Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File: 76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier: ONhF6mafdKNgrik2a6syQo3BFz3or16qk02Ndo03xNM=
Subject key identifier: CE:F8:A9:27:A1:D9:B9:AA:63:69:E0:F7:28:8F:FA:E1:6C:B5:A8:8C
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer: /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial: 019CAB6B8F94C841ECACCE5810E97A5B47D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number: 0E98
Signing time: Sun 01 Mar 2026 22:01:18 +0000
Manifest this update: Sun 01 Mar 2026 22:01:18 +0000
Manifest next update: Mon 02 Mar 2026 22:01:18 +0000
Files and hashes: 1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: H0NFhBlsIzoAlwmkIb98Z+wsHjlgbRnjJl7L75FgqWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8f:94:c8:41:ec:ac:ce:58:10:e9:7a:5b:47:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Validity
Not Before: Mar 1 22:01:18 2026 GMT
Not After : Mar 2 22:01:18 2026 GMT
Subject: CN=cef8a927a1d9b9aa6369e0f7288ffae16cb5a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:fc:b0:bb:5b:e2:80:35:bc:14:2d:e9:32:
3a:03:82:f1:18:ad:b2:fa:77:ae:54:a9:11:bb:4d:
80:1e:54:e9:91:1a:9c:ed:c7:cc:d6:8f:15:60:e8:
c0:d5:ef:38:e2:b3:ee:17:f3:cb:03:7a:7d:ba:d8:
e0:e0:5b:f0:5e:f5:2e:2f:d0:4e:d1:7c:7f:f8:e3:
44:49:94:ac:bf:83:c6:67:0c:cf:fc:6c:bd:ee:08:
1d:9d:6d:28:94:40:d2:63:3d:12:a3:9a:90:24:7d:
2e:70:55:ef:60:70:b1:33:21:9e:fb:35:18:72:81:
d7:c6:31:7e:83:dd:80:6a:5e:2e:1a:f0:e7:46:59:
aa:02:af:41:0e:8b:e1:00:f5:1c:9e:97:da:eb:15:
52:bf:b6:f3:cf:09:b2:d7:d2:4c:d5:3c:94:a2:36:
48:ad:63:0c:71:d1:e0:52:fc:2d:60:11:6b:8f:b8:
6e:55:7d:58:94:f9:b5:ec:aa:ba:f9:04:8d:95:e7:
43:26:5c:cb:fc:b5:da:27:8f:94:f6:37:14:89:5b:
41:81:7c:4b:2e:64:0e:3b:fb:07:15:5a:23:cc:03:
b7:b8:79:5c:7d:fd:8d:11:ec:9a:69:6b:4e:a2:c0:
30:4b:dc:d0:b8:65:bb:f7:8e:50:75:95:09:73:ae:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:A9:27:A1:D9:B9:AA:63:69:E0:F7:28:8F:FA:E1:6C:B5:A8:8C
X509v3 Authority Key Identifier:
keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:49:85:81:29:58:53:28:6e:26:cb:5c:04:43:f1:e4:b9:7b:
23:20:60:41:87:62:7b:58:af:9c:50:79:11:82:41:55:eb:fe:
f6:54:46:54:51:25:3f:49:81:f4:db:64:79:dd:60:99:03:29:
9a:bf:ae:61:9b:50:60:f6:80:c0:c0:e1:26:5e:b0:4d:51:4d:
35:c4:5a:7c:5d:b7:7f:f4:92:c2:db:20:62:4f:e6:cf:5c:22:
b9:6d:fa:b7:4d:14:d8:b9:c5:39:30:36:b7:24:a4:77:0e:2c:
a8:8d:36:3a:35:5f:29:a6:ae:53:17:b2:55:a0:b3:03:ab:e5:
d3:73:d0:38:50:96:8c:70:91:ae:b7:9b:59:73:bd:10:73:5a:
41:bc:21:b3:06:1a:c3:3d:15:46:53:1c:55:57:64:e3:a1:17:
f3:5f:f3:ee:a5:29:ff:84:8b:2e:39:a1:91:b0:49:9f:58:51:
2f:5c:ec:7e:62:eb:c9:3c:b1:e7:cc:03:aa:07:b1:8b:ed:62:
75:18:75:9b:a5:6b:d4:3d:37:bc:72:de:29:c4:63:1b:d3:61:
39:cb:47:dd:61:e2:aa:33:88:f2:14:64:8d:53:fb:81:6d:f7:
f9:c1:24:a6:cc:b5:05:bb:25:c0:bc:be:66:08:44:c2:ce:88:
b9:21:9e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra4+UyEHsrM5YEOl6W0fWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTA5NzZhZTI1Yzc4OGZhYmZjMmE4NTM3ODFkNWRmZjBj
YTU2MGYwHhcNMjYwMzAxMjIwMTE4WhcNMjYwMzAyMjIwMTE4WjAzMTEwLwYDVQQD
EyhjZWY4YTkyN2ExZDliOWFhNjM2OWUwZjcyODhmZmFlMTZjYjVhODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2178sLtb4oA1vBQt6TI6A4LxGK2y
+neuVKkRu02AHlTpkRqc7cfM1o8VYOjA1e844rPuF/PLA3p9utjg4FvwXvUuL9BO
0Xx/+ONESZSsv4PGZwzP/Gy97ggdnW0olEDSYz0So5qQJH0ucFXvYHCxMyGe+zUY
coHXxjF+g92Aal4uGvDnRlmqAq9BDovhAPUcnpfa6xVSv7bzzwmy19JM1TyUojZI
rWMMcdHgUvwtYBFrj7huVX1YlPm17Kq6+QSNledDJlzL/LXaJ4+U9jcUiVtBgXxL
LmQOO/sHFVojzAO3uHlcff2NEeyaaWtOosAwS9zQuGW7945QdZUJc65RIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM74qSeh2bmqY2ng9yiP+uFstaiMMB8GA1UdIwQY
MBaAFO+gl2riXHiPq/wqhTeB1d/wylYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMt
ZDE2NTQ5NzVjM2JjLzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMtZDE2NTQ5NzVjM2Jj
LzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEmFgSlY
UyhuJstcBEPx5Ll7IyBgQYdie1ivnFB5EYJBVev+9lRGVFElP0mB9Ntked1gmQMp
mr+uYZtQYPaAwMDhJl6wTVFNNcRafF23f/SSwtsgYk/mz1wiuW36t00U2LnFOTA2
tySkdw4sqI02OjVfKaauUxeyVaCzA6vl03PQOFCWjHCRrrebWXO9EHNaQbwhswYa
wz0VRlMcVVdk46EX81/z7qUp/4SLLjmhkbBJn1hRL1zsfmLryTyx58wDqgexi+1i
dRh1m6Vr1D03vHLeKcRjG9NhOctH3WHiqjOI8hRkjVP7gW33+cEkpsy1BbslwLy+
ZghEws6IuSGekw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:48 2026 by rpki-client