Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: b2lmYp5Kj9qrqhx9a7qBYLACZaBdX1Yi1ridx1l7VwM=
Subject key identifier: 1E:98:F1:6D:73:5B:F0:8C:35:8B:35:FF:DC:21:7B:BA:58:C9:9E:7F
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 019D2771B94792EF098EC19AF58163F939DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 06AB
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: tVzyoyQAbm1U9wohNOMpBDMc4jmVh2ndpGFhA7nEIV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b9:47:92:ef:09:8e:c1:9a:f5:81:63:f9:39:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=1e98f16d735bf08c358b35ffdc217bba58c99e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cc:c9:d6:6d:ef:9a:e7:35:e0:00:6f:9d:0b:
f8:21:87:cb:e1:35:b4:9e:c6:d2:5a:b9:74:9c:63:
f2:21:dd:1a:ce:16:a3:82:d5:f3:84:99:61:fe:cc:
9e:48:46:61:f9:47:29:63:bf:c2:a3:ef:fd:55:e4:
e3:69:0f:36:e3:97:fb:b4:95:0d:24:5b:27:f6:af:
a6:a4:91:9f:72:30:77:a9:ad:0a:1a:dc:ac:57:3e:
a9:0a:28:e2:f8:17:e6:46:17:62:1a:45:22:24:da:
2a:37:ab:29:30:de:c7:2d:9c:a3:78:0f:4f:be:3c:
09:fb:f9:a4:72:f4:2f:1e:6b:bf:8d:69:a2:76:b2:
1e:92:fa:d8:67:dc:1c:24:d5:c8:79:01:fa:cd:b0:
a8:db:d0:26:cf:b7:4e:cf:d4:d7:bf:b6:3f:88:1f:
00:b9:f2:bd:84:79:55:5a:e5:94:21:4e:20:2e:5e:
07:04:e3:1b:00:43:f6:73:0f:cb:3e:4a:81:ed:de:
8f:fc:c2:7c:11:d0:f0:d8:56:fb:be:9c:fd:00:e2:
58:f5:48:3d:7c:df:04:66:64:de:b4:e4:36:64:bb:
9d:22:85:fa:fa:8e:0a:d2:89:4a:8e:b3:d0:7d:fd:
30:dc:29:44:10:36:c9:ec:20:bd:f6:0c:a3:9f:ea:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:98:F1:6D:73:5B:F0:8C:35:8B:35:FF:DC:21:7B:BA:58:C9:9E:7F
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f3:14:31:11:93:e4:78:df:ca:7b:74:66:38:8f:c1:bc:61:
94:5a:d7:c8:46:af:19:19:d9:1f:c6:7a:14:b0:79:2c:58:0f:
18:62:af:6a:1b:8f:be:57:ed:23:a9:c5:c7:e4:58:28:b8:5f:
56:5f:89:45:95:ee:23:05:0c:97:87:01:ec:09:cd:27:1a:58:
25:c2:02:c4:97:5e:a9:98:b5:1f:55:d6:fc:b5:d4:b5:ca:96:
bc:ff:19:d0:9b:1f:76:a2:8d:ce:15:7f:fd:79:81:5b:7f:94:
c7:84:b9:2a:a1:63:13:f1:4e:fa:08:02:3d:64:92:77:05:61:
9b:c0:03:59:6d:3a:44:6b:88:b7:73:28:7d:29:4f:43:e2:39:
91:c7:16:dc:51:e6:71:6d:49:1b:3d:1a:76:58:6b:7e:c2:05:
d6:95:fc:dd:60:f7:d7:00:63:0d:18:89:05:5f:0e:29:8f:99:
d2:69:c6:07:33:5d:78:77:b5:32:a8:ba:29:d7:1b:53:c1:15:
71:6b:b0:e4:63:e9:90:41:96:eb:72:ab:ea:17:28:00:a4:8c:
ff:d1:2c:45:88:0a:ba:a2:05:20:7d:a9:2b:82:06:fd:70:c6:
72:8f:37:96:34:74:81:eb:c5:c9:21:c3:f4:62:7b:2d:76:27:
d3:44:24:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:32 2026 by rpki-client