Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: qdBmpv+0dnQHlX0J/5sOgDF9BF8JpDP1h0fgajHV2L0=
Subject key identifier: A8:87:B3:E8:86:0A:DB:0C:AF:31:39:FF:D3:72:F6:60:65:B5:62:BC
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 019D29CDCBC44C7020ADD4BF12805457294F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 11:00:45 +0000
Manifest this update: Thu 26 Mar 2026 11:00:45 +0000
Manifest next update: Fri 27 Mar 2026 11:00:45 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: fmcki5GPOY4RZ+77TCodEyWTmLxakcxqv7AhZ7ve5RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:cb:c4:4c:70:20:ad:d4:bf:12:80:54:57:29:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Mar 26 11:00:45 2026 GMT
Not After : Mar 27 11:00:45 2026 GMT
Subject: CN=a887b3e8860adb0caf3139ffd372f66065b562bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:fc:2e:85:d6:08:11:b3:65:68:dd:81:21:
95:e3:5b:73:a7:2a:5c:f0:a3:fd:de:3b:cf:eb:32:
f2:09:92:81:33:01:ff:d0:2c:94:3f:e8:5d:6b:87:
e7:2d:a9:42:21:e2:4b:8f:c2:e1:84:70:67:55:46:
4f:51:00:61:14:b1:a5:a3:6e:9d:dc:14:ad:fe:aa:
0d:63:3f:82:ec:1c:13:a7:ff:4c:d4:7a:46:a6:6c:
7b:cb:c9:3b:b5:20:9f:2d:e0:ef:c4:2b:ef:b9:2b:
89:73:84:67:c4:8b:74:98:92:78:fd:df:af:84:7d:
45:58:f5:39:88:12:3b:77:c1:41:46:4d:e0:62:2d:
29:a7:10:8b:95:09:5c:1f:7c:6f:46:f2:5c:44:6a:
ce:d2:e5:09:6a:af:71:38:71:80:22:d3:a4:c8:a4:
92:1c:01:d9:16:78:af:a8:67:35:d7:04:87:ac:a1:
cf:16:bf:f8:70:52:f8:da:47:80:56:60:78:f0:27:
da:fe:6e:14:96:15:e6:85:d1:2b:51:7d:fc:a8:b3:
b0:4e:1c:77:6f:71:7a:32:c6:59:f9:cd:b5:ec:91:
46:20:d8:2c:9e:13:98:f9:8f:da:c1:28:f4:7b:8e:
dc:b2:b3:ff:3b:fd:13:9f:fa:0e:b9:70:31:cc:ea:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:87:B3:E8:86:0A:DB:0C:AF:31:39:FF:D3:72:F6:60:65:B5:62:BC
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ed:15:0a:c9:80:0a:3c:ea:87:02:e8:57:ee:c2:33:d2:dd:
cf:43:19:b2:0f:ee:98:93:26:8f:53:70:7f:1c:53:9b:9b:ee:
a5:c5:27:d1:ba:60:e4:f7:26:3b:51:1f:75:a3:2c:43:0e:d2:
38:d8:fc:26:07:92:22:c4:02:fc:89:ce:42:08:70:01:95:80:
92:02:81:85:18:44:cf:4e:d1:0b:9c:e0:1f:df:d6:87:2f:fa:
e2:e2:aa:4d:c7:97:3f:fc:71:d3:12:a7:59:dc:9f:6f:f3:c2:
29:5e:bf:e2:8f:96:73:4f:cc:3b:96:4a:6b:7f:09:b3:38:69:
66:3b:be:05:10:f2:4a:7b:8b:e3:41:8e:c2:ca:7f:43:49:23:
c4:92:f8:f4:bc:b9:76:f6:63:28:c1:07:55:e1:a6:23:6e:14:
7a:90:d0:33:77:2f:df:e2:4d:4d:65:3d:6b:b5:22:a4:14:29:
c9:50:7e:0d:44:a0:f3:e4:11:cc:10:fb:99:ab:02:0b:a0:20:
23:30:0f:fd:c6:93:6c:ed:19:98:0b:1b:8d:1f:19:e8:2d:59:
9a:e0:65:dc:1d:19:14:4e:d1:f5:8b:6d:3f:7a:db:f6:90:fd:
e2:54:fd:40:1d:10:31:b9:e3:00:1c:f8:60:68:4f:34:65:71:
4a:a4:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:49 2026 by rpki-client