Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json)
Hash identifier: m2NsymzmPcjMVmor94ZjJQ+q2msJIoHdO2ml1Ql2d90=
Subject key identifier: 15:E0:77:27:1B:98:31:7F:85:2B:41:9E:9F:47:55:DB:6A:8E:CF:37
Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Certificate serial: 019CAF47F93F697F8FC10E7DFCC2D302260D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
Manifest number: 0C3F
Signing time: Mon 02 Mar 2026 16:00:55 +0000
Manifest this update: Mon 02 Mar 2026 16:00:55 +0000
Manifest next update: Tue 03 Mar 2026 16:00:55 +0000
Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: PaHTxYtH7fTTGDuKRLZ0yuCCYkqRBllxbrfrv/BGSUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:f9:3f:69:7f:8f:c1:0e:7d:fc:c2:d3:02:26:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Validity
Not Before: Mar 2 16:00:55 2026 GMT
Not After : Mar 3 16:00:55 2026 GMT
Subject: CN=15e077271b98317f852b419e9f4755db6a8ecf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:9b:61:eb:7e:42:58:e7:5f:2f:d3:eb:8f:
8f:27:42:62:e9:ea:04:28:fc:3e:d4:1f:79:9f:15:
b6:20:73:d3:68:4e:14:09:7a:bd:70:03:e9:81:20:
ba:c4:0f:e8:7f:37:46:8c:33:57:a3:4b:a8:27:b0:
64:1a:71:8e:c1:c4:1d:90:b7:a2:ff:1a:62:ae:57:
64:1c:1f:b2:a5:62:a7:34:30:ee:06:19:e4:0f:06:
dc:4e:ea:de:4e:b6:ed:94:e0:cd:6e:74:9e:af:93:
9a:7c:41:25:79:ae:60:17:58:df:a5:85:dc:c3:43:
c0:d0:da:7d:37:ef:13:af:a0:8e:fd:40:ff:93:85:
07:a3:b2:95:47:e9:83:1c:5f:bf:84:5f:c6:65:04:
9f:89:34:1a:f7:3c:9a:3b:13:62:3c:b1:c3:7a:bc:
fe:14:9b:52:3b:f6:a8:da:00:77:d4:bc:b0:7e:31:
7b:20:29:1c:03:ad:39:ef:6f:f6:02:f4:18:b4:5f:
77:bf:55:37:9d:b4:34:c0:e4:97:44:69:ba:9c:28:
a1:d6:8c:a5:b0:db:39:fc:d6:48:f4:3e:a0:ed:3d:
22:7b:97:8a:52:92:73:75:0b:35:24:c2:1f:b3:c7:
11:ca:f6:79:f9:84:d4:da:7e:1d:35:c4:e3:4a:32:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:77:27:1B:98:31:7F:85:2B:41:9E:9F:47:55:DB:6A:8E:CF:37
X509v3 Authority Key Identifier:
keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:44:b1:2a:25:ea:ac:0b:29:9b:1e:08:f8:23:2b:ca:25:4a:
f8:48:50:26:ad:8a:de:40:4c:c8:94:3d:30:9d:e8:e2:f5:6d:
9d:96:1e:cf:b6:81:cd:97:bf:b2:38:e2:b5:d9:3d:1c:ed:89:
c7:d4:e6:f2:a6:3d:2c:d0:46:49:ba:d9:8d:ee:45:26:de:2b:
8b:51:e7:e6:7a:12:9b:ff:94:f0:ab:95:ee:45:1b:e7:9f:ce:
33:50:dd:1a:21:d7:ff:c0:0a:81:54:9c:40:0e:97:2a:c3:8e:
aa:34:87:9f:b4:20:4d:92:cc:63:06:5c:d0:7d:f0:7d:56:e5:
84:cf:83:d8:3a:b6:00:7e:ba:69:d3:2e:c8:71:e3:79:a7:11:
0a:ae:74:0b:a8:47:a4:da:d8:d8:48:ec:e3:4b:3f:0a:ee:43:
40:e4:21:3d:4a:48:d5:0c:14:2e:25:50:c1:ed:f6:eb:26:e9:
56:9a:12:37:f9:45:a5:2a:01:6b:ee:0b:7f:08:e1:d2:d2:31:
9a:cd:58:f8:04:dc:5e:90:6b:4d:77:7a:19:bc:9e:e8:c2:7c:
44:6b:30:28:53:6c:6b:45:96:ef:0f:78:0b:47:1a:d3:d9:d1:
6e:ae:8d:d6:c0:7f:4e:fd:00:e6:42:04:7b:17:b3:98:dc:46:
ba:86:d7:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvR/k/aX+PwQ59/MLTAiYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNWYzNWE2ZThmYjUzOWIxOTU0Y2I0M2E2Y2U3NWU5N2Zh
YWUxNzUwHhcNMjYwMzAyMTYwMDU1WhcNMjYwMzAzMTYwMDU1WjAzMTEwLwYDVQQD
EygxNWUwNzcyNzFiOTgzMTdmODUyYjQxOWU5ZjQ3NTVkYjZhOGVjZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz2bYet+QljnXy/T64+PJ0Ji6eoE
KPw+1B95nxW2IHPTaE4UCXq9cAPpgSC6xA/ofzdGjDNXo0uoJ7BkGnGOwcQdkLei
/xpirldkHB+ypWKnNDDuBhnkDwbcTureTrbtlODNbnSer5OafEElea5gF1jfpYXc
w0PA0Np9N+8Tr6CO/UD/k4UHo7KVR+mDHF+/hF/GZQSfiTQa9zyaOxNiPLHDerz+
FJtSO/ao2gB31LywfjF7ICkcA60572/2AvQYtF93v1U3nbQ0wOSXRGm6nCih1oyl
sNs5/NZI9D6g7T0ie5eKUpJzdQs1JMIfs8cRyvZ5+YTU2n4dNcTjSjKW8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXgdycbmDF/hStBnp9HVdtqjs83MB8GA1UdIwQY
MBaAFK5fNabo+1ObGVTLQ6bOdel/quF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzct
MjA5MWNjYThiYzQ4LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzctMjA5MWNjYThiYzQ4
LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUSxKiXq
rAspmx4I+CMryiVK+EhQJq2K3kBMyJQ9MJ3o4vVtnZYez7aBzZe/sjjitdk9HO2J
x9Tm8qY9LNBGSbrZje5FJt4ri1Hn5noSm/+U8KuV7kUb55/OM1DdGiHX/8AKgVSc
QA6XKsOOqjSHn7QgTZLMYwZc0H3wfVblhM+D2Dq2AH66adMuyHHjeacRCq50C6hH
pNrY2Ejs40s/Cu5DQOQhPUpI1QwULiVQwe326ybpVpoSN/lFpSoBa+4Lfwjh0tIx
ms1Y+ATcXpBrTXd6Gbye6MJ8RGswKFNsa0WW7w94C0ca09nRbq6N1sB/Tv0A5kIE
exezmNxGuobXbg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:42 2026 by rpki-client