Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: 2N9FedpC21q6dSYuhZ4W72yaxCzmAbnkp1uDotSI2CA=
Subject key identifier: 98:24:C4:EC:BA:2F:0A:5B:04:C8:19:EE:95:41:59:A9:F1:9A:4A:B7
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 019CAAC63EA937F9389FB2BF3717895F7FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: on//aOBpULX/X+N5sK6EUsncI741jafDGcySZEfF1hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3e:a9:37:f9:38:9f:b2:bf:37:17:89:5f:7f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=9824c4ecba2f0a5b04c819ee954159a9f19a4ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:b8:01:61:ab:3f:ce:7e:eb:ea:0c:c8:4d:
b4:4a:12:58:5f:fe:02:a2:c7:8b:3a:7e:d5:a4:83:
ab:9b:f6:5a:f8:b3:af:85:fb:be:6f:60:e1:ec:7b:
74:75:f5:9a:24:59:14:ba:22:d6:bf:e6:4f:fa:67:
b9:33:79:56:0d:11:8c:9e:28:76:1e:b5:1e:53:04:
6d:e8:a4:3f:ce:90:95:bf:02:6b:23:1f:1b:87:69:
a5:af:32:2f:74:c1:0a:ec:8b:53:44:39:34:cd:ef:
81:64:55:35:31:b4:ba:96:c6:be:bf:81:da:32:2d:
27:e9:2e:8d:ea:35:27:e7:57:80:38:21:89:e9:9a:
77:0a:07:94:f6:cd:17:f3:d2:50:54:64:8f:04:c3:
a2:e5:9a:1b:8b:cc:45:53:92:c4:95:b9:06:b7:79:
ff:44:e0:07:87:e6:dd:6b:49:87:e5:ab:07:87:ea:
38:db:d5:c5:ce:84:9d:7e:b5:83:ab:8a:07:e6:da:
71:81:ab:80:f3:3b:bf:41:61:24:ef:0c:73:88:34:
59:14:de:1f:a1:15:0a:96:a7:1e:7c:0f:66:fd:fe:
f5:59:df:38:1d:3d:10:c0:bf:55:e4:8b:c5:ff:14:
7b:cf:7b:eb:f4:1a:b2:72:39:e5:94:7a:50:fb:45:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:C4:EC:BA:2F:0A:5B:04:C8:19:EE:95:41:59:A9:F1:9A:4A:B7
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ba:5b:8b:b1:53:4f:a2:20:0c:c5:8c:57:4b:f3:bb:42:8c:
cf:b1:74:64:1c:01:bd:b9:40:2a:0e:c7:85:87:f6:da:05:02:
30:5b:ae:ec:de:6f:c2:a7:c8:47:8d:da:9d:c5:4d:59:65:5c:
f7:9e:4b:69:e9:7c:38:5c:32:7a:8d:9c:76:c4:14:8f:a7:d6:
0f:01:28:68:c4:43:81:9e:73:e5:6f:d8:11:7e:47:5d:90:0f:
ca:e3:72:ee:c1:cb:93:72:4b:48:a6:e4:d6:d5:51:dd:80:63:
b5:45:de:f5:8b:e9:75:c1:11:2e:0c:a0:54:4f:96:73:a1:52:
55:e5:8f:bb:bd:e9:ea:f8:4d:f6:f2:a5:ce:e4:fe:c5:f4:2d:
af:aa:1d:f8:1f:93:bd:cc:9f:8c:2f:19:8c:33:47:3a:be:00:
9a:82:86:b1:29:67:f6:c2:cd:e7:4c:ee:e0:e8:79:52:d7:7d:
ba:73:23:8f:b9:d9:08:1a:d7:f4:50:c7:c6:07:db:53:e2:fd:
67:2f:9f:6a:75:b7:2f:f4:12:0b:25:d0:03:6d:79:df:8e:d8:
de:36:a2:c3:be:07:b1:1c:3d:6c:cc:47:1e:ee:78:0c:aa:e3:
f4:40:cb:2c:27:7f:51:cc:ad:06:b8:02:91:71:06:df:60:f7:
ae:25:43:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxj6pN/k4n7K/NxeJX3/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGE0ZDdhZjMzOWJmNTI1NTcyMzkzNzU1ZDFjZmIzM2Nk
ZGI1YWQwHhcNMjYwMzAxMTkwMDQ0WhcNMjYwMzAyMTkwMDQ0WjAzMTEwLwYDVQQD
Eyg5ODI0YzRlY2JhMmYwYTViMDRjODE5ZWU5NTQxNTlhOWYxOWE0YWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCm4AWGrP85+6+oMyE20ShJYX/4C
oseLOn7VpIOrm/Za+LOvhfu+b2Dh7Ht0dfWaJFkUuiLWv+ZP+me5M3lWDRGMnih2
HrUeUwRt6KQ/zpCVvwJrIx8bh2mlrzIvdMEK7ItTRDk0ze+BZFU1MbS6lsa+v4Ha
Mi0n6S6N6jUn51eAOCGJ6Zp3CgeU9s0X89JQVGSPBMOi5Zobi8xFU5LElbkGt3n/
ROAHh+bda0mH5asHh+o429XFzoSdfrWDq4oH5tpxgauA8zu/QWEk7wxziDRZFN4f
oRUKlqcefA9m/f71Wd84HT0QwL9V5IvF/xR7z3vr9BqycjnllHpQ+0V/4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgkxOy6LwpbBMgZ7pVBWanxmkq3MB8GA1UdIwQY
MBaAFNCKTXrzOb9SVXI5N1XRz7M83bWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMt
ZDVhMWVhOWVkYjA4LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMtZDVhMWVhOWVkYjA4
LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrpbi7FT
T6IgDMWMV0vzu0KMz7F0ZBwBvblAKg7HhYf22gUCMFuu7N5vwqfIR43ancVNWWVc
955Lael8OFwyeo2cdsQUj6fWDwEoaMRDgZ5z5W/YEX5HXZAPyuNy7sHLk3JLSKbk
1tVR3YBjtUXe9YvpdcERLgygVE+Wc6FSVeWPu73p6vhN9vKlzuT+xfQtr6od+B+T
vcyfjC8ZjDNHOr4AmoKGsSln9sLN50zu4Oh5Utd9unMjj7nZCBrX9FDHxgfbU+L9
Zy+fanW3L/QSCyXQA215347Y3jaiw74HsRw9bMxHHu54DKrj9EDLLCd/UcytBrgC
kXEG32D3riVDWQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:54 2026 by rpki-client