Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: PdpmzzZ9h4GowK8czXwSTU/GGBQ9gJpln2zHQACE2hg=
Subject key identifier: 9D:D8:5F:13:E1:5D:89:80:D4:CD:8E:87:76:B2:E2:E5:E5:30:99:19
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 019CAB6B58AFDF0F13CA9A884A22C03A7B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0B1F
Signing time: Sun 01 Mar 2026 22:01:04 +0000
Manifest this update: Sun 01 Mar 2026 22:01:04 +0000
Manifest next update: Mon 02 Mar 2026 22:01:04 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: 4i63VLjMfCHImxt0j8jDNdWFqNmohxlrmLeotY8fGxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:58:af:df:0f:13:ca:9a:88:4a:22:c0:3a:7b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Mar 1 22:01:04 2026 GMT
Not After : Mar 2 22:01:04 2026 GMT
Subject: CN=9dd85f13e15d8980d4cd8e8776b2e2e5e5309919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:87:23:97:58:74:14:79:ee:11:b9:0f:a4:
6b:64:c9:e5:75:69:b1:fb:05:7f:57:e1:5c:bb:ca:
27:13:27:91:6a:6e:17:23:21:fd:3a:45:61:d5:6e:
cd:30:79:80:a8:57:69:58:6b:8e:20:d5:4e:bc:3a:
3b:fa:c8:46:de:cb:35:49:6e:7a:ea:e4:14:ba:3f:
92:cb:6f:98:b8:c3:a5:2f:39:5f:0c:45:0e:8a:bc:
9c:25:1a:74:4c:57:8f:af:52:5d:8f:cf:7e:a8:97:
51:55:e4:11:b6:a4:75:a3:90:1d:74:5c:d5:93:d0:
2f:fb:66:56:84:ec:8c:ff:83:06:cb:8d:3c:eb:90:
5e:7a:f2:2d:d3:3e:66:ca:6f:ae:41:bb:96:ff:ae:
f2:a7:c4:77:1d:75:3d:5a:b1:58:79:33:4b:1a:b6:
18:81:7d:87:aa:45:9b:8b:1b:ab:60:62:9a:cd:3a:
f1:02:82:cc:90:06:6f:e1:67:93:ee:bc:84:42:16:
30:54:6d:6b:e4:24:d1:90:d2:2d:66:1a:4a:4c:9c:
16:d9:5d:b9:be:f6:88:09:96:68:fc:1e:ee:14:67:
b5:67:07:ac:37:81:ed:f9:db:04:33:81:e7:5d:63:
0f:ca:68:1b:81:5c:56:67:3e:5d:c0:df:0a:31:b8:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:5F:13:E1:5D:89:80:D4:CD:8E:87:76:B2:E2:E5:E5:30:99:19
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:48:6b:f6:78:df:e9:fa:11:3d:24:a2:36:23:37:70:68:52:
48:c2:1b:ec:4e:e5:b7:80:e8:1e:8e:53:b0:81:81:fd:78:55:
d8:06:53:60:69:c1:6c:39:17:75:ea:3b:80:f3:19:35:49:b6:
1e:cd:20:91:50:4b:a4:3e:71:22:ea:b0:5d:66:bc:43:f0:f1:
ee:fe:0a:bf:72:58:22:1c:63:65:02:a4:b9:23:ea:ca:06:f3:
8e:17:10:68:47:2f:c3:e1:25:d2:02:cf:df:50:35:71:29:e8:
77:3d:6d:f9:05:c5:68:cc:72:60:d3:93:72:a2:a1:cc:fc:d0:
c6:ee:f1:b9:ee:f2:01:67:d6:b8:5e:af:bf:fa:17:28:cf:46:
1b:ae:a6:0d:45:30:b3:71:90:e3:7b:60:f1:fe:0e:8a:b9:1e:
f2:9e:d0:77:ad:e5:c7:0e:45:6a:18:26:3d:52:d9:30:e7:e0:
e4:f0:9b:8d:5b:c6:9b:be:65:a7:ae:d3:73:03:cc:2d:f3:82:
fa:57:a3:06:8e:28:bd:47:79:80:31:bd:2f:50:78:1c:28:54:
c1:73:00:1a:2f:2e:14:85:a5:20:bd:6d:35:4c:6f:18:2c:a4:
35:df:1b:4d:26:53:9a:19:67:bd:5c:62:e8:48:ac:05:e8:cb:
7e:bd:ae:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra1iv3w8TypqISiLAOntOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjYxMzBkOTlhZjkzMjA3NzVhZDYwYjBmNGM5ODllM2U1
OTc3YzkwHhcNMjYwMzAxMjIwMTA0WhcNMjYwMzAyMjIwMTA0WjAzMTEwLwYDVQQD
Eyg5ZGQ4NWYxM2UxNWQ4OTgwZDRjZDhlODc3NmIyZTJlNWU1MzA5OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlKHI5dYdBR57hG5D6RrZMnldWmx
+wV/V+Fcu8onEyeRam4XIyH9OkVh1W7NMHmAqFdpWGuOINVOvDo7+shG3ss1SW56
6uQUuj+Sy2+YuMOlLzlfDEUOirycJRp0TFePr1Jdj89+qJdRVeQRtqR1o5AddFzV
k9Av+2ZWhOyM/4MGy40865BeevIt0z5mym+uQbuW/67yp8R3HXU9WrFYeTNLGrYY
gX2HqkWbixurYGKazTrxAoLMkAZv4WeT7ryEQhYwVG1r5CTRkNItZhpKTJwW2V25
vvaICZZo/B7uFGe1ZwesN4Ht+dsEM4HnXWMPymgbgVxWZz5dwN8KMbg+bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3YXxPhXYmA1M2Oh3ay4uXlMJkZMB8GA1UdIwQY
MBaAFBX2Ew2Zr5Mgd1rWCw9MmJ4+WXfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEt
MWY4Njc2ZjRjMTdiLzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEtMWY4Njc2ZjRjMTdi
LzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUhr9njf
6foRPSSiNiM3cGhSSMIb7E7lt4DoHo5TsIGB/XhV2AZTYGnBbDkXdeo7gPMZNUm2
Hs0gkVBLpD5xIuqwXWa8Q/Dx7v4Kv3JYIhxjZQKkuSPqygbzjhcQaEcvw+El0gLP
31A1cSnodz1t+QXFaMxyYNOTcqKhzPzQxu7xue7yAWfWuF6vv/oXKM9GG66mDUUw
s3GQ43tg8f4Oirke8p7Qd63lxw5FahgmPVLZMOfg5PCbjVvGm75lp67TcwPMLfOC
+lejBo4ovUd5gDG9L1B4HChUwXMAGi8uFIWlIL1tNUxvGCykNd8bTSZTmhlnvVxi
6EisBejLfr2umQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:40 2026 by rpki-client