Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: WFIcUIOb2U9RpGdbrg4JA1hW1i3LNafIWAEcgf7pcR0=
Subject key identifier: 03:F2:2A:91:0A:17:D1:5D:08:FE:0D:86:77:89:63:B1:BB:6A:71:34
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 019D28F33A89E3ECD678602F31375D268CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 0765
Signing time: Thu 26 Mar 2026 07:02:01 +0000
Manifest this update: Thu 26 Mar 2026 07:02:01 +0000
Manifest next update: Fri 27 Mar 2026 07:02:01 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: tvJW5VAbAjgFTXT4bYJs/yNvHe2Ww6u6hCLnghG3eNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3a:89:e3:ec:d6:78:60:2f:31:37:5d:26:8c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Mar 26 07:02:01 2026 GMT
Not After : Mar 27 07:02:01 2026 GMT
Subject: CN=03f22a910a17d15d08fe0d86778963b1bb6a7134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:69:c8:05:51:23:6c:1b:62:f5:e8:e9:72:
4d:05:87:ef:7b:00:e8:75:e1:52:b1:a6:50:72:22:
0f:16:c7:b0:77:8a:80:f8:9c:c5:85:0b:dd:b0:64:
ca:7b:2f:75:17:e5:54:69:d7:c7:57:85:6a:44:9a:
20:1a:6f:07:a3:a8:21:8f:8b:4f:7f:3b:18:5c:89:
85:5e:42:06:f1:ce:24:11:95:85:88:e1:0e:a5:02:
e6:6f:2f:78:f9:4c:ee:09:e5:2d:53:7e:0f:7d:d2:
be:d5:1a:f0:b8:7d:46:81:23:db:d0:5a:bd:0f:97:
9a:16:c5:ff:6c:b4:de:3a:da:0f:26:61:54:cb:b5:
9e:e2:8f:f9:e1:8b:b7:98:a1:61:0b:26:8b:b7:e0:
55:c9:40:cc:6d:a2:de:b4:bf:51:4e:d9:01:99:76:
06:c1:24:74:0c:12:40:8e:81:a1:30:59:e7:5a:7a:
cc:cf:04:f9:84:38:48:cc:53:65:39:32:2a:6c:c1:
5d:8e:a3:77:e6:bf:6b:63:5b:25:b3:f9:40:d4:fc:
8b:13:ab:03:c7:86:b4:a6:92:b5:94:79:57:34:bb:
91:33:07:c1:71:5d:bd:f6:12:bf:ec:16:19:f3:2b:
99:27:74:b8:57:9a:f4:92:73:02:2b:07:16:f3:2d:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:2A:91:0A:17:D1:5D:08:FE:0D:86:77:89:63:B1:BB:6A:71:34
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5e:5e:05:f8:15:df:f2:a2:6e:92:90:c3:70:8a:70:68:30:
90:b8:d5:75:4d:92:bf:c6:c8:95:09:7f:f6:0a:24:77:43:f5:
5d:b5:9c:39:d7:85:86:c2:4b:dc:08:22:ae:da:29:64:98:78:
93:10:7a:88:db:d4:56:a0:bb:5c:0a:56:9a:94:9f:c6:21:29:
10:04:8c:81:c8:5e:2b:fb:7f:a7:9f:1c:99:5d:39:e3:b3:68:
c4:10:00:9d:a3:f7:bd:0e:31:9e:6f:db:fc:ae:d8:7b:1a:81:
78:4f:3b:6a:03:49:f1:94:c8:9a:06:59:96:f8:94:13:95:18:
25:69:2f:32:25:5b:ec:ba:e6:81:bf:0e:55:92:52:db:ba:7a:
99:b3:f0:a0:f8:f4:e8:eb:c4:6c:89:d3:4c:fe:21:9e:11:45:
a3:cc:c0:57:df:62:fc:0e:fc:ab:19:98:32:ea:04:87:0e:41:
6d:1c:fd:e5:21:4a:b6:e6:fd:eb:39:8b:36:8a:e3:c4:a6:78:
16:a0:ae:4b:e3:18:0b:a8:b5:f6:46:db:6e:ec:ac:3f:21:94:
19:f5:f3:93:be:a2:a3:7b:32:d0:d2:f2:d8:09:9f:3a:f9:e5:
91:4e:4c:68:b3:1c:06:20:b8:d3:d4:87:08:b1:e8:ce:46:22:
1b:03:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:53 2026 by rpki-client