
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier: aBA+WiWlHeB9k2/akehNwkYI2pWQpILrfk4XEjhjWbQ=
Subject key identifier: 87:21:15:00:49:5F:A4:B8:1C:6B:44:4F:C9:37:36:57:DE:58:02:06
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer: /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial: 019CAD5A076443C26FBEC3729D2360AE1D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number: 0E33
Signing time: Mon 02 Mar 2026 07:01:24 +0000
Manifest this update: Mon 02 Mar 2026 07:01:24 +0000
Manifest next update: Tue 03 Mar 2026 07:01:24 +0000
Files and hashes: 1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: BIK9Xbhp67SEFZ7+4cZsFtvjz0zK+F6e3H0nJ9QA+VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:07:64:43:c2:6f:be:c3:72:9d:23:60:ae:1d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Validity
Not Before: Mar 2 07:01:24 2026 GMT
Not After : Mar 3 07:01:24 2026 GMT
Subject: CN=87211500495fa4b81c6b444fc9373657de580206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:14:4d:95:ef:a6:0e:34:4f:ac:b7:78:23:06:
92:0b:dc:52:e3:f2:4e:24:3e:d4:24:2b:dc:f2:b0:
bb:2b:9f:25:93:d8:35:4a:2b:08:65:aa:9b:68:33:
a5:c6:68:bb:7d:97:40:e9:1f:46:74:67:8d:c1:0d:
e7:f2:c2:b7:12:35:0a:ea:a5:7b:bb:22:93:40:aa:
15:28:ad:89:d2:e2:e5:0c:53:14:69:07:d0:46:f1:
e8:b7:ef:8c:97:cf:c7:0d:59:d0:a2:03:e4:40:f7:
18:87:b8:b5:bb:56:24:d9:90:36:df:f9:48:62:48:
84:da:bb:2d:82:36:30:f7:87:73:8c:45:7a:c0:4e:
23:58:0f:bd:d6:5a:bb:e3:26:91:5b:09:97:3e:cd:
1e:45:35:e1:8f:63:00:b2:74:ea:1b:a5:05:4e:f8:
7b:bf:5f:25:78:97:14:3b:c5:94:9c:d2:6e:dc:3c:
a0:44:e4:14:25:49:75:c5:02:28:0c:c9:a9:cb:46:
6c:9e:68:97:5a:1f:43:e2:ee:80:c4:d7:97:a7:72:
22:cd:7b:ac:d2:f9:24:d7:d8:0c:56:a0:3a:5f:fd:
66:60:d6:4a:2f:79:2a:c6:0e:40:9a:82:e2:fe:58:
ea:2a:e5:5d:7c:8f:26:06:5e:85:7a:0f:00:b4:4e:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:15:00:49:5F:A4:B8:1C:6B:44:4F:C9:37:36:57:DE:58:02:06
X509v3 Authority Key Identifier:
keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:db:4c:2e:85:cb:9e:70:ce:6e:96:7b:95:bc:da:97:8c:80:
79:67:bf:33:01:84:b0:8a:de:84:c1:d8:1c:33:cf:6c:fb:a9:
fd:d0:fd:15:78:ca:58:57:b5:18:71:3d:c6:12:21:f7:69:ce:
6b:24:04:02:97:3d:54:28:10:f7:5a:15:64:75:0d:52:66:04:
0f:fe:27:72:fa:fb:a7:5f:e8:a4:60:4f:e2:62:8c:82:75:f6:
c2:ce:ca:f9:99:74:96:e8:8e:5c:3c:97:76:a2:61:c5:ad:62:
85:df:b3:a7:85:0b:d0:f0:f6:25:a9:7b:54:7c:b7:55:16:ca:
07:c4:2a:f8:1d:f8:b6:93:5a:35:e7:8b:3f:cc:ed:9b:73:89:
92:ff:ca:b5:b2:f5:ac:b1:c1:f6:ff:47:23:fe:58:e1:e2:c1:
e8:a7:7e:10:1c:4e:43:5a:6c:71:3f:f3:64:46:45:7b:03:a9:
9b:54:49:be:94:dc:7a:f9:77:bf:70:c1:cf:ed:38:7f:5c:df:
14:74:b0:1b:9a:ca:a4:2c:96:c2:05:07:c6:e5:03:8d:c2:5b:
02:23:3b:1e:6b:31:25:c7:04:13:38:90:a4:a8:fd:48:de:64:
d3:05:77:e2:99:99:fe:18:b8:a0:56:c0:e5:1f:ac:2c:77:4f:
4d:ff:84:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWgdkQ8JvvsNynSNgrh0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjU3MWI2OWFmODU2NTBhZmZlZGNlZmU1N2QyYTczZmQ2
ZTZjYTkwHhcNMjYwMzAyMDcwMTI0WhcNMjYwMzAzMDcwMTI0WjAzMTEwLwYDVQQD
Eyg4NzIxMTUwMDQ5NWZhNGI4MWM2YjQ0NGZjOTM3MzY1N2RlNTgwMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxRNle+mDjRPrLd4IwaSC9xS4/JO
JD7UJCvc8rC7K58lk9g1SisIZaqbaDOlxmi7fZdA6R9GdGeNwQ3n8sK3EjUK6qV7
uyKTQKoVKK2J0uLlDFMUaQfQRvHot++Ml8/HDVnQogPkQPcYh7i1u1Yk2ZA23/lI
YkiE2rstgjYw94dzjEV6wE4jWA+91lq74yaRWwmXPs0eRTXhj2MAsnTqG6UFTvh7
v18leJcUO8WUnNJu3DygROQUJUl1xQIoDMmpy0ZsnmiXWh9D4u6AxNeXp3IizXus
0vkk19gMVqA6X/1mYNZKL3kqxg5AmoLi/ljqKuVdfI8mBl6Feg8AtE5nFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIchFQBJX6S4HGtET8k3NlfeWAIGMB8GA1UdIwQY
MBaAFJq1cbaa+FZQr/7c7+V9KnP9bmypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAt
MzcyNDUzNWVjYzFhLzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAtMzcyNDUzNWVjYzFh
LzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdtMLoXL
nnDObpZ7lbzal4yAeWe/MwGEsIrehMHYHDPPbPup/dD9FXjKWFe1GHE9xhIh92nO
ayQEApc9VCgQ91oVZHUNUmYED/4ncvr7p1/opGBP4mKMgnX2ws7K+Zl0luiOXDyX
dqJhxa1ihd+zp4UL0PD2Jal7VHy3VRbKB8Qq+B34tpNaNeeLP8ztm3OJkv/KtbL1
rLHB9v9HI/5Y4eLB6Kd+EBxOQ1pscT/zZEZFewOpm1RJvpTcevl3v3DBz+04f1zf
FHSwG5rKpCyWwgUHxuUDjcJbAiM7HmsxJccEEziQpKj9SN5k0wV34pmZ/hi4oFbA
5R+sLHdPTf+E4g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:08 2026 by rpki-client