Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File: 718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier: N5ygybjq1qvBUbRcmdcxwnaVVJsTfV54+6V2I/zFizE=
Subject key identifier: 0A:15:B8:2B:10:27:F1:7C:B6:17:4D:41:91:0D:E7:F4:F1:10:43:76
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer: /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial: 019D382E7DE172F6E49CA2823AB2DB75C0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number: 1287
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: ekZF0xDlu366qqefB50CostCB010hPkWi+UDar/PAGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7d:e1:72:f6:e4:9c:a2:82:3a:b2:db:75:c0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=0a15b82b1027f17cb6174d41910de7f4f1104376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:d4:f2:2c:30:1b:6f:ab:94:88:26:5e:50:
0f:ff:90:76:bd:51:8c:2e:67:d4:a5:b9:bb:62:25:
93:2d:6a:6d:63:7a:46:81:74:3a:22:09:be:cb:3d:
64:29:46:fe:a3:d1:4d:68:cf:2a:8d:24:77:ea:e2:
84:88:6d:c7:01:e9:ea:ba:37:1a:76:74:be:0b:2e:
9c:ea:29:37:88:e2:21:bd:60:a3:25:92:32:00:49:
bc:24:9a:42:25:b0:4f:9c:de:1e:4a:32:9d:44:01:
5e:9d:00:8a:27:ae:ed:aa:e8:01:7e:1f:c9:83:fe:
2b:af:9f:4d:e0:ea:1d:b1:61:4c:fd:7c:5e:88:38:
d1:46:02:ee:2a:d9:4e:f3:f6:3b:1d:44:f5:47:9a:
1a:e5:e5:04:28:f3:5e:c8:f2:3a:f3:2c:3f:5d:9e:
9b:97:00:54:e3:29:28:e2:a5:58:f0:1e:66:13:4a:
35:26:a8:e8:f0:6a:17:b4:4e:c0:36:d7:3b:c5:3c:
96:8a:b3:29:34:d5:f9:56:4b:3e:6c:b6:78:91:17:
38:69:cf:1a:02:a2:24:e2:fc:f9:4b:93:84:ea:35:
b5:62:8c:93:3a:14:86:f2:46:f7:54:0d:94:be:ae:
69:56:aa:c6:ca:ec:af:c3:a7:e0:4e:38:e1:d4:8e:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:B8:2B:10:27:F1:7C:B6:17:4D:41:91:0D:E7:F4:F1:10:43:76
X509v3 Authority Key Identifier:
keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1f:93:ae:e8:9b:90:7b:73:42:0c:a5:58:44:59:d7:5a:a1:
3d:c1:27:54:9d:5b:77:b9:21:1f:c5:82:d7:90:46:b0:60:95:
80:9e:21:45:c4:95:21:40:eb:be:35:5d:a6:54:18:36:1c:37:
26:9e:f6:18:a8:f5:46:8c:9d:97:2e:f0:6b:7e:24:23:81:d9:
f9:1f:b7:eb:89:e1:38:de:a7:46:41:c2:49:b1:70:a4:36:55:
8d:da:83:6b:34:73:ab:f0:03:1a:f1:c9:b4:f2:40:5b:5d:db:
63:7f:2a:ef:f8:ed:03:52:33:ae:67:5c:63:4c:7a:fb:18:52:
a4:f3:fe:7a:6e:b4:2e:f4:1b:f0:c2:38:97:a3:72:0d:09:86:
e1:04:d7:9a:ad:fb:fb:00:1a:67:4a:29:b0:11:39:c6:0b:a2:
36:92:e4:1b:59:79:70:c7:82:56:8c:6a:bd:cc:76:b4:6a:dc:
af:16:9b:40:ed:34:e0:d0:96:1b:eb:f0:d3:d0:92:e4:2b:6c:
87:6f:31:0a:0b:4f:04:21:3f:e0:21:db:43:12:6d:f0:3c:b4:
57:65:9c:3f:f2:7c:12:fa:3b:36:08:27:d4:85:6f:30:13:b6:
44:d8:64:54:a9:01:a8:76:11:ed:0b:db:72:49:20:10:e7:0d:
43:f2:49:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ln3hcvbknKKCOrLbdcDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNWYxYzQxNTJjNGE0NjA1NWY3MmNiZTg2NmE4OGQ1MDBk
Zjk4M2YwHhcNMjYwMzI5MDYwMTA0WhcNMjYwMzMwMDYwMTA0WjAzMTEwLwYDVQQD
EygwYTE1YjgyYjEwMjdmMTdjYjYxNzRkNDE5MTBkZTdmNGYxMTA0Mzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh7U8iwwG2+rlIgmXlAP/5B2vVGM
LmfUpbm7YiWTLWptY3pGgXQ6Igm+yz1kKUb+o9FNaM8qjSR36uKEiG3HAenqujca
dnS+Cy6c6ik3iOIhvWCjJZIyAEm8JJpCJbBPnN4eSjKdRAFenQCKJ67tqugBfh/J
g/4rr59N4OodsWFM/XxeiDjRRgLuKtlO8/Y7HUT1R5oa5eUEKPNeyPI68yw/XZ6b
lwBU4yko4qVY8B5mE0o1Jqjo8GoXtE7ANtc7xTyWirMpNNX5Vks+bLZ4kRc4ac8a
AqIk4vz5S5OE6jW1YoyTOhSG8kb3VA2Uvq5pVqrGyuyvw6fgTjjh1I5vPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoVuCsQJ/F8thdNQZEN5/TxEEN2MB8GA1UdIwQY
MBaAFO9fHEFSxKRgVfcsvoZqiNUA35g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzE4Y1FWTEVwR0JWOXl5LWhtcUkxUURmbUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NWNmMmUtYzlkYS00MDEwLWEwOTMt
ZTQ0NDZmMmMxMmVjLzEvNzE4Y1FWTEVwR0JWOXl5LWhtcUkxUURmbUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NWNmMmUtYzlkYS00MDEwLWEwOTMtZTQ0NDZmMmMxMmVj
LzEvNzE4Y1FWTEVwR0JWOXl5LWhtcUkxUURmbUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjR+Truib
kHtzQgylWERZ11qhPcEnVJ1bd7khH8WC15BGsGCVgJ4hRcSVIUDrvjVdplQYNhw3
Jp72GKj1Roydly7wa34kI4HZ+R+364nhON6nRkHCSbFwpDZVjdqDazRzq/ADGvHJ
tPJAW13bY38q7/jtA1IzrmdcY0x6+xhSpPP+em60LvQb8MI4l6NyDQmG4QTXmq37
+wAaZ0opsBE5xguiNpLkG1l5cMeCVoxqvcx2tGrcrxabQO004NCWG+vw09CS5Cts
h28xCgtPBCE/4CHbQxJt8Dy0V2WcP/J8Evo7Nggn1IVvMBO2RNhkVKkBqHYR7Qvb
ckkgEOcNQ/JJgw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:45 2026 by rpki-client