Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: 42pdTzmNNzDGaDTu3yrW5X9ePFO2fQRxpXIp3SrWX1A=
Subject key identifier: 64:BC:D2:05:57:ED:18:FF:12:FD:0D:88:92:6A:48:81:8C:18:B5:D6
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 019D38D3B470C4B53329A5B1224EC6E71FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 15FC
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: /DrPNR4gIsQ/V1VxfAFzlZOLxX1LfBZHdhI8TjPYIOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b4:70:c4:b5:33:29:a5:b1:22:4e:c6:e7:1f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=64bcd20557ed18ff12fd0d88926a48818c18b5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:a3:6d:04:3f:ed:cf:d5:3d:a9:b2:6a:94:
49:3e:5d:87:dd:bc:f7:9f:a4:87:c7:a0:71:b2:0d:
e1:93:bc:b5:53:26:7a:43:63:af:f0:39:fe:a7:57:
a6:8e:41:c2:0d:87:cc:51:66:be:f8:fc:cf:c2:c0:
cd:6d:d0:c4:f4:c8:7e:bf:0a:7c:db:a4:0b:83:ca:
52:72:0c:f8:ec:89:f1:23:ec:9c:cd:d5:35:58:83:
66:50:49:9d:45:08:ad:2d:3f:28:f7:94:46:e0:b8:
77:e5:f5:ee:d6:d0:3f:b6:9c:69:87:5a:25:f7:1a:
78:42:d3:b5:fd:ee:e8:eb:cb:4f:c6:11:92:29:5d:
52:17:bf:1b:25:98:6c:85:f0:2e:22:34:e0:9b:4a:
13:52:10:dc:bb:a2:50:71:a2:b3:a2:d4:cf:6c:4a:
ed:46:15:8f:5f:6e:d0:5b:70:c1:ab:6c:eb:4c:3f:
ce:30:4b:e1:e1:10:3f:71:9f:2a:e6:b4:e0:f6:d5:
ce:7c:71:52:53:f6:8f:5a:ab:53:b5:a5:cf:8e:97:
d2:c6:51:00:3e:9f:67:03:3e:1b:4c:c9:ac:7c:9e:
01:9e:a5:86:82:c3:f0:23:f8:a2:ea:76:28:46:d8:
90:5a:de:da:f1:ea:e0:f6:3b:46:e4:74:97:88:5b:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BC:D2:05:57:ED:18:FF:12:FD:0D:88:92:6A:48:81:8C:18:B5:D6
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c0:79:55:2f:b5:f2:fb:30:f4:30:be:53:8b:cd:3f:53:fc:
c2:44:3f:f6:a6:fb:1d:00:10:c6:2b:6d:3d:62:6f:27:cc:04:
45:a6:94:5d:cb:45:5c:df:46:a9:ef:7e:15:16:71:41:7f:40:
97:7d:df:9d:71:6e:86:e4:b0:af:e7:fa:f6:42:ff:5d:00:68:
01:2f:2f:ef:3c:97:da:e3:b6:5b:9b:8b:22:b5:cb:6d:49:95:
59:25:0a:8e:00:bc:a8:c9:31:0c:d3:7c:fc:48:c5:00:67:64:
1f:35:8f:62:cf:c2:d1:11:35:fc:e4:10:63:70:b1:18:13:8c:
08:e8:5c:2d:a4:cd:09:d2:c0:46:bc:3f:e7:f3:15:7c:5a:64:
1e:d5:b4:c1:33:70:f7:7d:74:a0:0c:48:8c:f0:53:e4:7a:c9:
b2:ff:e7:b2:a0:bf:b2:e6:62:0c:93:81:09:71:a6:88:41:ad:
37:60:5a:b2:20:17:bd:07:be:34:f4:4e:2b:85:a7:54:9f:74:
12:56:b2:4d:9c:15:a3:c3:e6:12:ca:f5:dc:f1:18:24:9d:60:
0c:0e:d5:8a:8c:6f:fc:57:39:3e:61:87:bc:9d:ad:df:18:9f:
da:70:98:99:e1:18:d9:27:8b:9f:b1:b3:4b:73:cd:03:73:0e:
6d:3a:aa:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0407RwxLUzKaWxIk7G5x/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzBjNWJlNzdlZjk5Y2E0YTdlOTFkZmZkNThlNmE3OTg3
NDNjZmEwHhcNMjYwMzI5MDkwMTMxWhcNMjYwMzMwMDkwMTMxWjAzMTEwLwYDVQQD
Eyg2NGJjZDIwNTU3ZWQxOGZmMTJmZDBkODg5MjZhNDg4MThjMThiNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsOjbQQ/7c/VPamyapRJPl2H3bz3
n6SHx6Bxsg3hk7y1UyZ6Q2Ov8Dn+p1emjkHCDYfMUWa++PzPwsDNbdDE9Mh+vwp8
26QLg8pScgz47InxI+yczdU1WINmUEmdRQitLT8o95RG4Lh35fXu1tA/tpxph1ol
9xp4QtO1/e7o68tPxhGSKV1SF78bJZhshfAuIjTgm0oTUhDcu6JQcaKzotTPbErt
RhWPX27QW3DBq2zrTD/OMEvh4RA/cZ8q5rTg9tXOfHFSU/aPWqtTtaXPjpfSxlEA
Pp9nAz4bTMmsfJ4BnqWGgsPwI/ii6nYoRtiQWt7a8erg9jtG5HSXiFuEBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS80gVX7Rj/Ev0NiJJqSIGMGLXWMB8GA1UdIwQY
MBaAFJvAxb5375nKSn6R3/1Y5qeYdDz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThERnZuZnZtY3BLZnBIZl9Wam1wNWgwUFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84OWQ5ZjAtOWJiYy00ZWVkLWIwMDMt
Y2VkMjA2NTExOTI3LzEvbThERnZuZnZtY3BLZnBIZl9Wam1wNWgwUFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84OWQ5ZjAtOWJiYy00ZWVkLWIwMDMtY2VkMjA2NTExOTI3
LzEvbThERnZuZnZtY3BLZnBIZl9Wam1wNWgwUFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMB5VS+1
8vsw9DC+U4vNP1P8wkQ/9qb7HQAQxittPWJvJ8wERaaUXctFXN9Gqe9+FRZxQX9A
l33fnXFuhuSwr+f69kL/XQBoAS8v7zyX2uO2W5uLIrXLbUmVWSUKjgC8qMkxDNN8
/EjFAGdkHzWPYs/C0RE1/OQQY3CxGBOMCOhcLaTNCdLARrw/5/MVfFpkHtW0wTNw
9310oAxIjPBT5HrJsv/nsqC/suZiDJOBCXGmiEGtN2BasiAXvQe+NPROK4WnVJ90
ElayTZwVo8PmEsr13PEYJJ1gDA7Vioxv/Fc5PmGHvJ2t3xif2nCYmeEY2SeLn7Gz
S3PNA3MObTqqMA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client