Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft
File: Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft (raw, json)
Hash identifier: JYB2r7AslEu2vyGK7JmzDklo3b2KQGDO59eOpfyNSWo=
Subject key identifier: B9:36:67:D7:8C:CD:09:49:D1:BE:63:E3:90:10:F0:3F:A3:A6:A7:12
Authority key identifier: 3F:0E:50:F3:04:28:F3:13:65:02:0B:FD:81:6E:2E:AC:B3:C0:04:8A
Certificate issuer: /CN=3f0e50f30428f31365020bfd816e2eacb3c0048a
Certificate serial: 019D2704A980A07BF6B84B65E50A15429931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pw5Q8wQo8xNlAgv9gW4urLPABIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft
Manifest number: 7C
Signing time: Wed 25 Mar 2026 22:01:50 +0000
Manifest this update: Wed 25 Mar 2026 22:01:50 +0000
Manifest next update: Thu 26 Mar 2026 22:01:50 +0000
Files and hashes: 1: Pw5Q8wQo8xNlAgv9gW4urLPABIo.crl (hash: TtP/IoDzCILG924KBMUq3vNGwHnqXSS+JnYlDYNvRKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pw5Q8wQo8xNlAgv9gW4urLPABIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a9:80:a0:7b:f6:b8:4b:65:e5:0a:15:42:99:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0e50f30428f31365020bfd816e2eacb3c0048a
Validity
Not Before: Mar 25 22:01:50 2026 GMT
Not After : Mar 26 22:01:50 2026 GMT
Subject: CN=b93667d78ccd0949d1be63e39010f03fa3a6a712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:e1:1e:cf:f4:17:bc:f2:85:ff:30:1a:ff:
04:75:eb:93:25:e2:ea:36:73:b8:0c:6b:6a:67:43:
7a:a3:d2:b3:be:6e:07:5f:9e:7c:41:5d:11:7d:eb:
f1:93:72:d0:84:06:83:29:a0:ea:de:de:96:fa:12:
f6:96:c8:7a:dd:0d:81:97:bd:d0:18:70:b7:56:8f:
0a:7d:f5:c5:b7:ff:16:47:6a:a5:96:26:ec:6b:57:
7f:c0:d7:6a:22:58:d1:30:3c:0c:ad:9e:2e:0f:9f:
1f:74:76:8a:23:5a:6a:be:fa:56:c7:60:05:91:58:
36:e1:bf:ff:1d:0b:2e:53:7d:eb:b4:a6:79:46:20:
74:38:5b:35:ed:92:64:fc:3a:fd:b2:95:42:43:c4:
f5:9f:d8:03:0f:1e:f0:a0:9e:f1:aa:ed:69:5e:5b:
cf:a2:be:89:ca:16:86:c3:4a:0d:84:ea:62:e7:ef:
b1:b6:e8:0a:08:be:3a:c5:1c:2b:6d:56:db:44:82:
0f:08:f8:e4:41:fb:45:db:ca:da:27:60:7b:df:5f:
ce:1c:f5:67:3d:2a:32:0f:26:31:81:67:04:99:7e:
a9:a7:a6:8d:a0:e4:b7:e1:f2:b6:11:e2:a6:eb:89:
36:6b:27:10:a7:7b:59:1d:13:76:02:b2:1d:4d:4f:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:67:D7:8C:CD:09:49:D1:BE:63:E3:90:10:F0:3F:A3:A6:A7:12
X509v3 Authority Key Identifier:
keyid:3F:0E:50:F3:04:28:F3:13:65:02:0B:FD:81:6E:2E:AC:B3:C0:04:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pw5Q8wQo8xNlAgv9gW4urLPABIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:a1:ba:cf:19:da:07:7d:aa:ec:87:f5:4b:82:8e:4b:4e:
26:a7:62:25:95:d0:c9:eb:21:7f:1e:d1:81:09:71:36:92:30:
93:14:f8:10:93:43:63:ed:3f:fe:3c:58:3c:09:3f:b4:e8:c9:
ed:a0:a6:21:68:fe:6d:cb:e6:d0:18:03:fd:73:d5:32:92:2e:
18:aa:a5:32:b6:a7:40:68:ff:2f:a2:f7:e1:c5:d2:16:6b:64:
75:8e:74:1b:47:dd:cd:2d:b3:b9:34:53:71:d8:58:f1:98:5b:
12:08:1b:ec:8f:b6:fd:97:ff:13:3f:63:9f:f2:47:f9:59:24:
90:33:b0:3f:84:d9:dd:89:20:21:e3:fb:4a:63:76:bf:9a:46:
5e:18:29:7e:92:6e:83:e8:65:ce:2c:4a:72:79:2e:ed:b2:30:
3a:0a:34:72:58:92:83:8e:49:fd:a3:84:80:12:15:ed:69:47:
33:a7:82:6c:4c:e2:44:95:37:bb:eb:9c:2a:b7:b6:7b:2b:e1:
dc:0c:1c:be:ba:6a:98:3a:5d:9a:b0:bf:e7:ba:9e:0c:0c:e7:
b7:56:4c:d7:78:87:f4:d1:d2:c6:e2:84:e7:8b:0a:85:77:52:
29:8d:cc:e4:20:1c:d9:37:fd:e2:cd:13:5d:e8:ed:84:eb:8c:
cf:ab:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:14 2026 by rpki-client