Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: APM6asz8WnbKFNwE0nqlkFxAA8nLLBUnUQ0o8SLiip8=
Subject key identifier: 81:9C:1B:66:07:5A:F0:48:82:F3:AE:34:31:0D:98:F4:1C:2B:F6:BC
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 019CADC8587A0EB5ACFCCB8FFBBD1598F803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0E21
Signing time: Mon 02 Mar 2026 09:01:54 +0000
Manifest this update: Mon 02 Mar 2026 09:01:54 +0000
Manifest next update: Tue 03 Mar 2026 09:01:54 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: cHFBi+zyhHxA6U0QDovsxz3xsiZ97q8qqz8xI1f1S3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:58:7a:0e:b5:ac:fc:cb:8f:fb:bd:15:98:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Mar 2 09:01:54 2026 GMT
Not After : Mar 3 09:01:54 2026 GMT
Subject: CN=819c1b66075af04882f3ae34310d98f41c2bf6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:63:b9:00:51:0d:bb:9d:cf:1d:71:06:9f:
a0:24:4a:21:4f:7e:1f:f0:06:cc:92:9e:61:8a:4b:
23:72:be:32:44:61:8b:85:63:6c:f5:55:63:f1:07:
5a:67:ed:4c:78:22:35:33:c7:87:1a:d4:f5:ad:ed:
fc:44:dc:6c:46:fe:ad:7b:84:96:6c:f2:17:b4:88:
9a:35:09:cd:2e:59:25:40:85:d9:72:60:90:9f:35:
5a:33:f6:7f:d2:4e:09:a1:b4:72:63:95:a5:48:8b:
8a:d8:ca:53:08:c9:3e:f1:d9:d2:63:c1:e3:51:7a:
8c:f9:19:15:3d:0e:01:8f:7d:81:e2:e8:22:7e:8b:
92:15:55:a7:1c:4e:ac:ba:b3:d5:b2:e5:4c:89:f4:
9a:e7:c3:58:3c:fa:ea:32:6d:40:95:c5:40:c7:59:
1a:fd:19:0b:4e:72:5b:ce:54:d3:b0:33:73:d0:65:
77:78:f6:b1:4d:4a:f6:21:66:0c:17:44:91:9a:ef:
a2:4e:f1:f2:11:e5:1f:fa:2c:52:0e:56:73:ea:f2:
a1:d4:35:9d:a7:9e:69:16:22:38:d9:fa:b1:04:bb:
d0:1a:33:37:c0:7f:46:84:e2:65:54:db:45:6b:75:
c2:78:73:09:08:f0:a7:00:12:bb:ae:2f:d5:da:96:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:1B:66:07:5A:F0:48:82:F3:AE:34:31:0D:98:F4:1C:2B:F6:BC
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:eb:9d:6a:a9:11:b5:a8:96:76:5c:a8:b4:ac:7e:0e:93:5b:
7d:24:15:2d:01:96:83:0d:6d:aa:3d:da:66:46:f8:46:81:0b:
3c:b7:9b:80:b7:91:12:5c:fe:b1:ff:d2:bc:5e:a0:f0:af:f5:
fe:c0:58:fb:e6:f8:6f:15:3a:c4:fb:3c:75:c5:0d:75:d3:01:
5d:7f:b2:72:58:04:40:3b:bd:01:61:3e:9e:07:5e:9c:c9:c7:
48:5a:38:10:c0:93:e3:82:df:55:6a:38:e8:ab:77:bd:8c:8c:
e8:ed:f3:a1:07:3d:6b:b4:97:61:7e:58:53:44:46:e6:56:2c:
0d:53:ca:bc:19:66:a8:b2:eb:ba:19:5d:c3:87:9d:e5:a6:4e:
59:e2:64:28:6f:5c:2e:52:bd:4b:ca:39:c0:a1:8a:28:87:8f:
65:48:15:0f:55:83:a4:26:ce:59:fb:55:86:e2:e1:75:f6:2b:
df:56:ff:d1:d8:be:f9:41:0f:fc:f8:c7:f3:69:db:90:1b:58:
47:05:e0:9c:f2:a6:d0:a3:76:55:cd:b2:32:0d:b6:2f:79:03:
c4:e5:f6:20:28:c3:d9:9a:fb:29:21:17:48:98:06:32:ab:a7:
3d:a2:0d:dd:be:6b:5c:48:5a:57:76:25:fa:85:30:d4:bd:83:
e3:69:69:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyFh6DrWs/MuP+70VmPgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGU1OTQ3ZDliZGY2YjA4MTU2YTkzOWJkMjBkOTM0OTJj
NzExMDQwHhcNMjYwMzAyMDkwMTU0WhcNMjYwMzAzMDkwMTU0WjAzMTEwLwYDVQQD
Eyg4MTljMWI2NjA3NWFmMDQ4ODJmM2FlMzQzMTBkOThmNDFjMmJmNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeRjuQBRDbudzx1xBp+gJEohT34f
8AbMkp5hiksjcr4yRGGLhWNs9VVj8QdaZ+1MeCI1M8eHGtT1re38RNxsRv6te4SW
bPIXtIiaNQnNLlklQIXZcmCQnzVaM/Z/0k4JobRyY5WlSIuK2MpTCMk+8dnSY8Hj
UXqM+RkVPQ4Bj32B4ugifouSFVWnHE6surPVsuVMifSa58NYPPrqMm1AlcVAx1ka
/RkLTnJbzlTTsDNz0GV3ePaxTUr2IWYMF0SRmu+iTvHyEeUf+ixSDlZz6vKh1DWd
p55pFiI42fqxBLvQGjM3wH9GhOJlVNtFa3XCeHMJCPCnABK7ri/V2pax1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGcG2YHWvBIgvOuNDENmPQcK/a8MB8GA1UdIwQY
MBaAFCHeWUfZvfawgVapOb0g2TSSxxEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQt
NDgyMzMxMTcxNzhjLzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQtNDgyMzMxMTcxNzhj
LzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+udaqkR
taiWdlyotKx+DpNbfSQVLQGWgw1tqj3aZkb4RoELPLebgLeRElz+sf/SvF6g8K/1
/sBY++b4bxU6xPs8dcUNddMBXX+yclgEQDu9AWE+ngdenMnHSFo4EMCT44LfVWo4
6Kt3vYyM6O3zoQc9a7SXYX5YU0RG5lYsDVPKvBlmqLLruhldw4ed5aZOWeJkKG9c
LlK9S8o5wKGKKIePZUgVD1WDpCbOWftVhuLhdfYr31b/0di++UEP/PjH82nbkBtY
RwXgnPKm0KN2Vc2yMg22L3kDxOX2ICjD2Zr7KSEXSJgGMqunPaIN3b5rXEhaV3Yl
+oUw1L2D42lp5Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:36 2026 by rpki-client