Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: 8J1huk1wCPOTlA6tVZXrx8SZQ2TU3GOtJDpn3gig7Xg=
Subject key identifier: B6:75:DE:A1:20:B7:20:E1:B8:57:5D:D0:77:2F:3E:03:C2:31:51:8D
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 019CAD59A2DA52CF32FFDF02C1EB2FA59D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 1166
Signing time: Mon 02 Mar 2026 07:00:58 +0000
Manifest this update: Mon 02 Mar 2026 07:00:58 +0000
Manifest next update: Tue 03 Mar 2026 07:00:58 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: w12QJs1aRj3kFNTXip5nCd7Y9ofQbVlSH7bOjR73ogY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a2:da:52:cf:32:ff:df:02:c1:eb:2f:a5:9d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Mar 2 07:00:58 2026 GMT
Not After : Mar 3 07:00:58 2026 GMT
Subject: CN=b675dea120b720e1b8575dd0772f3e03c231518d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:7c:e8:cd:58:ee:4c:31:7f:23:19:a9:92:
fb:e3:79:55:f8:08:6d:0d:41:0b:73:26:97:83:f9:
43:ae:8e:b2:0d:3a:1c:a4:b4:ba:0d:0f:9b:0a:c7:
7d:45:2e:b3:23:ff:43:0d:40:f2:ea:cd:1d:7c:af:
57:a8:18:1e:32:18:e4:dd:d7:cb:c9:3a:66:55:92:
cf:29:34:6c:bb:18:95:07:39:d8:74:b9:d2:4f:18:
ae:54:d5:9a:b5:7a:82:7e:0a:15:19:ef:8c:0f:f2:
16:14:71:97:a6:a0:0c:52:37:cb:13:00:f4:19:d8:
fb:e4:ce:78:e2:7b:f4:35:f1:4f:7e:f0:8d:01:5b:
90:89:e6:7e:ed:5e:2e:e3:31:33:2e:84:fe:ab:51:
37:23:80:df:a4:35:b5:69:95:4f:3b:e5:79:69:45:
fa:88:0f:48:9e:70:ab:7e:b4:23:49:b9:74:3e:a1:
15:8e:fc:85:d1:84:e4:01:f0:02:b9:02:9d:33:97:
de:20:88:e9:e8:5d:2f:eb:e4:49:17:84:be:fc:9e:
0a:a6:f6:d3:f0:34:14:41:07:34:4a:72:cf:38:0a:
65:8b:1d:df:4a:ed:51:da:af:22:93:85:b6:a7:3a:
1a:a4:1a:13:47:c2:96:50:46:39:dd:de:a8:56:67:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:75:DE:A1:20:B7:20:E1:B8:57:5D:D0:77:2F:3E:03:C2:31:51:8D
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c3:08:f6:a7:d6:d9:e4:71:6f:6d:c5:b1:28:0f:18:3f:81:
e5:47:f1:75:86:2f:42:39:a5:6b:1a:37:30:a7:09:d0:18:81:
a4:b4:e9:c6:be:3b:2e:b5:1f:80:07:66:7a:ec:0f:dc:03:ba:
b4:c7:ab:66:4d:ab:47:dd:ea:57:e9:32:d5:39:4d:3b:84:86:
a2:0b:bf:55:dc:5a:35:6c:2a:3d:19:a9:bf:52:0f:a8:82:62:
ec:a8:1a:c0:5b:3b:a2:ca:37:2f:69:8c:7a:37:a8:15:5a:08:
8f:8f:ba:67:8a:ca:5f:88:44:a4:9f:50:6d:33:3b:ef:03:10:
98:c0:df:53:24:a3:98:1e:ca:ac:73:1e:b3:0d:93:22:93:a7:
43:78:f9:02:d7:5d:7c:ab:92:e5:74:1a:33:f6:7d:1b:1c:30:
f9:e6:26:b1:d5:69:73:69:41:ac:f0:d8:a3:5d:72:74:ac:b3:
3f:6c:9d:9d:1c:a3:84:67:be:90:8b:53:82:46:f1:8c:5b:75:
0d:95:c8:2a:7f:17:ed:4d:b8:4f:07:40:ee:34:77:75:a9:79:
0f:1a:33:a0:66:80:82:76:b8:93:ce:ab:2c:d9:1f:b7:be:9b:
11:72:78:56:88:14:6c:59:7e:7a:7d:ea:5a:8e:78:3a:59:9f:
f4:c3:6b:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWaLaUs8y/98CwesvpZ01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDJjZDVkZDhkNTEzZDRhZTg3ZWNmZGM1NTdlYmY1ZjYy
M2VjMzQwHhcNMjYwMzAyMDcwMDU4WhcNMjYwMzAzMDcwMDU4WjAzMTEwLwYDVQQD
EyhiNjc1ZGVhMTIwYjcyMGUxYjg1NzVkZDA3NzJmM2UwM2MyMzE1MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5V86M1Y7kwxfyMZqZL743lV+Aht
DUELcyaXg/lDro6yDTocpLS6DQ+bCsd9RS6zI/9DDUDy6s0dfK9XqBgeMhjk3dfL
yTpmVZLPKTRsuxiVBznYdLnSTxiuVNWatXqCfgoVGe+MD/IWFHGXpqAMUjfLEwD0
Gdj75M544nv0NfFPfvCNAVuQieZ+7V4u4zEzLoT+q1E3I4DfpDW1aZVPO+V5aUX6
iA9InnCrfrQjSbl0PqEVjvyF0YTkAfACuQKdM5feIIjp6F0v6+RJF4S+/J4KpvbT
8DQUQQc0SnLPOAplix3fSu1R2q8ik4W2pzoapBoTR8KWUEY53d6oVmeIdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZ13qEgtyDhuFdd0HcvPgPCMVGNMB8GA1UdIwQY
MBaAFInSzV3Y1RPUrofs/cVX6/X2I+w0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAt
NWFlMzVjMDMwNjg2LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAtNWFlMzVjMDMwNjg2
LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMMI9qfW
2eRxb23FsSgPGD+B5UfxdYYvQjmlaxo3MKcJ0BiBpLTpxr47LrUfgAdmeuwP3AO6
tMerZk2rR93qV+ky1TlNO4SGogu/VdxaNWwqPRmpv1IPqIJi7KgawFs7oso3L2mM
ejeoFVoIj4+6Z4rKX4hEpJ9QbTM77wMQmMDfUySjmB7KrHMesw2TIpOnQ3j5Atdd
fKuS5XQaM/Z9Gxww+eYmsdVpc2lBrPDYo11ydKyzP2ydnRyjhGe+kItTgkbxjFt1
DZXIKn8X7U24TwdA7jR3dal5DxozoGaAgna4k86rLNkft76bEXJ4VogUbFl+en3q
Wo54Olmf9MNriw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:58 2026 by rpki-client