Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier: Gd+U/OX5T0wjrZpfS7T2mIhUSK5z0ZZewu9LFFcv6VA=
Subject key identifier: 64:3D:B8:1D:B2:43:ED:54:9A:8C:78:D9:8E:BF:72:1E:36:4A:FE:03
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial: 019D38D37C2F8BA3E8C1A8BE2F9091B7F656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number: 08C7
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: QosXy/KVJ9QPjZV0Hfug8kxAhpT/K2Y8R2fZe2kMNMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7c:2f:8b:a3:e8:c1:a8:be:2f:90:91:b7:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=643db81db243ed549a8c78d98ebf721e364afe03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:f9:3e:cb:71:32:42:37:5b:a4:75:fd:00:
e4:3b:25:98:53:4f:d6:a6:4e:14:b4:26:f6:b1:42:
39:a3:c9:2b:53:f8:df:3a:ca:b2:12:55:bf:6b:6d:
e3:11:bc:6d:c5:bc:61:b3:33:3e:5f:e0:75:b6:7f:
f2:ab:34:76:d0:68:92:9f:27:95:a6:ed:1d:b4:ac:
7b:98:24:d2:70:00:e0:25:ca:c4:b4:21:3f:84:c3:
a5:d4:36:02:75:57:07:5a:50:94:81:b2:4d:be:1c:
14:fa:12:cd:e1:c2:43:7f:d6:ca:a5:f7:2d:90:1b:
cf:4d:0b:f4:b7:5d:f1:eb:4c:d8:65:c3:b7:a9:58:
3e:12:1f:91:fd:81:68:bd:1a:06:3a:0d:b5:cc:67:
7a:98:04:49:5e:1a:92:80:11:18:44:7c:c2:ed:1f:
e5:88:14:36:cb:15:9d:ba:29:6b:56:40:f1:87:65:
8d:85:3f:d6:33:c3:ac:a4:7b:30:ff:a0:8a:29:6d:
31:5e:90:8c:03:88:b5:51:02:4d:33:24:9b:eb:bf:
c4:75:af:36:4b:c7:d3:0c:16:9d:e5:15:30:14:2e:
75:bc:0d:02:7f:d9:ab:74:80:b5:6c:a6:44:a0:49:
de:9a:66:f2:c6:54:0a:57:dc:43:bf:f8:49:1c:d6:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3D:B8:1D:B2:43:ED:54:9A:8C:78:D9:8E:BF:72:1E:36:4A:FE:03
X509v3 Authority Key Identifier:
keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:c4:05:f5:db:30:40:f8:23:4b:a6:6c:da:60:65:ee:18:
ec:d5:f7:10:14:dd:7b:27:95:76:93:00:eb:13:9f:6e:cf:e3:
49:cf:d5:9e:2a:fe:05:a9:b9:c3:7e:f4:67:c2:43:05:a6:a6:
77:7b:93:cc:d9:53:18:88:a9:d0:43:1b:c1:b2:34:7e:6a:16:
0a:f7:0b:d9:ab:5d:ce:f8:74:cc:97:22:26:c1:25:ce:65:00:
41:e0:0a:95:63:46:ca:bd:cd:47:7b:15:77:3a:d5:89:56:88:
f2:81:bd:32:26:fe:f2:3d:b7:96:30:03:3c:8f:33:0d:cf:d1:
5c:6b:29:ca:3d:84:d3:b2:b1:00:ba:fc:db:8f:1a:5f:10:f6:
c7:f6:50:89:04:93:3e:e7:5a:15:03:21:ac:fa:ef:e3:eb:d4:
23:c6:09:6a:f1:6f:a4:eb:a5:c3:31:c2:b1:3e:4e:48:d3:af:
c1:e6:ef:b6:0f:01:1c:94:33:46:17:76:3d:31:d5:f7:d6:97:
16:24:60:41:37:31:b3:28:c8:24:d0:ea:d4:d2:cc:d8:8d:27:
92:7f:36:80:aa:60:6b:ba:76:17:16:8b:d7:df:0f:2f:79:27:
dc:a4:1e:fe:9d:1d:06:18:09:11:f9:3e:b9:0b:06:39:ed:27:
c0:15:0c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403wvi6Powai+L5CRt/ZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhODIzZDFjZGFlYjgzNzc1ZjFmYmJkNWY5ZmFlNDFhYzVk
ZjE3MTkwHhcNMjYwMzI5MDkwMTE3WhcNMjYwMzMwMDkwMTE3WjAzMTEwLwYDVQQD
Eyg2NDNkYjgxZGIyNDNlZDU0OWE4Yzc4ZDk4ZWJmNzIxZTM2NGFmZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYz5PstxMkI3W6R1/QDkOyWYU0/W
pk4UtCb2sUI5o8krU/jfOsqyElW/a23jEbxtxbxhszM+X+B1tn/yqzR20GiSnyeV
pu0dtKx7mCTScADgJcrEtCE/hMOl1DYCdVcHWlCUgbJNvhwU+hLN4cJDf9bKpfct
kBvPTQv0t13x60zYZcO3qVg+Eh+R/YFovRoGOg21zGd6mARJXhqSgBEYRHzC7R/l
iBQ2yxWduilrVkDxh2WNhT/WM8OspHsw/6CKKW0xXpCMA4i1UQJNMySb67/Eda82
S8fTDBad5RUwFC51vA0Cf9mrdIC1bKZEoEnemmbyxlQKV9xDv/hJHNYFfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQ9uB2yQ+1Umox42Y6/ch42Sv4DMB8GA1UdIwQY
MBaAFJqCPRza64N3Xx+71fn65BrF3xcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9JOUhOcnJnM2RmSDd2Vi1mcmtHc1hmRnhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wYmYzYjItNGRjNC00ZTI1LTliOWIt
MDFmOWE3YjQ5NGRhLzEvbW9JOUhOcnJnM2RmSDd2Vi1mcmtHc1hmRnhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wYmYzYjItNGRjNC00ZTI1LTliOWItMDFmOWE3YjQ5NGRh
LzEvbW9JOUhOcnJnM2RmSDd2Vi1mcmtHc1hmRnhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlszEBfXb
MED4I0umbNpgZe4Y7NX3EBTdeyeVdpMA6xOfbs/jSc/Vnir+Bam5w370Z8JDBaam
d3uTzNlTGIip0EMbwbI0fmoWCvcL2atdzvh0zJciJsElzmUAQeAKlWNGyr3NR3sV
dzrViVaI8oG9Mib+8j23ljADPI8zDc/RXGspyj2E07KxALr8248aXxD2x/ZQiQST
PudaFQMhrPrv4+vUI8YJavFvpOulwzHCsT5OSNOvwebvtg8BHJQzRhd2PTHV99aX
FiRgQTcxsyjIJNDq1NLM2I0nkn82gKpga7p2FxaL198PL3kn3KQe/p0dBhgJEfk+
uQsGOe0nwBUMAw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:26 2026 by rpki-client