Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: 16a34a6qQtx+hnlHP6ZtK+4DgWZvbST8sf5+vkaTIrk=
Subject key identifier: 57:67:26:F1:0C:86:A2:F6:F4:B0:61:96:C8:95:D8:0C:17:C8:D6:ED
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 019D3299DD120DE20F21639661B6C7A83C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 0BBE
Signing time: Sat 28 Mar 2026 04:00:37 +0000
Manifest this update: Sat 28 Mar 2026 04:00:37 +0000
Manifest next update: Sun 29 Mar 2026 04:00:37 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: NcSYgp/jFnDn9QxR9nCkLEwEZunzheR4VvQOdIryCiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:99:dd:12:0d:e2:0f:21:63:96:61:b6:c7:a8:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Mar 28 04:00:37 2026 GMT
Not After : Mar 29 04:00:37 2026 GMT
Subject: CN=576726f10c86a2f6f4b06196c895d80c17c8d6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:53:ef:bd:7d:14:82:80:63:74:72:70:46:
26:74:6b:f7:5c:ac:17:1c:76:cb:51:dc:a8:65:56:
1f:60:22:7c:20:d1:09:a7:3a:5a:46:95:73:83:80:
f5:c3:44:2e:fe:9a:7e:91:c3:6e:26:d0:62:52:a6:
05:48:e7:79:3b:e5:e9:e6:55:65:44:94:c7:b7:17:
ee:ae:ea:ba:0c:60:24:de:c9:68:d4:66:8c:87:b1:
d0:3e:d3:63:0a:9a:15:a4:97:8c:9c:6a:65:79:f5:
b9:07:39:6e:e4:ad:b5:8d:63:45:f7:ec:02:38:f3:
55:bc:4a:c9:ee:82:08:b7:67:79:58:cd:5c:69:ab:
64:ba:ef:d9:01:6f:33:62:c7:b0:27:f0:5f:52:0d:
89:26:92:4a:05:e7:75:c8:92:38:35:86:b9:b4:ab:
06:c1:35:3b:f2:3f:6b:e8:a0:a9:1f:c4:dd:84:ca:
4b:99:30:8b:d2:37:b6:b3:c2:3c:60:7c:ee:1c:d2:
dd:16:90:98:06:75:05:98:0c:6c:79:6e:ff:a9:83:
c4:27:58:39:f4:e8:14:50:76:f5:8a:28:72:16:44:
20:c5:66:c9:8d:62:99:73:29:79:16:66:d7:7b:f7:
81:41:d9:8e:af:17:e5:32:ae:3c:af:3b:be:60:ca:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:67:26:F1:0C:86:A2:F6:F4:B0:61:96:C8:95:D8:0C:17:C8:D6:ED
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:71:21:94:40:84:0f:c0:83:ba:63:d2:6e:e9:a7:62:e3:ea:
aa:96:d0:8f:c6:2b:ae:e6:9f:f8:24:03:39:14:0e:2c:3d:aa:
36:79:aa:a8:7d:e3:e2:f2:9f:3a:b8:06:53:3b:01:05:c7:a6:
f3:d2:60:d2:75:9e:b6:1f:fc:c3:83:e7:3d:14:e7:ee:d5:d1:
f9:e6:06:78:64:87:fc:cc:f3:97:fc:74:24:e9:5e:9e:52:d8:
2d:eb:49:73:be:ea:05:49:18:9d:db:e1:45:7b:29:e3:f6:d5:
b2:9e:47:6f:62:03:3b:5e:fc:f5:6f:c6:a4:9d:e1:28:8b:80:
e2:2e:fe:6b:eb:a7:fc:bd:05:e1:d1:7a:d0:95:e0:0a:ee:fd:
8f:34:1f:ad:ad:b4:0a:7f:6c:f7:ff:e9:d0:bd:ef:3b:36:ac:
86:68:f5:97:7c:81:37:9a:77:86:4c:4f:bf:94:a0:8e:32:e5:
a1:e6:c7:97:73:6f:90:63:37:2c:5b:1a:4d:b9:33:08:b5:99:
74:e3:67:58:ce:38:c6:4d:91:9c:3e:16:fe:8f:f3:75:6f:67:
99:a3:54:71:d3:00:4d:e7:d5:11:df:e4:2b:b7:9c:7d:b5:63:
ba:16:3d:4b:17:7c:7f:4c:63:09:ae:f3:0a:cd:02:bd:d6:38:
55:ef:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:42 2026 by rpki-client