Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: +1J6dc1orBNp+UkpCRr7ASBPgkrgOW+8Vf7k5wHr+TQ=
Subject key identifier: 90:93:16:5E:8E:F9:0A:0C:29:90:86:5B:D5:FD:E8:97:E1:6F:6B:4F
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 019CABD9FB304680071866BF93F71FB9C44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 15B3
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: koCRa+v/lBDoTs6hUkkaA4xlK8o1C7jHedJ+SEcYL8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fb:30:46:80:07:18:66:bf:93:f7:1f:b9:c4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=9093165e8ef90a0c2990865bd5fde897e16f6b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:82:00:e1:7d:7b:94:1e:10:63:30:54:55:
4e:b7:05:b9:41:ed:64:3f:d0:b0:5c:7a:01:db:bb:
25:a0:b3:24:bb:30:aa:99:e8:62:00:d8:7f:3b:59:
e4:e2:fd:92:61:1f:03:73:c0:60:77:cf:f8:35:05:
3d:aa:0f:68:b2:20:b1:c3:e9:e0:0c:07:72:1b:d0:
90:91:0f:75:5f:0e:94:af:08:4e:c7:7c:da:3a:27:
92:8b:46:86:4e:be:88:b3:8e:66:7f:cd:6a:86:08:
e2:2f:10:f4:84:a7:36:13:79:87:30:22:bc:45:35:
23:01:2b:28:08:ba:f2:8e:5a:f6:0f:ac:fd:e9:8a:
fc:6a:2c:9f:a6:f6:79:df:84:ea:e6:8a:fc:fb:47:
57:07:2e:6c:1f:57:14:7c:64:06:28:94:08:3a:18:
cb:1b:55:92:b1:16:4d:04:1f:26:21:b3:fd:ca:67:
b1:89:59:ab:ee:04:3f:09:9e:f1:25:6d:54:5b:b0:
d1:62:1d:e8:4d:6a:93:96:e3:85:a7:00:8a:78:ca:
29:3c:a7:c4:99:a7:e8:9c:3d:5d:d0:d7:ae:7f:85:
0a:48:ad:cf:19:27:b3:d0:44:83:94:6b:72:fc:e5:
2f:16:e3:3b:d4:1d:ca:4f:90:dc:d1:a1:86:18:fa:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:16:5E:8E:F9:0A:0C:29:90:86:5B:D5:FD:E8:97:E1:6F:6B:4F
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:04:20:b7:d1:13:c0:4c:58:69:d0:d7:8d:af:e2:6b:ac:88:
ff:23:cb:c7:6b:65:94:e8:59:d2:8d:61:fb:22:11:81:dc:3b:
66:6b:22:d3:3d:4c:36:c0:80:ee:a9:3f:28:2c:96:60:98:5d:
dc:3e:bd:06:6b:34:ce:da:63:82:c2:bc:6e:9d:c1:e9:b4:e9:
c7:28:05:07:c2:02:de:00:69:e3:8d:30:dc:67:7f:40:59:d7:
2f:81:f6:ff:3f:2f:71:a1:35:20:d7:89:79:a7:2b:1f:de:2e:
67:66:5d:07:29:0f:96:7a:27:68:2e:18:c8:bf:9d:56:12:c3:
92:c6:70:6d:f0:32:0a:e4:ae:cc:ce:cb:6a:e0:ea:26:a9:db:
dc:d4:b6:4e:75:e1:61:6b:8c:ff:da:98:98:4d:aa:02:f0:07:
14:a0:25:06:61:1c:b2:8b:aa:72:72:ba:a8:9d:be:63:37:21:
ca:a6:6f:f3:e8:7d:ed:e2:48:13:e9:36:c1:3e:b4:ee:cb:1d:
29:66:80:6e:94:82:ce:48:46:a6:23:dd:3f:59:3b:a1:74:bc:
1a:32:f2:1b:bc:cc:f0:da:29:9c:84:4d:8b:59:8a:77:1e:94:
6e:ed:8b:2f:06:89:e1:9f:1b:6b:99:8b:0f:95:97:de:5e:6c:
1e:47:32:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2fswRoAHGGa/k/cfucRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzBjNWJlNzdlZjk5Y2E0YTdlOTFkZmZkNThlNmE3OTg3
NDNjZmEwHhcNMjYwMzAyMDAwMTU1WhcNMjYwMzAzMDAwMTU1WjAzMTEwLwYDVQQD
Eyg5MDkzMTY1ZThlZjkwYTBjMjk5MDg2NWJkNWZkZTg5N2UxNmY2YjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLGCAOF9e5QeEGMwVFVOtwW5Qe1k
P9CwXHoB27sloLMkuzCqmehiANh/O1nk4v2SYR8Dc8Bgd8/4NQU9qg9osiCxw+ng
DAdyG9CQkQ91Xw6UrwhOx3zaOieSi0aGTr6Is45mf81qhgjiLxD0hKc2E3mHMCK8
RTUjASsoCLryjlr2D6z96Yr8aiyfpvZ534Tq5or8+0dXBy5sH1cUfGQGKJQIOhjL
G1WSsRZNBB8mIbP9ymexiVmr7gQ/CZ7xJW1UW7DRYh3oTWqTluOFpwCKeMopPKfE
mafonD1d0Neuf4UKSK3PGSez0ESDlGty/OUvFuM71B3KT5Dc0aGGGPq0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCTFl6O+QoMKZCGW9X96Jfhb2tPMB8GA1UdIwQY
MBaAFJvAxb5375nKSn6R3/1Y5qeYdDz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThERnZuZnZtY3BLZnBIZl9Wam1wNWgwUFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84OWQ5ZjAtOWJiYy00ZWVkLWIwMDMt
Y2VkMjA2NTExOTI3LzEvbThERnZuZnZtY3BLZnBIZl9Wam1wNWgwUFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84OWQ5ZjAtOWJiYy00ZWVkLWIwMDMtY2VkMjA2NTExOTI3
LzEvbThERnZuZnZtY3BLZnBIZl9Wam1wNWgwUFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAQgt9ET
wExYadDXja/ia6yI/yPLx2tllOhZ0o1h+yIRgdw7Zmsi0z1MNsCA7qk/KCyWYJhd
3D69Bms0ztpjgsK8bp3B6bTpxygFB8IC3gBp440w3Gd/QFnXL4H2/z8vcaE1INeJ
eacrH94uZ2ZdBykPlnonaC4YyL+dVhLDksZwbfAyCuSuzM7LauDqJqnb3NS2TnXh
YWuM/9qYmE2qAvAHFKAlBmEcsouqcnK6qJ2+YzchyqZv8+h97eJIE+k2wT607ssd
KWaAbpSCzkhGpiPdP1k7oXS8GjLyG7zM8NopnIRNi1mKdx6Ubu2LLwaJ4Z8ba5mL
D5WX3l5sHkcyVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:17 2026 by rpki-client