:51:43:cd:19:f7:94:76:
b0:82:49:48:64:c0:b8:37:d7:ba:ea:e4:79:44:e9:0f:7c:7f:
50:c7:44:92:9d:76:eb:dc:e5:06:87:06:38:2d:e5:8e:f1:e0:
07:60:fb:6e:0d:c3:c9:02:79:a3:b9:ac:0b:76:db:5a:f2:c1:
ef:03:e8:88:99:ec:7b:b9:bc:d9:2c:f3:07:53:10:c1:a3:aa:
0b:b5:07:66:cd:24:a4:97:22:c4:c3:7a:25:82:ce:83:15:e0:
72:1b:fd:1d:0e:86:55:50:53:c2:ed:52:54:54:22:38:e3:c4:
e1:94:ce:d0:f0:16:ec:ee:09:fb:6f:50:c1:2c:f3:60:c6:35:
81:bf:db:33:26:ca:7d:46:f9:00:a5:1a:a2:c9:f9:37:8c:00:
30:9b:15:dd:37:92:ed:41:57:54:28:3d:3a:de:1b:64:73:07:
b8:86:82:2f:bf:40:d1:fd:b9:9a:bc:69:ad:d1:fb:e9:b9:61:
de:76:b2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZdLRxBXKKObWtYeu6G4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTBiNDM5ZDQ4OGUxYjFhNjllMzU4NjA5ODYyMTk1NmMw
ZWRjN2IwHhcNMjYwMzI5MDcwMTMwWhcNMjYwMzMwMDcwMTMwWjAzMTEwLwYDVQQD
Eyg1Y2M5ZWZiOWNjMTU3MzQzNzBlMzFjM2E4NzFhMDcwNDgyNTkzODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvDnrQVapRle1pcWKgBb2IxBgWFx
hW5Bo9pcurLCuFyutU4mgToS19Rp5II/LTYQppZONofN+fesYi0ZOuK0nSRoD+g0
goHaQwvHX/io4/D3caLnbVdjotQN+76kT8UQMdVummH7vFWSQ9nrvgjY0Csy8fnO
XpqggxrnzH8LTxCIvs5WlMYgISgHibpFMqcN6zr9hvHEwpAdEFtwiy9KSaY8DVb3
KBviDmnbmaf54HIgQ4j+dpxikdYnj4lQJOOyW7+kQ2aquDhPkVzDtWDjJOJH5BBD
1IRfYn3Nc8kMW9c/STdLrBUeK1zZowDXSIADvoU1TKDUIGulD4Jq5T/G0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzJ77nMFXNDcOMcOocaBwSCWTifMB8GA1UdIwQY
MBaAFOtQtDnUiOGxpp41hgmGIZVsDtx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMt
M2E3OTgwMzE0ZWEyLzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMtM2E3OTgwMzE0ZWEy
LzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTFHAeEM
aFBxbejYYX5yrAm/3GOWhE5G/5hHJKbLbjSq9kUyyiWdtdMnyVXtw2qDqNNeiWec
8kPIACqNY1NSC/BRQ80Z95R2sIJJSGTAuDfXuurkeUTpD3x/UMdEkp1269zlBocG
OC3ljvHgB2D7bg3DyQJ5o7msC3bbWvLB7wPoiJnse7m82SzzB1MQwaOqC7UHZs0k
pJcixMN6JYLOgxXgchv9HQ6GVVBTwu1SVFQiOOPE4ZTO0PAW7O4J+29QwSzzYMY1
gb/bMybKfUb5AKUaosn5N4wAMJsV3TeS7UFXVCg9Ot4bZHMHuIaCL79A0f25mrxp
rdH76blh3nayfg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:11 2026 by rpki-client