Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: kKJk/aIXX8NrLQTPj4a3BH7LhSGMH0i3rFJWiMJG2gY=
Subject key identifier: 84:41:1D:17:40:69:CF:0C:78:0F:A7:1C:DC:8F:51:E0:73:CE:0E:3A
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 019D2772A14B2B62DA35BDCCAB2F3187EC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 0BC3
Signing time: Thu 26 Mar 2026 00:01:56 +0000
Manifest this update: Thu 26 Mar 2026 00:01:56 +0000
Manifest next update: Fri 27 Mar 2026 00:01:56 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: vAuhDoT9w3kX2Dnuy1ryfhKsnNrrk0DXM4Xn4qRMLBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a1:4b:2b:62:da:35:bd:cc:ab:2f:31:87:ec:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Mar 26 00:01:56 2026 GMT
Not After : Mar 27 00:01:56 2026 GMT
Subject: CN=84411d174069cf0c780fa71cdc8f51e073ce0e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:2e:16:de:3f:a1:19:74:c0:87:e9:c0:08:
ce:3e:ee:e6:b5:2e:2e:58:74:02:2e:ce:c7:77:65:
fb:b1:b1:3c:a2:d8:4b:d4:ed:3c:18:f7:72:4d:5b:
9c:2a:37:9a:aa:48:b8:f6:cd:f5:cd:83:a7:ab:91:
36:35:0c:80:b3:18:61:b9:5b:48:e8:f4:63:a0:57:
9b:83:0c:22:a0:ce:e2:e5:82:fb:99:c1:2d:a2:61:
48:15:dc:17:f6:25:7e:68:f3:93:29:c1:29:05:06:
7d:bd:1d:fb:51:26:47:04:33:87:f5:ff:30:bc:79:
c9:0a:9b:29:5d:37:06:99:3b:80:db:73:c7:27:e2:
ae:25:75:96:04:91:8b:f3:d3:fe:8d:72:5f:da:15:
22:8a:92:9d:92:60:bc:2e:d3:fd:15:58:91:d6:ab:
c2:1b:6a:c1:15:b6:9e:5b:48:49:2c:e9:72:eb:17:
61:67:1e:34:7a:97:f3:59:c4:d0:ab:aa:17:a7:17:
e9:f1:cb:a3:f5:01:be:7d:c5:3a:04:2d:4d:d5:dc:
f4:3b:67:0c:e4:04:b6:5f:10:e3:03:bb:15:1f:f8:
3c:be:3e:94:17:80:81:27:ad:55:13:3a:ca:3a:51:
ad:6d:be:13:9e:36:46:05:02:de:07:96:ff:91:14:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:1D:17:40:69:CF:0C:78:0F:A7:1C:DC:8F:51:E0:73:CE:0E:3A
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:07:a3:3d:86:80:73:61:28:a1:57:ee:b2:de:1a:91:cb:01:
97:db:06:0b:ff:ea:86:f5:50:2c:6a:3d:4d:e1:b1:69:82:e6:
27:c7:b0:d2:5d:c7:9c:92:38:2d:ea:1c:83:65:94:26:73:95:
11:eb:94:87:b4:e2:50:2b:9a:6f:65:1c:41:cb:7b:c6:ed:73:
44:a8:48:da:a3:07:2a:5b:84:81:42:41:1c:8c:d3:0d:1d:50:
c2:54:94:d6:d2:de:12:eb:3b:22:23:a5:5d:5a:8b:1d:0b:ed:
8a:82:aa:5b:e1:f9:aa:33:2a:a1:b2:9e:83:bb:e8:b2:e0:2e:
a5:44:19:ae:90:b4:d5:2c:95:da:df:2a:28:4f:da:39:9b:7a:
c8:88:f8:9c:c5:f9:37:f3:3d:b6:28:cb:65:58:a8:fa:3e:62:
b8:73:91:82:24:67:ed:70:33:23:d9:d0:6e:e8:61:e4:32:03:
b0:14:3c:c5:f1:2d:8e:76:ef:96:c1:f2:bb:5c:b4:c0:36:ac:
a7:14:10:65:1f:cf:d9:a4:39:70:0a:a0:27:b1:c0:33:53:dd:
ba:6e:ee:0c:8f:79:9c:d0:97:ee:35:31:c4:e1:db:6e:d9:df:
6b:8d:5a:6d:33:84:51:28:33:64:85:26:37:7e:d2:db:d4:0e:
df:fa:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:57 2026 by rpki-client