Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: m4JnwPxrMZbU0mQe6TTp3OTr7MbXmFhbSfAfpgfzSmI=
Subject key identifier: CF:1A:C4:EC:C4:CB:A1:4E:F6:A0:FA:51:23:8B:BC:0C:DE:CB:3B:D0
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 019D265F8CB45E7FCCCB630E9C0F88E36946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 0C6E
Signing time: Wed 25 Mar 2026 19:01:29 +0000
Manifest this update: Wed 25 Mar 2026 19:01:29 +0000
Manifest next update: Thu 26 Mar 2026 19:01:29 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: xHsxlv+rFuQSxvmGFHPXVjOYXbe0hGfZODAV5a8cO68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8c:b4:5e:7f:cc:cb:63:0e:9c:0f:88:e3:69:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Mar 25 19:01:29 2026 GMT
Not After : Mar 26 19:01:29 2026 GMT
Subject: CN=cf1ac4ecc4cba14ef6a0fa51238bbc0cdecb3bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:6b:58:a6:08:7f:e7:99:3d:58:3b:08:1e:
0d:1c:4c:e8:88:f0:f3:af:b4:c7:a3:10:89:de:9c:
65:07:6a:63:11:06:d5:22:8d:db:b3:f8:a4:1c:54:
d8:0e:5c:50:5e:8c:37:10:53:16:54:bb:65:23:7a:
0d:56:c7:c7:0c:a7:77:29:cd:62:9f:a6:a2:cd:1b:
6f:2d:7d:81:02:53:d3:a2:9d:06:3d:54:f3:05:8c:
1d:9d:f2:45:7c:c6:05:2d:27:f5:44:2b:92:fd:84:
de:f9:92:5a:76:0a:0b:d8:41:f7:6d:44:0d:21:22:
05:30:c9:e4:0b:0a:8c:ac:39:f0:88:2b:86:da:c5:
95:9a:9d:fc:73:ba:ef:00:10:79:fc:e4:d2:a4:a1:
0f:05:41:d1:10:93:e6:95:02:1d:18:e2:11:eb:a6:
4a:7d:f1:58:7a:16:b4:f6:be:7e:d6:b1:be:53:aa:
67:ec:d8:ac:94:0f:11:ac:63:5d:a8:af:56:e7:b1:
3b:2c:f8:1b:16:40:11:64:b3:8f:c1:6c:09:41:64:
eb:f3:51:d4:53:6c:90:22:25:40:ca:8e:d3:dc:44:
8d:16:11:ff:5f:bc:7c:68:87:2d:59:50:8f:f5:cb:
41:4c:e8:db:3e:9c:3b:1a:fd:7a:0e:c3:06:3c:59:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:C4:EC:C4:CB:A1:4E:F6:A0:FA:51:23:8B:BC:0C:DE:CB:3B:D0
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4c:89:3c:4b:0f:03:a8:1b:43:95:df:cf:05:1e:f1:de:b8:
df:17:ed:5b:74:dc:f6:7f:1a:8a:c3:5b:8c:86:a7:cd:12:71:
b9:be:4d:fa:41:59:7c:b6:4c:14:22:ab:94:f6:53:25:6b:ab:
e3:c8:40:e4:46:53:7d:7f:4e:18:83:38:a6:f1:b8:f9:21:19:
58:59:b0:02:87:79:e2:88:06:70:20:02:17:fd:56:a5:4e:d8:
b2:a7:ce:48:49:39:d6:cb:18:9c:ba:55:4a:ba:47:8c:17:2a:
52:17:66:34:9e:b6:4d:15:95:00:c4:fe:b2:da:e8:34:94:6d:
5d:53:c6:dc:6b:54:94:1c:32:92:d8:57:5c:72:81:dc:5d:0d:
34:06:61:7a:48:a3:70:7f:c0:19:01:9e:0a:b3:bf:e9:c7:6b:
be:c0:c7:21:21:6d:15:07:c8:89:72:d9:ff:25:b8:47:7d:83:
73:40:8e:8d:9c:d2:f4:80:7c:e7:c0:92:6c:7a:2b:07:b1:47:
84:73:ae:f2:a7:c3:97:72:02:90:13:ab:35:51:ef:17:8e:39:
83:23:cf:43:cd:c4:cb:e3:95:e2:35:f6:ff:bb:90:c1:71:9b:
89:a8:7b:f3:76:d9:ce:ae:4f:c1:c2:82:86:00:f1:f4:8b:5c:
8c:f3:54:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:23 2026 by rpki-client