Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: W2ujq/fS8axvkXtrTkGW/CsSofN1eR3YKHOMC5InpvQ=
Subject key identifier: BE:3A:67:4F:6A:7D:B4:99:28:16:BF:16:BD:1B:0D:E1:A9:00:03:2B
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 019D2704902C609DE722C41135363DD24EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 0BE2
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: J+mcahzg4lCide9VzyE4NYGp57YYiKlULJRWFaR+x58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:90:2c:60:9d:e7:22:c4:11:35:36:3d:d2:4e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=be3a674f6a7db4992816bf16bd1b0de1a900032b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:ff:1b:d3:d9:07:3f:7d:3e:b8:52:1e:39:
51:f2:3c:6f:b3:b0:8c:58:ca:8f:dd:4c:f4:b7:a5:
b1:0b:cb:c0:aa:60:dc:c6:0d:8b:a3:fa:fa:85:44:
87:3b:f9:be:ce:8f:16:b1:9a:1c:e2:76:43:cd:05:
01:ba:f6:e0:78:9f:c3:b2:83:34:f7:cc:26:5a:7a:
ed:2d:b1:37:f9:72:c0:e7:0d:0b:49:8c:c5:ad:a7:
54:24:29:e5:10:9a:85:18:94:73:79:02:e5:2d:a8:
c2:60:d0:16:4a:ec:16:11:8c:97:a5:aa:e4:92:7d:
6d:22:44:0e:64:97:65:44:98:aa:b1:78:b7:fc:d6:
a4:96:d8:27:b9:16:46:bb:39:f5:d3:6d:cd:3d:5e:
bb:96:33:90:23:e9:b1:8c:e3:da:e7:b5:68:e6:b6:
28:b3:88:6b:dd:51:a7:2a:40:9a:81:13:40:1d:6e:
7b:17:c6:47:fe:5b:98:d4:b4:e8:a8:8a:98:4a:b1:
37:45:ca:db:ba:6f:ee:76:c9:7d:d6:e8:ec:b3:79:
fc:f2:f9:79:2c:1a:23:5d:5d:32:85:a6:50:d8:4f:
b7:3c:02:d2:27:22:49:06:6d:48:5a:5c:f5:ef:95:
4a:ac:33:4b:7a:95:12:3b:46:3a:39:f2:e1:52:9e:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:67:4F:6A:7D:B4:99:28:16:BF:16:BD:1B:0D:E1:A9:00:03:2B
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2a:d3:d2:1b:74:35:6a:94:9a:35:76:79:13:6e:ed:de:d2:
ad:81:af:95:a5:c2:29:85:56:f4:7f:a7:45:ec:2c:a7:5f:05:
e8:f6:99:56:4f:ef:d1:43:a3:00:a7:fd:9f:cb:cf:cd:4f:b1:
29:63:42:ad:5d:31:7d:97:43:5f:56:7a:5f:bb:9d:22:d3:16:
25:72:96:61:49:6f:db:7b:81:d7:67:e1:66:1c:f7:8c:31:b1:
d9:d0:60:54:ff:e6:6d:e5:db:22:cd:9d:26:71:1d:b0:83:fc:
67:5a:15:63:8e:48:24:24:f8:63:75:69:f2:64:cb:d9:5e:f2:
2c:c5:fc:0f:34:c7:d5:a7:8e:61:e1:df:08:76:1c:2d:75:7f:
32:8a:c9:34:79:7c:dc:97:28:08:57:50:48:e3:67:28:39:f6:
64:b2:b4:6d:45:5d:12:3b:3b:1f:e2:5d:56:e7:36:e4:c0:e4:
9c:2e:8e:57:da:c2:8d:4a:0d:41:d3:31:3f:79:6a:5d:40:f6:
ca:31:3a:13:57:68:50:f4:d0:84:87:62:06:95:8d:2c:58:9f:
7c:a1:2f:94:54:f4:2b:e9:dd:86:3c:52:3d:c0:01:88:03:98:
8a:69:e6:62:d5:85:4c:85:ab:05:3b:24:21:9d:49:c0:bc:d3:
95:93:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:07 2026 by rpki-client