Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: 078SZw2bXvcDPVTLE6E0hAdCNTBidf3z+S0aQ4vTcfU=
Subject key identifier: 12:76:7D:85:B3:3E:B2:28:9B:E2:7D:0A:02:3E:8B:82:90:52:97:CC
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 019D3865DF3FD0F1AD9590E17CEC631AF269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 10D1
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: l13zqgTOMMNDpZZ5FqJyfPWCaux2ZeHMzGNoclVrrC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:df:3f:d0:f1:ad:95:90:e1:7c:ec:63:1a:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=12767d85b33eb2289be27d0a023e8b82905297cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:fd:ae:b9:35:ce:de:35:99:2d:1d:94:a4:
f4:fd:f8:e6:ea:d8:58:1c:68:39:68:ca:a0:61:24:
65:c2:b0:a5:19:e1:cd:e4:b7:73:70:7e:2d:9c:ab:
85:bf:10:37:ee:3f:b8:57:ed:f9:0e:f8:81:4d:3a:
80:82:0b:12:c5:d5:8e:5b:b5:3e:7c:69:14:d3:c8:
96:87:eb:c3:28:40:4e:c4:b4:8a:5d:2a:04:10:e6:
ee:a2:4f:35:d9:b3:39:d3:44:aa:9c:d0:da:6d:ff:
a5:d5:c5:76:aa:b2:de:91:eb:89:54:e3:64:cc:10:
a1:ac:85:65:62:52:44:f0:fa:09:c9:a7:e1:8b:53:
03:e3:b4:40:9f:10:1c:1d:ed:5b:d1:51:9b:24:3c:
4c:b2:76:62:de:ed:3a:07:05:b1:c4:16:2a:49:f5:
6b:17:8c:43:4a:9c:17:2e:81:ae:c2:c9:65:66:e9:
87:28:4d:b3:94:7b:69:51:02:f9:cc:9f:4e:e3:c9:
9b:bd:2f:7c:57:6f:20:94:68:4a:b1:2e:95:4c:4f:
ce:06:43:6d:bc:78:ef:ce:15:33:2a:2a:2a:23:7a:
d4:cd:03:cc:c7:ac:6a:58:d7:2b:cf:6e:7d:6b:0d:
93:30:09:c6:2a:bd:b7:59:20:d7:96:52:48:2f:af:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:7D:85:B3:3E:B2:28:9B:E2:7D:0A:02:3E:8B:82:90:52:97:CC
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:58:32:06:94:92:c1:c8:bf:9b:59:66:7a:0c:fd:5e:48:ba:
87:90:91:16:dd:7f:69:7a:8f:45:32:b5:11:4e:98:ca:5a:d0:
89:4b:c4:2a:08:77:3c:a0:f6:cc:f9:3d:7f:fd:52:c8:55:76:
af:81:1a:85:a0:89:f3:22:3e:3c:b4:64:02:ea:61:4f:1e:d1:
bf:ab:d2:89:c0:08:22:ff:5e:7b:ff:b4:ed:ca:57:e6:26:90:
fb:ec:d5:29:7c:28:c9:2d:d2:16:31:31:78:16:b9:99:ff:0a:
62:2e:b2:c3:a2:cc:f2:b8:e8:4e:00:04:17:11:af:da:49:c4:
58:b9:4f:83:0e:b5:95:d0:e3:83:2e:94:42:fc:75:78:50:53:
34:4e:87:34:04:c2:86:46:88:25:e2:e9:4f:fd:3f:82:0f:ab:
3a:d0:83:1b:3f:bc:37:31:8e:e3:36:6c:96:c5:a5:22:a5:eb:
94:61:38:a1:73:8b:21:45:3f:6f:ff:4d:58:1f:28:80:63:c2:
01:8c:d9:08:ce:5e:10:ab:44:41:fe:a2:ab:24:a0:96:78:ab:
78:05:7b:37:10:87:64:57:3f:36:51:63:73:1d:c2:4e:c4:f1:
84:b4:8a:02:00:27:e0:c9:41:3d:6e:11:c1:61:5e:b3:60:c0:
f1:49:14:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:03 2026 by rpki-client