Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: fwGQ8VucJh+DjYGtJeTBHU6rSET4LZMhpzPzNgIWoV0=
Subject key identifier: 82:BE:4A:54:87:80:A0:F8:39:C0:B5:09:21:83:65:2B:8F:36:E1:2E
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 019CA945AEAD902D095CF535315A5DEF1679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 15D2
Signing time: Sun 01 Mar 2026 12:00:42 +0000
Manifest this update: Sun 01 Mar 2026 12:00:42 +0000
Manifest next update: Mon 02 Mar 2026 12:00:42 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: 1Dmbcuh/Kloo4vzpVymoTjmzUylTHdpnOb8loPr0WXg=)
2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ae:ad:90:2d:09:5c:f5:35:31:5a:5d:ef:16:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Mar 1 12:00:42 2026 GMT
Not After : Mar 2 12:00:42 2026 GMT
Subject: CN=82be4a548780a0f839c0b5092183652b8f36e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:89:97:de:0a:90:c8:ce:8a:87:41:7d:23:
f2:e2:67:54:81:83:f9:e1:34:ad:2d:b2:31:66:ab:
73:82:7a:e3:22:4d:7b:49:97:58:1f:00:53:45:0f:
96:8b:c0:80:71:0f:80:53:f8:7c:ec:31:7b:8f:62:
43:4b:80:5f:96:83:cc:27:87:ec:b0:75:24:c3:eb:
ac:2b:de:0a:5b:b7:60:d0:26:52:de:e8:b8:b9:b6:
23:85:84:24:f8:2a:3a:17:81:f7:4a:49:c8:cd:05:
9c:24:da:dd:3e:17:2a:10:af:8a:f8:e8:60:62:74:
4a:2d:50:53:e1:93:4d:63:66:46:f8:33:a2:00:a4:
9f:14:4e:60:9d:65:ca:42:19:5b:79:58:12:1d:ae:
6a:55:7f:db:c0:f6:27:93:e9:ff:5d:aa:47:00:0b:
6e:57:a7:9c:34:1a:33:ac:6e:85:6b:58:7e:c2:b3:
69:0b:c0:07:37:a3:8e:1a:ee:ba:34:7e:9f:97:92:
a2:5d:69:1c:31:46:51:b9:c7:85:ef:4b:74:52:1d:
0c:0e:51:5e:c1:08:7c:48:39:60:ab:1a:10:53:34:
3c:39:e1:77:00:52:5f:41:a3:5f:4e:bc:69:9b:5f:
fb:90:85:58:dc:01:c6:78:37:98:f3:73:bf:2d:64:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BE:4A:54:87:80:A0:F8:39:C0:B5:09:21:83:65:2B:8F:36:E1:2E
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:36:aa:78:1d:5e:bc:9f:8c:90:58:28:29:0d:3c:a9:87:
f7:a7:6e:b4:4b:c0:80:7f:f1:96:47:13:f2:97:98:03:3e:cf:
13:00:f5:30:03:8b:62:8e:2a:62:fb:92:80:83:60:c6:11:0f:
11:94:93:66:7a:48:aa:4f:4d:e2:4e:1e:47:86:18:3c:9f:e7:
cd:3c:d5:57:78:fc:c0:10:e8:b3:53:38:ce:a3:9c:94:f4:dc:
c7:8c:8f:0b:4b:bb:52:76:a1:23:cf:f0:7c:c8:a9:50:6a:d9:
e7:95:25:40:eb:8d:ef:a5:54:70:32:43:9a:d6:5e:b2:80:da:
b5:01:d8:d8:0c:b4:af:4f:cd:87:9d:09:10:c6:3a:de:c9:85:
0a:77:ce:ee:d6:3a:ee:78:30:53:20:4f:9e:64:df:d3:46:8d:
63:a0:1a:1b:48:8c:c5:1b:8a:b2:16:6f:c7:19:ee:6c:79:bf:
be:ea:78:4c:db:dc:f5:1c:38:e0:1e:a8:b7:3f:56:67:d4:11:
4d:e6:ba:aa:73:c8:cd:db:aa:7c:5a:cc:3c:2d:18:13:75:b1:
fd:fd:8a:72:f8:a2:02:db:57:26:4a:c6:10:97:cb:35:99:83:
f4:2c:86:51:1b:eb:20:d5:c8:3f:10:0d:4a:d7:e7:e0:ce:a2:
66:bc:2b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRa6tkC0JXPU1MVpd7xZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3
N2ZkMTkwHhcNMjYwMzAxMTIwMDQyWhcNMjYwMzAyMTIwMDQyWjAzMTEwLwYDVQQD
Eyg4MmJlNGE1NDg3ODBhMGY4MzljMGI1MDkyMTgzNjUyYjhmMzZlMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHeJl94KkMjOiodBfSPy4mdUgYP5
4TStLbIxZqtzgnrjIk17SZdYHwBTRQ+Wi8CAcQ+AU/h87DF7j2JDS4BfloPMJ4fs
sHUkw+usK94KW7dg0CZS3ui4ubYjhYQk+Co6F4H3SknIzQWcJNrdPhcqEK+K+Ohg
YnRKLVBT4ZNNY2ZG+DOiAKSfFE5gnWXKQhlbeVgSHa5qVX/bwPYnk+n/XapHAAtu
V6ecNBozrG6Fa1h+wrNpC8AHN6OOGu66NH6fl5KiXWkcMUZRuceF70t0Uh0MDlFe
wQh8SDlgqxoQUzQ8OeF3AFJfQaNfTrxpm1/7kIVY3AHGeDeY83O/LWRUdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIK+SlSHgKD4OcC1CSGDZSuPNuEuMB8GA1UdIwQY
MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt
NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl
LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACf02qngd
XryfjJBYKCkNPKmH96dutEvAgH/xlkcT8peYAz7PEwD1MAOLYo4qYvuSgINgxhEP
EZSTZnpIqk9N4k4eR4YYPJ/nzTzVV3j8wBDos1M4zqOclPTcx4yPC0u7UnahI8/w
fMipUGrZ55UlQOuN76VUcDJDmtZesoDatQHY2Ay0r0/Nh50JEMY63smFCnfO7tY6
7ngwUyBPnmTf00aNY6AaG0iMxRuKshZvxxnubHm/vup4TNvc9Rw44B6otz9WZ9QR
Tea6qnPIzduqfFrMPC0YE3Wx/f2KcviiAttXJkrGEJfLNZmD9CyGURvrINXIPxAN
Stfn4M6iZrwrAw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:30 2026 by rpki-client