Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier: o+myXmMPCMSmobQcTG12fuPX2jPpzklu0tUINpNtrqQ=
Subject key identifier: 35:01:7E:B5:DF:42:47:CD:6B:7E:D9:93:D4:F4:CE:A5:D1:FF:4E:AE
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial: 019CAB344C4A81866FCD0AAAB648BB56CAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number: 0F8E
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: 1eghQs2JK8iF3Iu4/Xtp2eqKTIrp7vSRURNIqBIH1jw=)
2: vDD2m5C7Pq8JC2jJeptUPHTPiW4.roa (hash: IslrtVbkyC6BHr/5GuZpnn/vnO+GSJxpxZntKhzxnaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4c:4a:81:86:6f:cd:0a:aa:b6:48:bb:56:ca:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=35017eb5df4247cd6b7ed993d4f4cea5d1ff4eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:e0:5b:d9:dd:7e:db:18:ff:cf:98:ec:85:
1a:94:ed:cf:3b:b0:c3:13:9a:84:24:f1:b4:c7:0b:
1c:5e:64:84:c3:70:db:da:3d:e6:16:c5:56:f7:6e:
cc:24:5d:63:bc:3d:9a:fd:10:fc:f8:7f:3f:d2:0c:
fe:d2:ea:8c:9f:f3:bf:d3:b4:70:7e:3f:bb:b9:26:
7a:36:39:9d:78:cf:80:96:da:2a:05:bf:3f:09:cf:
96:cd:a7:51:b3:b9:70:a7:f1:4e:07:46:ec:05:8d:
8c:9f:f5:97:70:2d:62:50:35:d2:fe:75:fb:bf:27:
1c:28:a0:b3:b7:fd:1e:25:9b:be:a8:b8:b3:41:fc:
ca:78:2f:4a:45:24:5d:46:f4:2c:89:82:22:1e:20:
cc:87:e0:fc:9f:a8:74:41:43:57:6a:12:96:8d:a1:
0d:e9:3f:86:55:64:55:18:56:70:4f:c6:58:52:d0:
5e:ac:d4:25:2b:7b:4a:9c:23:d5:9f:54:f5:f2:4d:
e8:95:14:67:27:79:26:6b:49:5e:97:82:46:ba:85:
e6:a5:46:87:d9:04:8c:fa:89:23:ed:0f:e7:98:83:
50:54:79:ac:1a:11:9c:7d:14:ce:fc:de:22:ef:8c:
9b:d8:5d:f1:1d:c5:9c:60:de:80:d7:08:e0:b6:ef:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:01:7E:B5:DF:42:47:CD:6B:7E:D9:93:D4:F4:CE:A5:D1:FF:4E:AE
X509v3 Authority Key Identifier:
keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:64:e9:e2:52:49:70:51:14:01:1a:42:30:3a:8a:ee:3c:07:
b9:a1:93:ac:6f:38:62:7b:71:fa:97:05:dd:58:a0:25:66:56:
f4:50:6c:cd:e5:93:ff:f5:d9:1f:ae:48:69:c9:17:38:a6:e9:
75:9c:d0:28:fc:24:b1:0c:5a:82:17:08:90:38:f7:f3:a6:e9:
0d:d8:ac:90:66:87:11:67:e0:08:81:1b:92:f4:28:9f:c1:69:
91:cb:13:89:25:f3:73:70:9e:c7:0f:59:7f:40:9a:a0:78:43:
e2:92:68:5a:9b:98:71:cf:42:c1:86:dc:b6:8b:62:ce:be:50:
0d:80:a0:03:06:b2:7c:39:52:13:e0:b6:85:66:6d:69:67:04:
7c:c6:d4:b6:25:0e:28:67:81:8d:7e:8e:00:62:3c:09:f2:4f:
09:fa:3f:52:82:64:25:82:5b:54:4f:0b:86:90:fd:14:4c:72:
c0:01:03:14:4d:4a:ca:bd:b7:91:a1:ff:f4:ca:ec:d8:a8:88:
ee:73:2b:39:f2:cc:68:9e:00:9d:7d:e2:34:5f:c6:e7:da:d9:
71:e8:9e:70:63:c9:9d:ce:85:a8:18:04:64:ff:5a:40:f8:e0:
89:4d:5d:ee:fd:a0:32:d1:e5:29:46:9a:62:1e:05:3f:d4:b0:
65:c3:7e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:21 2026 by rpki-client