Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: YW0QadtQIo83TDKaM446jM00RGaFpz8ZnbLe0tcLntY=
Subject key identifier: 23:98:6C:AE:E6:C3:74:A0:EE:D2:47:BE:30:3C:E1:B4:68:42:68:5E
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 019D389C042A3B8BC3BF34E1CA444F6E036C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 15EE
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: dSckioCJYxt15Nlz8OpGriVQ6NQ/IjzYnrY9ksEUT04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:04:2a:3b:8b:c3:bf:34:e1:ca:44:4f:6e:03:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=23986caee6c374a0eed247be303ce1b46842685e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:48:1b:47:5b:66:a8:28:19:f8:61:37:29:
34:de:5d:e6:0f:b1:b7:82:39:51:93:82:ba:2a:5f:
29:d6:5f:98:c4:03:15:34:13:9e:68:c3:43:89:c9:
a8:8c:c6:e6:6e:b4:1a:7f:61:7e:7d:45:9f:88:94:
a9:40:7d:aa:c2:8b:6c:5e:9c:05:ac:53:66:89:2e:
11:b9:3a:51:96:40:2b:16:d1:f9:92:eb:fa:0b:07:
3b:9e:d8:5f:e3:3f:fe:f6:ca:15:1f:bf:eb:66:c8:
3c:1b:a3:f2:1b:df:3d:1d:40:5c:be:5f:c3:55:db:
a6:c3:50:19:a8:6d:2a:e8:44:89:81:3a:34:d7:9b:
94:eb:17:d5:c1:45:bc:01:aa:01:3c:f7:e8:cd:09:
8f:c6:6e:6e:c1:89:be:8f:e2:5e:a1:c1:f2:fe:16:
69:1b:15:05:18:17:ad:41:d0:37:af:d7:82:91:64:
aa:fa:ce:30:3e:13:4f:01:53:a5:ff:92:cd:cc:cd:
8b:dd:2c:a3:5d:46:48:94:66:da:b3:fa:6a:eb:03:
c7:0f:81:c7:a2:4c:a4:ec:78:cb:3c:f7:74:4a:0a:
a2:d6:c1:4b:19:ce:52:70:ac:18:e0:07:b2:1a:44:
16:fc:a4:0c:d0:97:bb:e8:62:8d:b1:d2:19:57:b9:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:98:6C:AE:E6:C3:74:A0:EE:D2:47:BE:30:3C:E1:B4:68:42:68:5E
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:38:b7:bc:a5:6f:48:a3:93:d7:3b:09:77:a7:4c:bd:a8:e6:
8d:76:48:1d:6f:51:bf:33:b8:1b:df:f9:a4:93:3b:05:e9:91:
8d:b1:c3:9e:22:0e:cc:49:2d:6b:99:97:35:22:d8:8c:17:2d:
b4:15:55:96:2d:8b:52:3a:8e:8a:3d:9f:10:36:0f:41:c5:80:
be:75:4c:d6:d3:fc:43:fb:c1:c6:df:29:26:22:03:d3:e3:33:
f1:58:ff:7a:e9:ed:63:4c:7e:a6:b6:55:d0:82:b3:b4:1a:e1:
49:96:81:a9:42:e2:96:4a:fe:e2:ce:f4:03:c2:79:10:cd:55:
d7:70:3d:5c:e1:d4:b2:36:fb:75:9d:ba:e6:6b:1f:13:4a:62:
a7:ed:ef:fd:dc:f0:f9:1a:3d:b5:f8:7b:c2:91:7a:89:0f:eb:
90:ea:86:65:f5:2e:77:1c:03:8f:1b:f4:24:19:04:ff:37:d9:
2e:11:1b:80:df:4f:5d:8e:9c:98:c4:8a:6a:9c:58:b5:e9:59:
09:9f:bf:15:28:e7:09:c3:20:a7:89:3d:ff:c5:ca:bb:33:42:
7a:bf:25:ab:4e:88:89:2b:23:6e:bd:ed:1c:59:c2:e5:42:dc:
df:f4:d2:09:ad:eb:61:67:6e:2a:fc:e9:f8:6e:5a:ae:22:73:
07:8a:e5:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nAQqO4vDvzThykRPbgNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YWUyMmVkYTk2Mjc0ZWU5Njk3Y2FhYWNiNTNkZjkxNzM3
MDllMDMwHhcNMjYwMzI5MDgwMDQxWhcNMjYwMzMwMDgwMDQxWjAzMTEwLwYDVQQD
EygyMzk4NmNhZWU2YzM3NGEwZWVkMjQ3YmUzMDNjZTFiNDY4NDI2ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJFIG0dbZqgoGfhhNyk03l3mD7G3
gjlRk4K6Kl8p1l+YxAMVNBOeaMNDicmojMbmbrQaf2F+fUWfiJSpQH2qwotsXpwF
rFNmiS4RuTpRlkArFtH5kuv6Cwc7nthf4z/+9soVH7/rZsg8G6PyG989HUBcvl/D
Vdumw1AZqG0q6ESJgTo015uU6xfVwUW8AaoBPPfozQmPxm5uwYm+j+JeocHy/hZp
GxUFGBetQdA3r9eCkWSq+s4wPhNPAVOl/5LNzM2L3SyjXUZIlGbas/pq6wPHD4HH
okyk7HjLPPd0Sgqi1sFLGc5ScKwY4AeyGkQW/KQM0Je76GKNsdIZV7nyswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOYbK7mw3Sg7tJHvjA84bRoQmheMB8GA1UdIwQY
MBaAFLeuIu2pYnTulpfKqstT35FzcJ4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQt
MzcwZjAwMGMzYzBlLzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQtMzcwZjAwMGMzYzBl
LzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazi3vKVv
SKOT1zsJd6dMvajmjXZIHW9RvzO4G9/5pJM7BemRjbHDniIOzEkta5mXNSLYjBct
tBVVli2LUjqOij2fEDYPQcWAvnVM1tP8Q/vBxt8pJiID0+Mz8Vj/euntY0x+prZV
0IKztBrhSZaBqULilkr+4s70A8J5EM1V13A9XOHUsjb7dZ265msfE0pip+3v/dzw
+Ro9tfh7wpF6iQ/rkOqGZfUudxwDjxv0JBkE/zfZLhEbgN9PXY6cmMSKapxYtelZ
CZ+/FSjnCcMgp4k9/8XKuzNCer8lq06IiSsjbr3tHFnC5ULc3/TSCa3rYWduKvzp
+G5ariJzB4rlmw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:14 2026 by rpki-client