Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: csCGsrLEs8SvoQzaegsZT+S06ENpCYcvsLFJ6vDgjA8=
Subject key identifier: 3D:24:4B:58:6A:40:12:35:40:1C:7F:EF:84:24:BC:A2:94:84:AD:D8
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 019D27048B08710F8D5489F1D83C3F25663A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:42 +0000
Manifest this update: Wed 25 Mar 2026 22:01:42 +0000
Manifest next update: Thu 26 Mar 2026 22:01:42 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: WljkfB8qMJMNbuynCk5R7up28RWmBUL7B1cQ5zaZ32g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8b:08:71:0f:8d:54:89:f1:d8:3c:3f:25:66:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: Mar 25 22:01:42 2026 GMT
Not After : Mar 26 22:01:42 2026 GMT
Subject: CN=3d244b586a401235401c7fef8424bca29484add8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:d9:69:0c:6c:70:ad:16:29:c1:86:f9:c1:
fe:93:33:2f:56:7e:19:1e:6e:d6:92:4c:fa:ac:63:
a7:f3:4f:52:19:16:cc:f3:77:d4:57:10:1c:1c:b8:
42:95:a4:a2:fe:11:f8:09:03:c7:bd:6b:bd:f7:d1:
ff:2d:dc:0d:ba:89:59:31:31:6e:1d:7b:c0:90:fd:
f5:dc:7e:de:5d:bb:0f:02:23:6e:b4:ba:03:ac:a9:
8b:19:21:c4:f0:7d:eb:52:f4:06:5c:55:50:9a:5a:
d9:79:76:e8:8b:36:39:fb:43:ad:d7:1f:85:ad:ff:
2a:31:2e:30:ba:db:93:de:4a:73:b7:d5:ab:5e:28:
ec:3f:55:4d:1b:83:b5:80:44:29:e0:77:aa:13:90:
88:98:fe:f7:32:b9:eb:4c:1f:87:f8:7e:f7:a0:d3:
88:71:ff:50:90:fc:4d:5b:fb:29:3a:6f:a0:2b:c4:
62:02:2a:7c:0c:50:79:00:bb:a9:94:ce:8d:ab:c9:
c6:cd:68:6d:43:58:e8:4e:e6:84:86:6d:c0:b5:d1:
86:d9:3f:c2:3d:c1:a5:61:a8:51:b9:bd:37:09:a5:
a3:6c:0a:fc:c4:2f:5e:dc:98:e6:47:86:5b:ca:bd:
48:0c:20:23:68:d3:7d:df:62:b1:0c:e2:3b:f4:27:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:4B:58:6A:40:12:35:40:1C:7F:EF:84:24:BC:A2:94:84:AD:D8
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:db:4c:8f:70:30:be:4c:34:ac:97:0b:b5:23:25:be:4a:73:
f8:69:64:6f:3f:82:b5:53:e7:4a:9f:4a:61:dd:bc:46:dd:1a:
8e:43:ee:87:89:78:0b:41:71:b8:63:15:bf:10:af:ea:b9:46:
b5:c9:33:ee:f2:2d:e2:73:58:11:a2:e1:67:45:7b:2e:11:d9:
0b:e8:48:92:33:ca:77:42:97:4e:ba:0f:9d:13:d3:2b:8f:bb:
c2:57:47:26:06:d2:11:35:c7:bc:c9:a9:09:7a:ec:48:a3:9d:
41:52:b3:cc:b4:e5:57:f7:13:f4:56:25:d1:fd:f0:f0:91:c9:
77:a7:0a:57:81:b6:9f:6b:fb:eb:13:5b:32:23:af:1b:66:63:
b5:a1:3b:01:f4:92:c6:e2:f6:4c:10:1a:22:43:00:eb:3b:de:
68:d8:27:09:d3:ba:0e:68:4b:86:ed:04:1d:46:86:b0:a6:36:
75:d6:49:50:85:6a:11:59:71:7b:13:17:c5:bb:2a:5a:13:3f:
fe:b3:89:8f:b0:02:f9:f2:52:17:48:1d:df:21:a8:48:01:91:
5b:fa:e1:ea:71:b5:81:b1:52:28:b7:6e:82:53:cd:bf:48:0c:
84:7a:66:4a:b7:f0:53:94:dd:fd:f6:ac:c6:2a:36:ac:9f:51:
66:b2:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:32 2026 by rpki-client