Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File: 639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier: 3IQJRrgiWXPp/2QcFsxCQ9WX01klhYeJz5NS83VPz48=
Subject key identifier: EF:5C:DA:2D:BA:2A:E2:7C:41:1D:33:E3:D6:CD:0E:3A:4F:E5:2D:84
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer: /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial: 019D27047D8D84BC80F87FC468D49B669604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:38 +0000
Manifest this update: Wed 25 Mar 2026 22:01:38 +0000
Manifest next update: Thu 26 Mar 2026 22:01:38 +0000
Files and hashes: 1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: xUTBTK86EranhrYICvxVfiOHnbAFDOwHZMQonH120Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7d:8d:84:bc:80:f8:7f:c4:68:d4:9b:66:96:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Validity
Not Before: Mar 25 22:01:38 2026 GMT
Not After : Mar 26 22:01:38 2026 GMT
Subject: CN=ef5cda2dba2ae27c411d33e3d6cd0e3a4fe52d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:c8:b5:4a:be:85:23:55:ff:81:b9:ed:15:
ff:25:f2:a2:ae:5a:03:5c:bf:ac:dc:79:c9:73:6f:
df:8c:af:9f:1f:54:25:cf:b2:09:26:29:5d:26:dd:
67:91:82:b6:d6:91:25:8d:36:e1:9b:47:ae:26:3d:
59:d3:73:94:9d:bc:ce:3d:34:a1:1a:31:e2:97:72:
45:67:ae:3e:9c:d3:c4:54:5b:f0:e2:b7:5a:13:27:
a0:24:14:f6:8c:02:d6:fa:50:6c:6a:61:7f:9c:82:
be:6f:68:fb:99:a9:70:cc:ca:24:62:1b:d8:15:30:
10:0f:37:79:0d:31:fb:fd:84:f1:7e:e0:f0:67:d4:
34:8c:65:da:5a:dc:71:3a:5d:59:2f:bc:a2:6d:68:
56:83:b2:39:d9:98:9e:8e:fd:ec:12:0a:24:82:e2:
be:2a:42:64:3b:18:9b:cd:99:ae:ed:68:33:b8:22:
50:5a:23:5d:51:fd:22:f8:61:51:cc:8f:92:52:a1:
9d:02:73:75:25:97:e8:da:0b:97:aa:4b:25:f7:c7:
72:57:a4:08:2b:1c:d7:42:02:48:c2:ea:70:61:ea:
d1:50:a6:7d:22:30:3c:71:62:f1:c5:cd:38:4b:fe:
6d:e1:36:65:6a:29:26:0e:e4:45:83:1e:65:73:47:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:DA:2D:BA:2A:E2:7C:41:1D:33:E3:D6:CD:0E:3A:4F:E5:2D:84
X509v3 Authority Key Identifier:
keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:45:30:96:e7:47:e4:bc:96:02:88:ae:4b:5e:7f:71:d2:
4b:69:62:e2:91:da:e9:af:77:5c:5f:21:3e:25:bd:d7:40:0f:
55:86:c2:57:38:de:a6:d4:87:31:f7:13:ea:4d:52:99:d3:ab:
a4:41:cf:ce:2a:23:9d:fc:5a:bd:85:0f:63:26:ec:fe:fb:a7:
c0:99:5e:01:9a:cb:11:73:b6:f0:07:77:1a:a3:72:29:c0:3c:
7f:f6:f2:71:ff:84:1c:5a:8b:37:f4:b1:b7:80:75:cf:fd:98:
b9:e2:e3:11:66:7e:b0:7f:85:5c:7e:3b:62:d3:c5:6d:36:d9:
12:66:2f:48:7e:d6:34:83:61:25:05:ea:52:ac:ef:39:9b:cb:
76:52:39:ea:20:64:a8:15:67:97:6b:0d:9e:08:38:bd:6b:da:
b6:a2:45:8c:d4:35:04:5f:5b:e3:10:b0:7d:93:94:4a:c3:aa:
78:50:1b:25:1a:03:cd:c8:ff:9c:03:1a:a5:1c:d2:bf:8f:1b:
75:40:1d:e5:f6:02:27:b2:33:4b:03:b7:14:a6:d2:cf:e5:8f:
17:8a:1e:3d:1a:1c:51:99:84:e1:ac:31:f5:fa:45:d3:35:a3:
1e:42:62:9b:b5:54:5b:b0:63:1f:30:ba:4b:3a:9e:48:e4:c4:
2f:aa:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:42 2026 by rpki-client