Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier: XH5uWCBCKHP+dNTW4gUmoNA3EZzClY/60ofBVVwfjdA=
Subject key identifier: CD:37:C8:D4:44:3F:C8:8D:4B:A7:7C:D6:DA:01:D2:93:43:B2:EB:BE
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial: 019D2CCFB8E3444FC7D4F60B0CD6D3FAE647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number: 0BBB
Signing time: Fri 27 Mar 2026 01:01:43 +0000
Manifest this update: Fri 27 Mar 2026 01:01:43 +0000
Manifest next update: Sat 28 Mar 2026 01:01:43 +0000
Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: Kqu7SLBTrynOuFb9WgALjvgstym42yA0zlJqH8u/5Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:b8:e3:44:4f:c7:d4:f6:0b:0c:d6:d3:fa:e6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Validity
Not Before: Mar 27 01:01:43 2026 GMT
Not After : Mar 28 01:01:43 2026 GMT
Subject: CN=cd37c8d4443fc88d4ba77cd6da01d29343b2ebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:ea:75:b2:66:79:cb:ba:0e:44:26:13:75:
8c:05:a1:2d:50:b3:a5:64:71:dc:5a:8d:3c:ae:63:
19:3a:09:ee:08:fe:7c:ce:9e:b0:a2:f6:9f:9c:6e:
e9:93:77:10:5c:53:52:69:10:f5:64:d8:36:7b:d1:
bb:8e:31:7a:6e:2b:3b:1e:f3:3d:c5:79:cb:2c:f5:
54:a6:a9:e4:2c:c8:3d:dc:08:c4:e2:60:28:32:51:
ec:ae:7f:8e:99:27:3b:2e:f6:15:63:90:cf:da:79:
b8:03:af:1b:d3:bc:94:f0:a4:43:82:33:85:67:df:
bc:85:4e:5f:3d:0e:0e:9f:c5:1b:24:be:1f:66:06:
dd:34:85:6a:df:fb:6c:85:33:15:13:b2:da:de:b0:
aa:09:2b:13:1b:d9:dc:0b:16:36:62:5d:04:e3:84:
c2:4e:ef:15:03:1e:64:fe:6e:ac:a5:ee:84:39:27:
05:2d:be:03:ce:f3:30:87:91:4a:bf:23:6e:e9:3e:
87:c4:b2:cd:46:b1:e9:98:fe:f5:ce:f8:86:99:b0:
25:fb:04:29:6b:19:40:1b:ac:f2:46:45:e0:19:f4:
31:65:07:ec:7e:47:87:85:c6:ed:c1:a5:58:60:52:
a9:dc:2a:68:01:44:05:ab:34:63:59:7f:eb:97:62:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:C8:D4:44:3F:C8:8D:4B:A7:7C:D6:DA:01:D2:93:43:B2:EB:BE
X509v3 Authority Key Identifier:
keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6a:95:fd:3c:30:fc:93:9f:ba:a4:4b:d9:fd:d6:31:b2:e7:
94:82:42:81:d7:08:3a:75:93:95:48:66:33:d9:97:ca:54:e7:
21:70:19:d9:6f:38:09:0b:d3:cd:83:2a:96:90:b2:de:75:13:
65:07:63:41:2c:21:fe:6d:94:2d:2f:27:31:dc:ac:97:bd:5d:
ab:13:40:34:65:3c:d8:1f:d2:da:6f:4b:f0:04:d6:cb:a5:80:
6e:20:54:8b:d9:80:a6:bc:b9:71:06:2e:00:02:cc:98:1f:1d:
1d:db:85:dc:1f:b0:56:03:61:30:31:00:ef:0a:15:03:0d:aa:
24:f5:2d:15:62:0b:54:bd:c8:38:15:6c:bf:62:d1:5a:12:0f:
9d:18:ce:d8:ba:ee:30:6c:b4:a5:b0:0d:60:98:a8:8e:e8:4c:
21:85:db:23:5a:9c:40:b1:1d:30:05:e1:30:27:3c:d7:5f:be:
55:d3:b1:75:29:84:e7:26:2b:5c:a9:c7:8d:25:9f:ee:db:11:
77:11:59:64:98:71:dd:d8:cc:bb:be:24:ad:50:ac:93:ed:ac:
e2:b3:ef:f8:31:65:e0:18:ec:63:ac:51:c8:14:f6:50:26:1c:
b1:79:89:06:79:ee:bb:0c:a5:0c:e4:79:42:2d:f2:e4:8a:11:
8b:61:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:22 2026 by rpki-client