Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier: h4adbrArYb4jV/0TMeWFakp9zgZ6LdUC9LU9gA2/+NE=
Subject key identifier: 64:7A:7C:1A:1E:0F:CB:FE:A0:EC:D2:83:D7:36:1E:5A:91:13:9C:B3
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial: 019D27A8FD3DA61FFFC7CFFFF26CFCDE7F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number: 0972
Signing time: Thu 26 Mar 2026 01:01:19 +0000
Manifest this update: Thu 26 Mar 2026 01:01:19 +0000
Manifest next update: Fri 27 Mar 2026 01:01:19 +0000
Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: X7Pu4uHiOFlOK86tmVW9oXGFTwdfsuCkD/p/LYFPfd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:fd:3d:a6:1f:ff:c7:cf:ff:f2:6c:fc:de:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Validity
Not Before: Mar 26 01:01:19 2026 GMT
Not After : Mar 27 01:01:19 2026 GMT
Subject: CN=647a7c1a1e0fcbfea0ecd283d7361e5a91139cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:a8:4d:d8:3f:8b:63:8c:49:ae:96:29:06:
13:31:59:4b:5c:5b:b7:5f:82:22:91:63:95:71:72:
51:c9:78:34:34:1c:2a:de:dc:69:92:da:8c:77:3a:
1e:08:79:36:94:cd:97:a0:9e:f3:33:21:64:f8:8b:
53:f2:e9:a7:76:e7:45:84:df:c6:bb:db:41:f2:0e:
a5:c2:a7:be:79:93:d2:d7:2f:8c:2e:0a:21:3a:8f:
4f:d1:34:28:86:f9:97:c4:f8:90:f3:46:6d:3a:44:
17:24:9d:f1:6d:83:74:b3:ed:7a:fb:98:09:4c:52:
7f:b8:0a:33:0b:44:ef:3b:51:48:b4:db:78:84:da:
40:e2:0c:5f:22:d1:e7:ca:3e:91:35:e7:41:74:bf:
11:cc:46:6f:7f:83:bd:a3:6e:cb:53:61:4d:0c:09:
18:51:5d:8c:08:22:e6:0b:0d:95:83:81:e1:70:f2:
1d:a3:f6:36:63:15:9b:88:98:f5:50:c4:d0:35:b9:
16:93:f5:c3:15:aa:cb:c1:11:2d:12:26:bb:f0:ec:
d1:d1:4f:03:a3:bf:6f:7e:64:9d:69:c6:14:b5:50:
d1:e6:61:d0:e0:25:7f:53:05:b5:51:e6:ca:81:2b:
e2:66:84:42:de:36:fb:3b:ec:9c:1a:0e:bb:62:bb:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:7C:1A:1E:0F:CB:FE:A0:EC:D2:83:D7:36:1E:5A:91:13:9C:B3
X509v3 Authority Key Identifier:
keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:00:30:76:9f:12:05:76:65:2a:9d:4b:e6:39:3a:89:dd:2c:
74:1e:98:1c:1c:c8:62:48:2e:ac:72:3a:21:44:e4:ec:32:55:
06:af:ca:0c:e8:13:41:eb:57:bb:c3:ce:76:4a:33:82:44:65:
73:44:19:e1:b9:34:9b:15:82:97:16:b3:4d:81:1c:7b:31:01:
75:7a:16:17:f4:ea:06:0d:2d:f9:c8:95:c1:88:c9:0a:75:2a:
37:b3:94:44:86:e2:3b:da:e3:9d:28:33:21:36:d3:27:34:f3:
2b:09:28:a2:a3:4e:d5:ff:fa:9b:84:16:12:07:3c:1f:83:b2:
58:d2:fa:f7:9e:79:3c:ad:54:af:a7:2c:c3:69:7d:37:45:45:
e6:23:a2:36:98:41:7f:3b:cc:09:cd:f4:85:3c:e9:07:d2:d3:
f8:04:75:e6:44:7d:20:a3:a8:63:1d:86:c3:bf:39:3b:f4:b4:
f7:3b:dc:93:5c:36:fd:b8:34:6a:27:6b:24:62:97:fa:b9:38:
d7:28:50:64:92:ca:e8:32:93:c7:17:1c:a4:b2:2e:08:68:d5:
3d:a5:07:f9:27:63:2a:2c:fb:b0:d3:50:87:0e:de:9f:eb:6c:
06:53:ed:b2:8e:4d:78:67:f3:7f:12:1d:76:a1:b2:c3:c1:a6:
2e:54:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:58 2026 by rpki-client