Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
File: eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft (raw, json)
Hash identifier: 3OL+yvrloo0dpLm7hoykl9zwKZAeAubVEOcnCt0iXqo=
Subject key identifier: 3A:9F:B6:4F:6C:C7:19:0D:3A:3F:5A:7E:CC:26:C4:58:B9:19:78:C1
Authority key identifier: 79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
Certificate issuer: /CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Certificate serial: 019D2960806570614C3DE0E4AEE14188762B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
Manifest number: 0270
Signing time: Thu 26 Mar 2026 09:01:23 +0000
Manifest this update: Thu 26 Mar 2026 09:01:23 +0000
Manifest next update: Fri 27 Mar 2026 09:01:23 +0000
Files and hashes: 1: eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl (hash: k20mSBLsHRFGZ2hF+/ypZLsj+Q1HeZYSxO7bZgDP5Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:80:65:70:61:4c:3d:e0:e4:ae:e1:41:88:76:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Validity
Not Before: Mar 26 09:01:23 2026 GMT
Not After : Mar 27 09:01:23 2026 GMT
Subject: CN=3a9fb64f6cc7190d3a3f5a7ecc26c458b91978c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:f5:7d:9a:e2:ec:17:d8:e4:a6:b2:ba:83:
1e:b0:4a:5a:d9:c1:43:25:03:01:52:40:75:d6:14:
1a:24:e6:64:c3:87:48:6a:c2:50:70:e8:24:bd:2a:
ae:33:8c:2d:4b:5f:06:4b:0e:d2:9d:e7:14:6c:78:
32:5d:1a:6d:50:62:32:5b:25:ec:3c:ea:30:53:44:
ca:1e:5e:d5:c6:0e:9b:a6:be:cf:1c:d3:5f:fd:5e:
05:1f:5d:7d:67:68:82:23:86:aa:76:50:7a:82:70:
7c:05:db:81:5b:6b:20:7d:c0:7a:c8:6a:50:ed:cf:
eb:66:d6:4a:fb:d8:bb:70:28:14:e1:42:04:c6:49:
33:71:6d:28:46:81:1c:12:fe:f4:46:48:92:67:11:
f9:0c:c7:a1:c8:b9:e3:62:64:96:28:e3:e2:2d:e3:
ec:19:17:1e:30:ef:f6:31:1a:8e:6e:a0:81:82:e2:
5c:7c:c7:1d:51:66:02:1c:a5:ca:97:79:51:32:27:
11:c3:24:ca:89:4d:89:9b:c9:1d:89:bc:2b:bb:d6:
8e:4c:34:0d:48:2b:b7:32:40:2a:51:b1:23:61:87:
52:ad:aa:d8:80:73:ae:28:5b:dc:05:08:e6:50:47:
03:72:38:9e:c3:d3:19:45:f1:4c:ff:67:80:52:76:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9F:B6:4F:6C:C7:19:0D:3A:3F:5A:7E:CC:26:C4:58:B9:19:78:C1
X509v3 Authority Key Identifier:
keyid:79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bf:26:01:7e:fd:86:9a:25:ec:3e:b5:c7:a0:f2:3a:cc:ef:
df:57:d8:99:9c:90:13:d3:a7:17:5a:cf:ee:9d:36:a6:55:01:
74:87:53:6e:07:20:66:1c:c9:12:3b:61:6c:87:f5:c0:ce:d0:
12:23:ad:c8:f5:07:c0:e9:54:8a:1a:3c:37:c9:8a:39:f4:2f:
1e:65:ee:70:7c:b9:93:2c:90:95:08:87:ea:a5:45:e9:ba:cb:
c6:2c:6f:5b:28:52:13:d5:66:52:7a:72:b8:dc:0e:ab:b3:9f:
f4:a3:61:ae:94:e7:ac:04:61:dd:19:7d:9e:27:ba:99:64:b0:
a8:c8:8f:16:85:43:2d:8b:66:03:24:b0:50:a3:92:65:15:ba:
6b:ec:5c:42:eb:e8:b3:7e:f2:f2:a0:81:3d:15:08:e2:0f:6f:
ac:a6:4c:20:92:9f:b9:72:05:89:22:73:52:a9:43:87:e7:69:
ad:e8:66:37:cf:46:3d:b6:33:3d:95:19:d1:94:a2:7e:d3:be:
6d:b4:49:ed:21:39:6b:88:d9:79:13:ef:63:28:27:e4:28:63:
de:91:3a:c8:db:f9:63:52:ee:49:ed:96:f8:27:aa:14:49:ca:
03:9a:e6:a5:65:5a:11:99:3a:2b:9c:4a:82:5a:28:21:e4:7d:
57:fe:9a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:42 2026 by rpki-client