Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: VriDHnGtQpxvmus4l9Mfk84e42Rp5BpsY5NMqqNUDQ4=
Subject key identifier: E2:8B:77:B2:7B:7E:3A:63:7C:3F:04:0E:41:B7:22:81:F1:FF:72:A4
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 019D371B6FB00A32B61E5BEB4FD5741F44C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 07A1
Signing time: Sun 29 Mar 2026 01:00:38 +0000
Manifest this update: Sun 29 Mar 2026 01:00:38 +0000
Manifest next update: Mon 30 Mar 2026 01:00:38 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: 7Tl2idcW/94T43EzWWkWJjPtkjMDSz/gyu8Mp4Zs8w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:6f:b0:0a:32:b6:1e:5b:eb:4f:d5:74:1f:44:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Mar 29 01:00:38 2026 GMT
Not After : Mar 30 01:00:38 2026 GMT
Subject: CN=e28b77b27b7e3a637c3f040e41b72281f1ff72a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:a1:9b:ab:2e:a0:ec:67:d8:66:ca:cc:b6:
67:fa:10:84:c9:19:22:fc:54:66:52:b6:e2:1b:4c:
90:bb:d2:c4:eb:da:b5:99:b6:45:b9:b8:29:fb:5f:
75:b8:01:ec:76:b1:ef:0d:e6:f0:2f:b6:07:a9:e2:
ee:fb:40:4f:f0:f6:fd:ce:61:70:06:d4:c2:12:3c:
30:58:61:4a:e0:35:0d:a6:63:cd:f1:d2:60:0c:7d:
c2:48:a2:d1:a4:4d:83:f4:f4:52:c9:54:b3:ca:27:
7e:7a:22:b9:2f:fb:a0:c7:ee:24:27:ac:b6:b5:d5:
b0:b3:bd:4e:09:56:c7:ba:45:c3:92:6a:06:b9:c9:
15:e1:82:59:19:ca:71:5c:4d:20:d1:03:ae:65:5d:
d0:8b:b5:c6:3e:4e:b6:dd:cc:43:a4:75:0d:62:7c:
1d:a5:cb:56:bf:0f:d9:25:3e:ab:1f:81:4f:6e:84:
2a:76:74:68:11:af:6b:2f:c3:db:af:ac:bc:2d:f8:
b7:fb:57:eb:65:b7:ec:41:62:b1:01:b4:72:7c:66:
1a:9a:cf:52:3d:3b:09:2b:e3:34:d5:c3:d0:d7:53:
9c:c9:8d:e3:27:d2:14:f4:91:68:5d:5e:50:0f:80:
12:dc:66:2d:b7:cb:cd:1d:0d:3a:05:2a:82:62:79:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8B:77:B2:7B:7E:3A:63:7C:3F:04:0E:41:B7:22:81:F1:FF:72:A4
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ac:83:47:f1:d9:d4:3a:71:28:c9:39:df:b5:a3:a0:a4:85:
52:9a:ac:ca:28:09:6e:78:66:72:85:d2:fe:47:ac:a6:f5:4e:
3c:9f:03:e7:b5:0d:46:4e:17:58:e1:12:40:88:77:64:3d:d1:
bf:08:7d:d1:7f:b1:8b:42:f5:29:9f:8a:d4:8b:4a:26:4e:84:
11:2e:2c:ea:26:2a:1c:43:08:31:b3:f6:bc:d5:6e:02:1c:2d:
e0:0e:c0:e1:b8:a2:88:33:87:a8:43:55:9f:4d:44:6c:6e:fd:
89:71:34:c3:a1:fc:3f:f2:52:b0:6e:11:56:a5:7f:9c:b5:1a:
0d:3a:df:90:a0:26:33:0a:df:d2:4e:18:5a:24:cd:ae:ff:47:
b7:74:79:f8:e5:78:38:80:b6:5d:e4:d0:f4:60:7c:2d:09:48:
2c:7a:96:62:26:95:38:b6:71:7a:6a:3c:2f:57:4c:dc:94:00:
49:38:41:9f:47:94:9e:d2:70:7f:d0:b2:bc:c9:87:9c:a7:0e:
d0:b2:ed:8f:b9:dd:6b:3e:72:5c:6b:6d:5c:b7:3e:dd:8b:8f:
4b:17:86:a0:c4:a0:0f:99:43:83:9e:1d:56:04:60:b1:6a:cf:
8a:fb:34:f7:51:4c:ff:33:b0:c8:12:bb:91:0a:fc:17:e8:c9:
0a:65:28:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G2+wCjK2HlvrT9V0H0TIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWU4OTM4ZjBlMGIxZWFiNjE0ODgzMzZkMjNjYTM5MTg3
ZDZlYTMwHhcNMjYwMzI5MDEwMDM4WhcNMjYwMzMwMDEwMDM4WjAzMTEwLwYDVQQD
EyhlMjhiNzdiMjdiN2UzYTYzN2MzZjA0MGU0MWI3MjI4MWYxZmY3MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuChm6suoOxn2GbKzLZn+hCEyRki
/FRmUrbiG0yQu9LE69q1mbZFubgp+191uAHsdrHvDebwL7YHqeLu+0BP8Pb9zmFw
BtTCEjwwWGFK4DUNpmPN8dJgDH3CSKLRpE2D9PRSyVSzyid+eiK5L/ugx+4kJ6y2
tdWws71OCVbHukXDkmoGuckV4YJZGcpxXE0g0QOuZV3Qi7XGPk623cxDpHUNYnwd
pctWvw/ZJT6rH4FPboQqdnRoEa9rL8Pbr6y8Lfi3+1frZbfsQWKxAbRyfGYams9S
PTsJK+M01cPQ11OcyY3jJ9IU9JFoXV5QD4AS3GYtt8vNHQ06BSqCYnnZlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKLd7J7fjpjfD8EDkG3IoHx/3KkMB8GA1UdIwQY
MBaAFIeuiTjw4LHqthSIM20jyjkYfW6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYt
MjlkMGJhMTJlZGEyLzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYtMjlkMGJhMTJlZGEy
LzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKyDR/HZ
1DpxKMk537WjoKSFUpqsyigJbnhmcoXS/kespvVOPJ8D57UNRk4XWOESQIh3ZD3R
vwh90X+xi0L1KZ+K1ItKJk6EES4s6iYqHEMIMbP2vNVuAhwt4A7A4biiiDOHqENV
n01EbG79iXE0w6H8P/JSsG4RVqV/nLUaDTrfkKAmMwrf0k4YWiTNrv9Ht3R5+OV4
OIC2XeTQ9GB8LQlILHqWYiaVOLZxemo8L1dM3JQASThBn0eUntJwf9CyvMmHnKcO
0LLtj7ndaz5yXGttXLc+3YuPSxeGoMSgD5lDg54dVgRgsWrPivs091FM/zOwyBK7
kQr8F+jJCmUo7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:37 2026 by rpki-client