Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json)
Hash identifier: HoRBiPAWExof+MdOXoS+ymzB3+ekSs18Is0EJiROY4A=
Subject key identifier: B2:F7:2B:B1:95:FE:79:3E:E1:70:8C:71:7B:F4:49:CE:8F:B9:85:C0
Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Certificate serial: 019D27721008B9BBC7A58DA54A6EB20906A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
Manifest number: 10EE
Signing time: Thu 26 Mar 2026 00:01:19 +0000
Manifest this update: Thu 26 Mar 2026 00:01:19 +0000
Manifest next update: Fri 27 Mar 2026 00:01:19 +0000
Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: 2+h1m+nv2OhSVz6NtaZH+ZF68Vb9Ko4jlQXVENf5ctE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:10:08:b9:bb:c7:a5:8d:a5:4a:6e:b2:09:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Validity
Not Before: Mar 26 00:01:19 2026 GMT
Not After : Mar 27 00:01:19 2026 GMT
Subject: CN=b2f72bb195fe793ee1708c717bf449ce8fb985c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:5f:52:bd:6e:7e:02:92:9c:8d:10:3b:2c:
ef:a7:44:6b:b4:20:38:a4:de:13:6f:86:46:60:b3:
7a:36:7b:3a:66:2d:08:5d:39:18:bc:7d:b1:bc:9e:
59:aa:9e:b8:e2:36:7c:88:27:ee:69:4e:48:07:5c:
8c:f1:17:b4:e7:d0:b9:6e:21:ab:1b:52:30:8e:90:
29:e7:1a:6d:b7:27:14:ef:44:24:85:54:98:81:a7:
ae:4b:3f:44:fe:07:00:8d:fa:ed:c2:cb:39:1b:3e:
c8:06:05:70:ca:0b:01:e6:ff:1b:48:75:50:3a:95:
16:64:01:72:ca:db:5b:d8:2a:4e:5d:d8:f6:05:07:
ea:43:b4:0d:f0:e6:bf:c4:05:62:7d:21:79:07:6d:
19:d4:bd:a8:c1:3d:55:33:83:c1:85:b1:80:ab:7a:
a5:e2:23:60:2c:bf:5f:13:60:b0:67:38:cf:e3:3f:
b5:0e:61:27:1c:19:9b:40:5f:72:54:a2:4c:6b:52:
bb:5d:c1:ab:02:4f:70:5c:cc:e1:b9:3f:fd:27:1f:
f4:0f:47:ff:45:b8:14:58:0a:fa:73:bf:e2:66:60:
88:ac:cb:82:92:ee:c6:dd:06:12:27:df:08:dd:2a:
b9:08:28:06:91:79:ff:c2:71:6a:50:08:0e:41:ce:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F7:2B:B1:95:FE:79:3E:E1:70:8C:71:7B:F4:49:CE:8F:B9:85:C0
X509v3 Authority Key Identifier:
keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:81:d6:8e:33:54:36:a6:a1:b2:03:75:f3:ed:3f:5a:0f:64:
0d:dd:ae:bd:c8:98:56:5d:0d:0b:5c:6a:fe:a8:3d:9f:77:4b:
9a:00:0c:67:50:d5:1d:40:a1:66:f9:81:79:29:b6:62:3d:15:
23:65:8c:15:d5:90:05:9f:6a:de:0b:a1:bf:ff:d2:95:4d:2f:
8f:4d:c5:1d:49:20:f9:d0:f3:4e:de:a6:16:0e:37:a4:45:14:
71:55:ef:ba:fc:60:bd:ae:e1:bc:00:19:e3:db:52:51:08:dc:
b2:db:8e:8e:bd:80:8b:68:2a:13:0e:27:8c:61:5f:e5:46:44:
78:ca:c5:e8:82:c9:6e:2c:3e:0d:55:ee:43:fb:df:25:31:40:
aa:f5:a7:c0:74:c3:9f:22:dd:50:9b:82:5d:85:11:c1:6f:5e:
31:6e:01:7f:47:b0:64:a5:9f:d4:5b:fe:29:7c:1d:cf:62:13:
e1:b0:24:d1:d3:77:02:8f:2b:b7:f0:e3:4d:7f:83:d6:9b:c1:
50:f4:2c:4f:77:b0:1c:4c:c2:f7:dd:9b:1f:0b:b3:b3:dc:af:
02:19:3b:46:2e:ab:74:cf:39:b4:d8:20:48:f3:b7:44:10:6b:
cc:6f:bc:3d:9d:6f:1e:3a:f9:a2:20:8d:5f:93:ea:82:63:47:
8f:ac:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:48 2026 by rpki-client