Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: miK3SDUZoEFkfaejBIteigw3ivlRg/bhvO8BRBN3ECc=
Subject key identifier: 46:D0:6E:B4:AA:78:C2:BB:E4:87:14:78:33:21:54:3E:0E:53:4E:1C
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 019D2772E7AFDA6302CDC8CA4810404308BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0C19
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: J0a7iXvUTBptyCrukwO0pYr8WNrhKnbkt9Altd6nDbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e7:af:da:63:02:cd:c8:ca:48:10:40:43:08:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=46d06eb4aa78c2bbe48714783321543e0e534e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:02:7a:fd:58:35:cd:a0:bd:eb:80:23:4b:
9e:96:f8:36:05:a7:ef:60:fd:fb:ae:23:3d:71:90:
ee:f2:93:24:6e:c2:98:7d:b8:66:81:e3:6f:28:55:
c1:30:c1:39:33:80:79:c8:ab:6e:46:03:63:73:fb:
83:70:2b:3b:1d:b6:63:59:6e:f3:9c:0d:73:1b:0d:
3c:29:81:84:cd:a3:51:80:3a:9a:52:b8:e4:24:de:
4f:ea:8a:9f:98:a1:01:04:d9:3b:90:73:c3:d6:ce:
66:e3:b0:fa:ce:9f:2d:06:ef:58:46:62:e2:f1:6d:
d6:d3:2b:60:d6:1c:63:3c:c5:6c:f5:6b:1b:13:26:
9c:2f:7f:9f:31:ef:66:f8:e5:bb:b8:8d:85:56:83:
89:19:83:15:b3:b6:8a:65:02:3b:98:58:29:98:73:
5a:1e:2c:8b:a7:76:7d:b0:1b:00:4e:e5:5f:2e:24:
c8:85:f5:46:47:b5:51:91:01:89:42:a8:b7:57:d0:
32:6d:af:dd:0b:b5:5d:6f:ef:2e:41:02:a0:a3:ea:
4c:bc:15:5b:14:e6:34:b3:06:98:bd:68:ef:4b:34:
86:6d:e9:a8:1e:73:89:6e:b2:2c:9a:bb:28:d0:6e:
80:ef:63:33:9b:f9:60:29:48:12:ee:dc:25:b2:df:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D0:6E:B4:AA:78:C2:BB:E4:87:14:78:33:21:54:3E:0E:53:4E:1C
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9d:8e:3c:48:0c:b8:f2:91:d9:f5:08:21:99:15:b9:c3:02:
9f:39:b2:45:bb:61:8f:f7:9b:6e:cb:0a:29:ca:ae:fe:6d:a0:
ea:67:59:4c:8c:0d:02:0a:38:d3:78:6d:14:ba:a6:27:4f:09:
7d:a9:88:c6:89:96:11:5e:28:e6:88:bf:7a:77:83:c4:fd:98:
73:bc:2a:e5:d5:ae:15:9c:82:c0:1f:60:ca:fa:0a:b6:93:02:
8b:ca:17:59:2f:25:68:6a:e3:cc:b3:1b:96:4b:37:14:a0:96:
bd:3e:c2:d7:62:a7:37:6b:15:0b:13:9c:8b:35:4a:b2:a5:70:
20:ba:f1:28:7c:3f:62:6a:50:6b:a2:cf:ed:3a:41:42:42:70:
b3:d5:d2:4a:5e:9d:13:72:e3:a0:6a:c4:51:00:24:52:b9:e5:
11:74:5a:4f:7e:fe:be:ce:33:9a:20:61:c4:4d:81:0d:2f:64:
6b:6f:61:83:f6:ed:b4:e6:d4:94:50:d4:91:b0:15:1e:82:12:
f4:46:19:b3:41:86:91:36:b4:21:0c:db:4a:b4:05:ee:25:40:
5c:38:77:ea:f4:c7:d9:5c:d4:c6:77:f5:57:6d:01:55:ce:5c:
b6:83:b0:c2:e9:21:9a:19:9e:85:b2:a8:dd:a6:9f:3c:09:50:
a0:06:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:43 2026 by rpki-client