
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier: qVJ7fUbuFFVbTl/JutTLBva3nXH6GmscYBF7skN/g2I=
Subject key identifier: CE:EC:77:79:30:FF:3B:BA:3B:6A:2F:56:D8:DF:66:16:E9:82:D8:99
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial: 019CAB6ACEE96336D2D0291EAB1814D7692A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: YaXZ2gOvi5V4RstkVmie6XYho2hc9p/xF1sCLcCE+2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ce:e9:63:36:d2:d0:29:1e:ab:18:14:d7:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=ceec777930ff3bba3b6a2f56d8df6616e982d899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:b7:0f:6d:b6:0e:f1:b4:14:f7:32:24:c0:
09:b7:8b:ac:07:71:66:e5:5b:11:4a:d8:ec:86:17:
7d:f1:b0:43:da:bf:99:f4:54:6b:a3:b7:c1:ad:a3:
da:a8:8b:44:c6:a0:de:9d:b3:e1:69:dc:36:31:df:
bd:06:fb:47:c0:84:ed:51:36:7a:ec:56:74:dd:c9:
85:eb:fa:07:68:f5:6c:7a:8e:97:d1:18:8a:f9:80:
6c:c5:09:6f:f5:14:9a:36:9b:5f:97:68:aa:1f:57:
dc:cb:42:a1:56:34:21:70:0e:89:b0:22:ce:60:cd:
a5:63:59:d3:64:56:0a:21:9f:3d:93:2f:3e:31:96:
96:fd:4b:f2:f7:51:04:78:9a:8e:8e:54:df:28:32:
92:3e:cb:a1:ea:9d:22:9c:22:13:72:09:9f:5d:78:
8c:4a:ec:59:41:d7:35:0b:2c:32:49:ee:64:94:d8:
7a:b2:7e:e4:b6:b5:2e:03:30:b5:53:db:e3:02:7c:
99:2e:b8:f1:79:19:9e:f6:34:eb:7d:16:ef:cc:ec:
90:e3:47:b8:f7:c2:2a:8b:8a:85:81:81:f6:ab:ef:
53:6a:ea:99:43:a1:91:02:19:83:26:c3:65:cc:b8:
3a:1b:f9:05:6f:ef:36:3d:c7:ca:64:20:1e:eb:4a:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:77:79:30:FF:3B:BA:3B:6A:2F:56:D8:DF:66:16:E9:82:D8:99
X509v3 Authority Key Identifier:
keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:48:62:da:ee:3d:71:43:02:77:ee:39:4d:6c:ee:a4:ee:92:
cd:1a:da:4f:3d:05:63:31:5f:06:57:c5:21:a8:3e:24:b8:81:
7b:35:c9:66:74:68:8e:7b:58:01:d7:d5:56:94:58:5d:4e:1c:
bd:bd:91:25:de:e4:26:40:a4:bd:6a:27:c3:b1:51:3d:aa:60:
21:6c:86:62:03:6f:2a:09:73:e5:73:9d:3c:c8:d9:5a:dd:3d:
8d:6b:c9:0e:84:cc:3e:23:78:4b:0c:a3:fc:39:29:ea:66:6b:
ed:bb:2d:1a:68:81:3f:d3:f7:1f:81:41:a8:3e:54:bd:95:b7:
e8:e2:74:6d:43:72:31:e8:86:1b:f7:00:7b:ef:9d:8f:25:62:
be:6f:3e:3c:ad:3d:22:01:49:eb:c4:a4:41:cd:72:9f:8b:10:
93:5f:58:c1:63:69:f8:9e:fd:81:66:9a:16:a5:56:f6:30:87:
4c:80:7f:6a:37:ea:af:f1:0c:50:25:4e:05:79:54:5a:82:7c:
9f:ea:c7:0c:d8:d2:b7:e4:07:12:b7:50:6a:e5:de:19:53:63:
b8:3b:f5:3d:bb:6f:6d:f4:1c:40:a6:13:90:2d:82:20:84:7f:
3b:78:c3:77:31:40:e1:9a:04:5d:8c:eb:90:83:60:7d:5e:2e:
e6:df:a6:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyras7pYzbS0CkeqxgU12kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NGIzYWI5OWY4NjQ0YWNkNWU2OWE5YTVmMzg1NDZjZGNj
NmU5NzQwHhcNMjYwMzAxMjIwMDI5WhcNMjYwMzAyMjIwMDI5WjAzMTEwLwYDVQQD
EyhjZWVjNzc3OTMwZmYzYmJhM2I2YTJmNTZkOGRmNjYxNmU5ODJkODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV+3D222DvG0FPcyJMAJt4usB3Fm
5VsRStjshhd98bBD2r+Z9FRro7fBraPaqItExqDenbPhadw2Md+9BvtHwITtUTZ6
7FZ03cmF6/oHaPVseo6X0RiK+YBsxQlv9RSaNptfl2iqH1fcy0KhVjQhcA6JsCLO
YM2lY1nTZFYKIZ89ky8+MZaW/Uvy91EEeJqOjlTfKDKSPsuh6p0inCITcgmfXXiM
SuxZQdc1CywySe5klNh6sn7ktrUuAzC1U9vjAnyZLrjxeRme9jTrfRbvzOyQ40e4
98Iqi4qFgYH2q+9TauqZQ6GRAhmDJsNlzLg6G/kFb+82PcfKZCAe60q0twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7sd3kw/zu6O2ovVtjfZhbpgtiZMB8GA1UdIwQY
MBaAFERLOrmfhkSs1eaaml84VGzcxul0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMt
ZDkxNGJiNzllZWRjLzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMtZDkxNGJiNzllZWRj
LzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEhi2u49
cUMCd+45TWzupO6SzRraTz0FYzFfBlfFIag+JLiBezXJZnRojntYAdfVVpRYXU4c
vb2RJd7kJkCkvWonw7FRPapgIWyGYgNvKglz5XOdPMjZWt09jWvJDoTMPiN4Swyj
/Dkp6mZr7bstGmiBP9P3H4FBqD5UvZW36OJ0bUNyMeiGG/cAe++djyVivm8+PK09
IgFJ68SkQc1yn4sQk19YwWNp+J79gWaaFqVW9jCHTIB/ajfqr/EMUCVOBXlUWoJ8
n+rHDNjSt+QHErdQauXeGVNjuDv1PbtvbfQcQKYTkC2CIIR/O3jDdzFA4ZoEXYzr
kINgfV4u5t+mpw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:01 2026 by rpki-client