Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier: YWkQ7mfzGU0zLQZvI4OATq5On4nMj5FBvBPfAtZmmqI=
Subject key identifier: A7:8B:BD:BD:BD:6C:DA:13:3D:C6:9B:4B:F1:C3:5C:9B:66:B5:70:39
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial: 019D265FC0D7622422D3F68CF08E3E81A0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number: 108A
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: lxAFsMzfhO8EItz9aVZive6TnnPUUdW99P2xW6rOkqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c0:d7:62:24:22:d3:f6:8c:f0:8e:3e:81:a0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=a78bbdbdbd6cda133dc69b4bf1c35c9b66b57039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:27:94:1e:1d:1c:1f:fb:00:e7:c2:71:ad:
c7:57:5e:c2:03:15:d3:f3:e3:62:7c:b3:8c:b8:38:
02:af:89:85:18:88:8d:df:df:29:c3:eb:e8:29:be:
c1:a8:61:80:ff:2a:df:4c:2a:9d:78:e3:cb:0a:9c:
af:70:f2:ac:0c:c0:93:7f:0d:89:06:23:91:c3:48:
85:ef:74:e8:ee:fa:44:e4:22:26:aa:a5:42:27:5e:
65:7d:c1:c4:9f:7c:11:52:14:c0:56:1d:b8:14:79:
8c:b7:3f:94:40:e3:f0:c0:f3:08:76:fd:ad:56:91:
67:a3:b6:45:95:53:74:9e:5e:94:80:8d:29:5a:11:
46:dd:26:30:81:7e:52:96:86:3c:3b:91:04:d8:e6:
33:00:67:1a:47:59:2d:75:b3:44:66:31:df:55:c5:
3f:90:8b:f7:10:03:2c:4b:f5:fe:77:28:01:45:c2:
fa:0a:d5:a7:d2:70:55:c8:b2:19:ba:ec:eb:ff:de:
6a:87:2e:c4:d0:0f:5a:f9:6c:f1:6e:5f:e7:a5:ef:
94:05:28:18:db:c2:90:08:50:32:27:54:c0:cb:ce:
3a:11:56:4d:60:72:66:96:5d:8a:f4:a5:06:67:a9:
f6:7e:e6:0c:9b:88:2e:4a:30:3f:44:e2:83:bf:3d:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8B:BD:BD:BD:6C:DA:13:3D:C6:9B:4B:F1:C3:5C:9B:66:B5:70:39
X509v3 Authority Key Identifier:
keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:21:b1:c6:f0:c3:8e:fc:a4:c5:bb:9c:f8:fc:b5:8d:ed:a2:
2f:fb:93:3a:06:8e:4d:1a:dd:d9:70:0a:49:5a:05:ed:b9:d0:
e5:ea:e2:1f:4c:ae:87:16:f6:f6:c9:c6:25:eb:2e:0d:d2:61:
e3:0c:31:7a:48:6f:9c:5e:e9:c5:3f:f9:0c:2a:b8:1f:54:7b:
5a:cc:36:7b:f7:2d:b2:99:65:a9:b7:ec:e1:58:34:ed:40:d4:
82:4f:51:ce:b6:42:2c:5a:9f:74:bc:96:76:3e:51:e0:88:19:
d3:65:33:25:68:cc:64:d7:27:0c:75:48:6b:19:8d:c1:33:f6:
a5:66:6c:42:32:c7:5e:02:f0:ab:1a:9a:1d:0f:3a:c3:97:85:
6a:4a:5f:cb:ab:7a:45:9d:ef:ca:04:9c:6c:2b:44:dd:7e:83:
99:ec:08:fa:27:56:6d:6e:a4:3b:66:4c:2d:69:12:62:01:ba:
a4:8f:fb:26:d3:bb:bf:e9:f3:58:da:e3:1e:97:cb:d2:a9:ce:
fd:31:88:38:25:1c:b3:33:72:a8:72:0c:4a:f4:79:7c:81:c6:
cf:b2:6e:5a:cd:3b:ab:b8:77:e8:df:d4:e7:b5:57:e4:0d:a3:
2a:e7:d4:ec:f0:0b:22:71:93:02:fb:6a:50:16:e3:db:be:59:
4a:d7:03:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:16 2026 by rpki-client