Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: Z9+r7RdNM+LYm+MaR5BicIgXsIf9/j12/Z2Nr4CD+iQ=
Subject key identifier: 1E:71:46:5C:10:DF:51:83:B1:7D:96:C4:E1:FC:14:C6:1E:DE:9E:1B
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 019CAB6ACFF21A53962C11A2FB12B1D81A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 17D3
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: imwkbnorVuX57GD3jB8ovND9O4grxGC45xE3nDjHkOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cf:f2:1a:53:96:2c:11:a2:fb:12:b1:d8:1a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=1e71465c10df5183b17d96c4e1fc14c61ede9e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:a4:f9:fc:b7:2c:de:58:75:9a:e2:f5:3a:
0d:7b:ac:40:8b:a9:b4:f0:6e:c4:89:d6:5e:5e:71:
b7:1d:86:c7:15:58:c7:b2:8a:04:33:de:ce:3c:28:
e0:86:67:aa:69:76:b2:e8:ae:e5:bf:7a:4b:4d:6a:
67:66:0b:60:ee:a1:71:2f:26:76:ec:0f:02:22:fa:
be:aa:1f:61:b1:1c:a7:9b:58:8c:ac:f8:6c:04:fe:
f0:53:26:57:88:ec:62:3a:2d:5e:04:b0:02:29:de:
23:c1:71:39:ec:9e:2e:fe:a2:c7:69:20:50:ab:e3:
3c:58:81:27:fb:e5:12:0a:a4:a0:a5:b7:26:63:39:
a4:ad:80:5a:2a:e1:ae:2d:99:74:53:71:d1:5b:d7:
6b:45:fd:c9:bf:05:eb:af:31:28:48:bf:84:af:26:
fd:99:28:32:78:08:e0:51:cb:b4:01:33:d8:25:26:
5b:b9:24:e2:d2:74:e2:03:bb:52:c8:eb:c0:ff:35:
ae:99:25:68:8b:85:84:a1:44:a1:75:24:0e:a9:74:
40:f2:a6:66:ce:9d:9b:6a:77:49:ac:95:2d:8e:06:
0a:5e:03:36:3b:f0:c3:8e:10:3c:8a:1f:51:95:6e:
7a:f6:b4:77:c9:90:1a:22:14:9e:6c:21:94:19:a7:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:71:46:5C:10:DF:51:83:B1:7D:96:C4:E1:FC:14:C6:1E:DE:9E:1B
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d3:88:8b:47:b1:19:41:12:31:3b:d7:ef:6c:45:33:73:63:
5d:bb:ec:fd:71:d5:1a:34:7f:2f:fb:e9:cf:46:f4:40:63:b4:
b2:a5:91:5c:85:af:eb:62:47:c8:87:f5:2f:2d:a1:c8:6e:be:
e0:0c:33:b5:95:72:94:19:da:4a:04:fd:93:ec:ec:2a:4f:70:
50:94:99:5f:f8:3c:91:23:aa:b9:b6:3e:44:81:35:cb:66:9d:
b7:c3:3d:b3:4f:1b:2c:25:12:95:c8:8b:d7:dd:63:94:fb:7a:
c5:35:ab:9c:57:80:5e:5d:5f:a3:f2:24:83:e2:ba:43:b2:e5:
20:ba:4c:c4:30:92:09:55:3f:3c:b8:37:ee:18:22:2c:9e:3d:
4f:dc:fc:3b:b0:d6:26:cd:a8:20:a6:10:4a:79:2a:1e:ca:16:
b0:38:6f:c3:58:8c:b8:b2:3b:54:9c:42:61:c5:93:f0:d4:3a:
bc:64:32:2a:76:2a:2c:18:58:cc:4f:ba:7e:26:cb:24:47:dd:
b7:01:dc:21:c2:48:99:92:21:70:b1:0c:bb:7c:4f:fd:6f:cc:
d3:36:44:d1:54:48:71:c8:41:a3:9c:71:d8:2f:33:23:c2:ad:
af:72:06:da:cc:ed:95:31:ed:13:d9:71:17:a1:63:4f:de:77:
19:52:eb:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyras/yGlOWLBGi+xKx2BpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmU5MmJiNjYwMzQwOGFjZGY0NTdiZmVjNTg1YzViOTNk
MzI1ZDkwHhcNMjYwMzAxMjIwMDI5WhcNMjYwMzAyMjIwMDI5WjAzMTEwLwYDVQQD
EygxZTcxNDY1YzEwZGY1MTgzYjE3ZDk2YzRlMWZjMTRjNjFlZGU5ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunek+fy3LN5YdZri9ToNe6xAi6m0
8G7EidZeXnG3HYbHFVjHsooEM97OPCjghmeqaXay6K7lv3pLTWpnZgtg7qFxLyZ2
7A8CIvq+qh9hsRynm1iMrPhsBP7wUyZXiOxiOi1eBLACKd4jwXE57J4u/qLHaSBQ
q+M8WIEn++USCqSgpbcmYzmkrYBaKuGuLZl0U3HRW9drRf3JvwXrrzEoSL+Eryb9
mSgyeAjgUcu0ATPYJSZbuSTi0nTiA7tSyOvA/zWumSVoi4WEoUShdSQOqXRA8qZm
zp2bandJrJUtjgYKXgM2O/DDjhA8ih9RlW569rR3yZAaIhSebCGUGafhVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5xRlwQ31GDsX2WxOH8FMYe3p4bMB8GA1UdIwQY
MBaAFAu+krtmA0CKzfRXv+xYXFuT0yXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYt
ODg4MzYzYWEyODRjLzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYtODg4MzYzYWEyODRj
LzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtOIi0ex
GUESMTvX72xFM3NjXbvs/XHVGjR/L/vpz0b0QGO0sqWRXIWv62JHyIf1Ly2hyG6+
4AwztZVylBnaSgT9k+zsKk9wUJSZX/g8kSOqubY+RIE1y2adt8M9s08bLCUSlciL
191jlPt6xTWrnFeAXl1fo/Ikg+K6Q7LlILpMxDCSCVU/PLg37hgiLJ49T9z8O7DW
Js2oIKYQSnkqHsoWsDhvw1iMuLI7VJxCYcWT8NQ6vGQyKnYqLBhYzE+6fibLJEfd
twHcIcJImZIhcLEMu3xP/W/M0zZE0VRIcchBo5xx2C8zI8Ktr3IG2sztlTHtE9lx
F6FjT953GVLrKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:27 2026 by rpki-client