Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier: 84SO75NxlrNKlt+MqBFMFtnQLM3m3MCiZAv5HHShDC0=
Subject key identifier: C9:C9:0C:9E:EF:E2:08:C3:87:95:C2:BD:B2:A5:8F:92:5B:4D:04:9A
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial: 019D38664A30C39CC09F622C33D655A3C6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number: 0940
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: 1u7EIMU0lYvt+bYOO51vCPUG9jeKJVfbA8CbeKJqJ3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4a:30:c3:9c:c0:9f:62:2c:33:d6:55:a3:c6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=c9c90c9eefe208c38795c2bdb2a58f925b4d049a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:3f:17:76:d9:37:3d:23:a5:f2:a3:10:c0:
b3:96:72:33:b5:b4:9f:82:fa:3f:9d:fb:85:b2:e8:
42:e9:4a:da:35:df:4b:5d:09:62:a1:43:f1:c5:54:
84:03:61:12:6b:55:79:22:eb:d1:6f:2e:72:93:8b:
58:20:12:a8:f2:63:a5:81:61:1d:49:4f:ab:f0:cb:
7f:90:21:c5:2d:a8:e2:f2:81:10:84:fe:4d:9e:83:
8b:93:a7:86:39:d9:96:e7:8c:1b:19:e9:4d:86:4a:
38:e5:a9:60:e6:51:2b:1a:c7:14:96:e2:7c:89:2c:
2d:d0:70:e0:b3:68:a5:e9:3a:83:1e:fc:30:e7:cc:
3d:34:a7:8b:a2:dc:d5:a5:1b:2a:1b:c6:60:98:81:
dc:42:2d:f9:4f:d3:66:41:29:a3:e2:6f:04:31:97:
2e:42:a5:08:c1:05:44:ed:f3:f3:61:c6:09:dc:70:
eb:17:06:6d:a7:a9:f4:e9:b1:9a:fb:61:4e:81:f2:
54:9d:99:8b:0a:60:ca:75:bf:dd:0a:0c:39:0d:03:
e8:90:af:af:d4:9d:04:c0:b7:fe:32:93:9c:ab:38:
11:75:c4:25:b3:f7:b0:21:d8:9a:a7:b4:14:f4:e0:
fe:a6:a4:d9:c1:a0:5d:93:e0:04:03:88:bd:2c:7b:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:0C:9E:EF:E2:08:C3:87:95:C2:BD:B2:A5:8F:92:5B:4D:04:9A
X509v3 Authority Key Identifier:
keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ef:bc:af:f6:98:99:91:20:cb:d3:32:13:4a:40:68:53:54:
c3:a4:41:92:34:3d:d3:f4:cc:2a:03:4b:9d:59:0b:13:f2:9b:
82:31:11:11:82:bf:9f:b2:84:40:e5:be:4b:42:9a:09:81:ec:
44:58:55:db:8d:dd:b1:bc:fb:5b:ba:34:df:35:c9:40:a4:14:
df:5e:0a:4f:9f:a1:4c:7e:7a:b9:e9:d6:07:85:5d:71:37:50:
fc:fa:a3:1f:ab:86:47:83:e9:63:c1:28:b6:70:17:14:6b:c7:
9f:02:82:5a:c3:ec:af:1b:4a:25:8e:6f:39:b2:88:1d:af:d7:
48:28:33:70:9c:45:e3:54:3e:01:6b:f2:f9:ab:e5:b9:3a:92:
23:c2:aa:33:9c:fe:41:2e:ed:71:fe:cb:8f:8b:15:8e:95:b7:
ce:34:0f:b5:2f:d1:ac:de:55:9b:26:03:98:69:be:ab:d7:fb:
fa:77:57:6c:81:d4:ec:b8:a2:a4:1c:c9:e0:6b:76:e4:73:ea:
e4:95:f4:d2:16:2e:91:ec:86:6e:6a:2f:0f:ea:9b:61:6b:9b:
f8:51:bc:f5:37:b0:89:69:b1:1f:48:53:2f:0a:76:3d:0f:cc:
58:1d:0d:c0:99:06:55:c8:5b:14:28:60:ad:c2:68:d9:d7:41:
b0:fb:1d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zkoww5zAn2IsM9ZVo8anMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjk2NDlmNmE2ZmI2MmM2ZGNkMGNlOGMwZGYxNjU1YzEy
MzY0MzQwHhcNMjYwMzI5MDcwMjAwWhcNMjYwMzMwMDcwMjAwWjAzMTEwLwYDVQQD
EyhjOWM5MGM5ZWVmZTIwOGMzODc5NWMyYmRiMmE1OGY5MjViNGQwNDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiA/F3bZNz0jpfKjEMCzlnIztbSf
gvo/nfuFsuhC6UraNd9LXQlioUPxxVSEA2ESa1V5IuvRby5yk4tYIBKo8mOlgWEd
SU+r8Mt/kCHFLaji8oEQhP5NnoOLk6eGOdmW54wbGelNhko45alg5lErGscUluJ8
iSwt0HDgs2il6TqDHvww58w9NKeLotzVpRsqG8ZgmIHcQi35T9NmQSmj4m8EMZcu
QqUIwQVE7fPzYcYJ3HDrFwZtp6n06bGa+2FOgfJUnZmLCmDKdb/dCgw5DQPokK+v
1J0EwLf+MpOcqzgRdcQls/ewIdiap7QU9OD+pqTZwaBdk+AEA4i9LHu91wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnJDJ7v4gjDh5XCvbKlj5JbTQSaMB8GA1UdIwQY
MBaAFHO5ZJ9qb7Ysbc0M6MDfFlXBI2Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWIt
N2UxMzhkZjYxMDU3LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWItN2UxMzhkZjYxMDU3
LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO+8r/aY
mZEgy9MyE0pAaFNUw6RBkjQ90/TMKgNLnVkLE/KbgjEREYK/n7KEQOW+S0KaCYHs
RFhV243dsbz7W7o03zXJQKQU314KT5+hTH56uenWB4VdcTdQ/PqjH6uGR4PpY8Eo
tnAXFGvHnwKCWsPsrxtKJY5vObKIHa/XSCgzcJxF41Q+AWvy+avluTqSI8KqM5z+
QS7tcf7Lj4sVjpW3zjQPtS/RrN5VmyYDmGm+q9f7+ndXbIHU7LiipBzJ4Gt25HPq
5JX00hYukeyGbmovD+qbYWub+FG89TewiWmxH0hTLwp2PQ/MWB0NwJkGVchbFChg
rcJo2ddBsPsdUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:02 2026 by rpki-client