Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier: LlSciq+6vF5t2DBe/6kUQG/pZecWQztCmE8J7+BOkhU=
Subject key identifier: 4E:9C:44:A8:38:3C:DC:81:FF:00:9D:57:75:7F:FC:24:52:98:4F:B0
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial: 019CAD59E958A6A5E410E71B7959BC91FAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number: 08F8
Signing time: Mon 02 Mar 2026 07:01:16 +0000
Manifest this update: Mon 02 Mar 2026 07:01:16 +0000
Manifest next update: Tue 03 Mar 2026 07:01:16 +0000
Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: gGShBd6i5jflxC/yS9QRK9qyInQM3nF69pb/RTRqpGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:e9:58:a6:a5:e4:10:e7:1b:79:59:bc:91:fa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Validity
Not Before: Mar 2 07:01:16 2026 GMT
Not After : Mar 3 07:01:16 2026 GMT
Subject: CN=4e9c44a8383cdc81ff009d57757ffc2452984fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:91:c7:e4:cc:37:98:bc:c2:5d:0d:21:bf:
9d:f9:60:25:d2:3b:07:b0:99:8a:65:37:cf:ac:5d:
3b:2b:b4:1a:34:3b:2b:e3:ae:53:4b:6a:40:96:02:
b7:eb:34:6a:46:24:d7:25:d2:20:82:da:d5:c8:10:
f3:5b:22:05:fd:da:b8:0e:dd:67:e2:fe:24:e0:94:
51:32:11:c7:db:c2:3d:9c:04:87:d7:e3:6c:57:3d:
aa:83:e4:78:87:22:78:7d:38:c2:77:97:c3:49:1a:
af:e9:3f:cc:c3:26:f9:5c:a5:1e:e2:2c:b8:ff:43:
84:45:bc:bd:cf:f9:a3:e0:0e:01:90:05:27:96:20:
16:3c:cf:b8:5a:51:2e:e6:e9:9b:d4:8b:76:fe:93:
2b:8b:66:7e:e2:1a:e4:b1:1d:46:90:45:c6:0f:a8:
c0:da:66:1d:63:26:1f:c4:51:37:87:6d:07:5a:9f:
72:c6:0a:f1:fe:38:21:c9:0d:91:25:ba:a2:a0:1b:
78:3e:a0:71:90:42:12:e7:e7:cc:63:14:16:5d:80:
4f:8b:09:ae:f4:6f:87:ac:5f:74:25:5a:ed:34:65:
58:be:d5:03:06:12:2b:0b:56:8a:52:cc:e9:d8:6b:
47:8d:ea:96:83:c6:cb:70:3a:f5:34:84:49:7e:47:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:44:A8:38:3C:DC:81:FF:00:9D:57:75:7F:FC:24:52:98:4F:B0
X509v3 Authority Key Identifier:
keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b3:bd:2a:f3:dc:9f:4e:aa:2c:ad:aa:44:d1:a9:d0:d5:d2:
b3:b5:04:ac:59:8e:8f:39:33:53:64:48:7b:d4:94:96:4f:45:
ee:a3:8f:d1:c0:ab:70:a6:50:e0:d6:7e:76:0a:6c:a5:11:70:
b9:4c:59:c3:27:42:bf:a4:24:78:d3:fa:dc:f1:85:2a:fc:67:
55:b4:68:2b:a9:24:87:21:ef:c2:82:4d:96:a0:a6:ad:21:27:
27:c7:f9:65:ba:71:2a:73:35:82:ed:96:b5:e6:5d:db:bd:78:
3d:24:ab:d2:04:e2:18:f4:46:38:f8:7e:92:75:f3:da:79:d1:
8d:df:9e:ee:36:16:b4:3a:8a:b0:73:71:7a:44:1d:a2:00:42:
2b:27:b1:46:55:fd:20:c3:6e:76:5a:54:fc:47:c3:37:c5:2d:
0d:22:d7:64:d7:d2:67:b6:d3:03:17:a2:8a:c6:2d:8e:26:ef:
ff:c6:77:9d:47:dd:73:af:65:20:37:fb:00:e8:ef:23:4c:4c:
55:1d:16:44:c0:83:55:84:58:08:7f:31:b9:e7:8b:50:7a:d2:
73:8c:9e:f6:5b:67:88:80:c1:82:52:a7:41:52:bd:c2:f1:45:
32:37:4b:02:cc:35:4f:40:60:52:92:79:ce:c9:0b:d3:0a:c1:
0c:8e:bd:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWelYpqXkEOcbeVm8kfqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjk2NDlmNmE2ZmI2MmM2ZGNkMGNlOGMwZGYxNjU1YzEy
MzY0MzQwHhcNMjYwMzAyMDcwMTE2WhcNMjYwMzAzMDcwMTE2WjAzMTEwLwYDVQQD
Eyg0ZTljNDRhODM4M2NkYzgxZmYwMDlkNTc3NTdmZmMyNDUyOTg0ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5mRx+TMN5i8wl0NIb+d+WAl0jsH
sJmKZTfPrF07K7QaNDsr465TS2pAlgK36zRqRiTXJdIggtrVyBDzWyIF/dq4Dt1n
4v4k4JRRMhHH28I9nASH1+NsVz2qg+R4hyJ4fTjCd5fDSRqv6T/Mwyb5XKUe4iy4
/0OERby9z/mj4A4BkAUnliAWPM+4WlEu5umb1It2/pMri2Z+4hrksR1GkEXGD6jA
2mYdYyYfxFE3h20HWp9yxgrx/jghyQ2RJbqioBt4PqBxkEIS5+fMYxQWXYBPiwmu
9G+HrF90JVrtNGVYvtUDBhIrC1aKUszp2GtHjeqWg8bLcDr1NIRJfkcKwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6cRKg4PNyB/wCdV3V//CRSmE+wMB8GA1UdIwQY
MBaAFHO5ZJ9qb7Ysbc0M6MDfFlXBI2Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWIt
N2UxMzhkZjYxMDU3LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWItN2UxMzhkZjYxMDU3
LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrO9KvPc
n06qLK2qRNGp0NXSs7UErFmOjzkzU2RIe9SUlk9F7qOP0cCrcKZQ4NZ+dgpspRFw
uUxZwydCv6QkeNP63PGFKvxnVbRoK6kkhyHvwoJNlqCmrSEnJ8f5ZbpxKnM1gu2W
teZd2714PSSr0gTiGPRGOPh+knXz2nnRjd+e7jYWtDqKsHNxekQdogBCKyexRlX9
IMNudlpU/EfDN8UtDSLXZNfSZ7bTAxeiisYtjibv/8Z3nUfdc69lIDf7AOjvI0xM
VR0WRMCDVYRYCH8xueeLUHrSc4ye9ltniIDBglKnQVK9wvFFMjdLAsw1T0BgUpJ5
zskL0wrBDI690w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:55 2026 by rpki-client