
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File: ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier: YbQhY7l8IxIXd0Uhzi1wf9uwlpXP0XR9YUPrVs8KYBs=
Subject key identifier: 4F:26:5C:6F:0E:61:B9:D6:0F:74:40:5C:07:3B:A6:49:2C:4D:89:69
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer: /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial: 019CAAC617F75FC015C21ECEE3C41A4A47DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number: 10F2
Signing time: Sun 01 Mar 2026 19:00:34 +0000
Manifest this update: Sun 01 Mar 2026 19:00:34 +0000
Manifest next update: Mon 02 Mar 2026 19:00:34 +0000
Files and hashes: 1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: TMrfiFIjOJYdol0SWmvr7koZegob2wqixeY256ygE3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:17:f7:5f:c0:15:c2:1e:ce:e3:c4:1a:4a:47:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Validity
Not Before: Mar 1 19:00:34 2026 GMT
Not After : Mar 2 19:00:34 2026 GMT
Subject: CN=4f265c6f0e61b9d60f74405c073ba6492c4d8969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:35:50:4f:be:b7:39:61:28:8b:a2:79:d0:
aa:fc:38:ec:25:c7:b0:98:1a:dd:87:2b:4a:fd:7e:
54:f2:05:48:5b:46:51:b2:20:20:2f:61:87:be:92:
1b:77:69:a1:94:fa:5c:20:16:81:64:50:5a:e3:08:
4e:e4:9f:5e:e2:c0:92:76:81:c3:aa:0e:da:fd:76:
e7:39:2f:17:a7:0f:ed:a0:56:c5:c3:cb:54:a1:9e:
22:cd:25:99:f7:95:12:74:74:f6:65:0f:cd:53:92:
f3:50:4e:82:7e:73:fd:5b:69:ee:8e:54:93:5a:b0:
eb:fc:3f:8f:ff:98:0a:5d:3d:52:70:a9:72:53:cc:
fc:25:42:6d:a8:52:31:99:b2:8e:5d:11:1b:1b:43:
59:ab:c5:1b:b3:ed:ef:64:41:ef:c4:6a:8f:89:6f:
0a:83:36:84:04:73:82:8c:f5:a2:6b:17:59:30:fa:
24:97:15:9c:9a:33:fe:be:7a:09:b8:af:4c:76:c4:
e5:69:2c:48:22:d6:35:b2:55:18:be:f5:c5:05:8c:
89:16:09:7d:b5:ed:0e:83:44:de:76:2f:a4:36:48:
1f:08:c9:46:40:fa:22:c1:1e:68:16:51:43:03:51:
13:f3:56:25:d4:fb:a7:46:85:0d:0b:a7:83:01:0e:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:26:5C:6F:0E:61:B9:D6:0F:74:40:5C:07:3B:A6:49:2C:4D:89:69
X509v3 Authority Key Identifier:
keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:70:b1:2f:b8:a4:3e:42:6b:f3:0d:93:6e:cf:7e:05:44:2e:
65:19:63:ba:fe:be:af:8d:ee:d6:40:80:82:1d:41:cf:c7:ae:
17:cd:be:57:db:8b:80:0e:75:25:fe:a9:e5:8d:d8:d8:3f:e8:
87:63:5e:1f:c1:17:f2:ec:b3:dd:95:d5:d2:7e:d1:01:06:18:
04:b2:d9:7d:84:08:e7:9c:37:3c:30:3d:16:e4:f0:f2:1b:68:
d8:60:46:c5:df:e8:74:2b:bb:84:c3:20:fa:92:08:f4:d3:23:
8b:94:16:7d:88:86:8f:44:1e:63:e6:e8:ac:af:8a:3e:f9:3b:
b7:9c:14:ca:75:28:ad:90:e5:3f:84:5f:e0:52:9e:7d:17:bd:
24:e2:aa:f1:e2:7e:cf:36:f0:2b:76:34:91:3b:90:7e:0d:bc:
cf:6e:51:66:65:ef:ae:08:78:d4:ff:18:54:eb:0a:46:37:23:
83:92:9a:c7:23:f2:08:47:97:4d:24:53:80:97:0f:c7:35:58:
49:17:6a:52:66:e7:96:8c:c8:1f:70:08:fc:42:c5:07:5f:00:
82:fb:2d:0d:35:9f:ce:96:65:4f:6a:1f:62:ac:c6:05:c8:01:
4c:68:dd:47:e0:9d:41:28:32:12:60:57:1b:39:95:bb:09:0f:
59:1c:82:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxhf3X8AVwh7O48QaSkfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYjY1Y2Y2ZmE1ZTFmY2FlOGNmODRjOTcwMWUzOGJkZmI2
M2FhYjMwHhcNMjYwMzAxMTkwMDM0WhcNMjYwMzAyMTkwMDM0WjAzMTEwLwYDVQQD
Eyg0ZjI2NWM2ZjBlNjFiOWQ2MGY3NDQwNWMwNzNiYTY0OTJjNGQ4OTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9c1UE++tzlhKIuiedCq/DjsJcew
mBrdhytK/X5U8gVIW0ZRsiAgL2GHvpIbd2mhlPpcIBaBZFBa4whO5J9e4sCSdoHD
qg7a/XbnOS8Xpw/toFbFw8tUoZ4izSWZ95USdHT2ZQ/NU5LzUE6CfnP9W2nujlST
WrDr/D+P/5gKXT1ScKlyU8z8JUJtqFIxmbKOXREbG0NZq8Ubs+3vZEHvxGqPiW8K
gzaEBHOCjPWiaxdZMPoklxWcmjP+vnoJuK9MdsTlaSxIItY1slUYvvXFBYyJFgl9
te0Og0Tedi+kNkgfCMlGQPoiwR5oFlFDA1ET81Yl1PunRoUNC6eDAQ59mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8mXG8OYbnWD3RAXAc7pkksTYlpMB8GA1UdIwQY
MBaAFBC2XPb6Xh/K6M+EyXAeOL37Y6qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDIt
YTIzODU1ODcyYjg2LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDItYTIzODU1ODcyYjg2
LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnCxL7ik
PkJr8w2Tbs9+BUQuZRljuv6+r43u1kCAgh1Bz8euF82+V9uLgA51Jf6p5Y3Y2D/o
h2NeH8EX8uyz3ZXV0n7RAQYYBLLZfYQI55w3PDA9FuTw8hto2GBGxd/odCu7hMMg
+pII9NMji5QWfYiGj0QeY+borK+KPvk7t5wUynUorZDlP4Rf4FKefRe9JOKq8eJ+
zzbwK3Y0kTuQfg28z25RZmXvrgh41P8YVOsKRjcjg5KaxyPyCEeXTSRTgJcPxzVY
SRdqUmbnlozIH3AI/ELFB18AgvstDTWfzpZlT2ofYqzGBcgBTGjdR+CdQSgyEmBX
GzmVuwkPWRyCAA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:22 2026 by rpki-client