Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: 2P07U5WCL1pDJNhJvcI+bNdS9AbNgYbqQlg3bt70Xxo=
Subject key identifier: EE:88:1A:2D:78:A1:27:9C:F8:90:0E:9D:49:91:79:EB:D3:92:E8:E3
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 019D2704B18BEFFE66C4902269890F1E9289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 1201
Signing time: Wed 25 Mar 2026 22:01:52 +0000
Manifest this update: Wed 25 Mar 2026 22:01:52 +0000
Manifest next update: Thu 26 Mar 2026 22:01:52 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: tuqQAhUDKuFWRb4fuwfqJIXDWHTQC/ZzooTINkMHBJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b1:8b:ef:fe:66:c4:90:22:69:89:0f:1e:92:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Mar 25 22:01:52 2026 GMT
Not After : Mar 26 22:01:52 2026 GMT
Subject: CN=ee881a2d78a1279cf8900e9d499179ebd392e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:b0:48:ca:42:9d:b8:87:59:25:82:03:66:
f1:f5:52:55:f2:e7:96:ae:7e:d2:73:12:d4:43:86:
8f:df:85:68:b7:e0:7a:65:5e:67:50:1a:ba:b5:bc:
32:6e:28:c3:67:51:6f:07:b6:f8:53:94:58:3f:23:
5b:97:23:6f:a9:f1:28:42:cf:27:c5:15:07:53:5a:
ab:80:b3:2e:da:f1:d3:b1:f7:5e:26:9e:2f:00:5e:
54:a1:82:cb:00:62:eb:c6:91:54:ee:73:bf:d4:03:
ec:a4:06:31:cf:df:77:1d:f1:41:3a:f4:cb:06:61:
a0:24:ba:da:6a:ca:1e:f9:3e:94:42:a2:12:09:60:
76:e2:0f:9a:07:a1:76:ec:54:fb:c9:30:a0:b0:d9:
eb:ba:8a:dd:56:69:8b:53:69:fc:ef:01:a5:2d:c6:
02:76:95:29:50:35:c0:e3:25:e6:8a:a3:71:e6:ce:
a1:18:b5:4a:be:1a:d6:e0:3e:c5:c4:07:00:e3:4c:
d7:7e:44:f8:c9:cc:46:36:4d:ed:14:32:a1:98:4b:
b1:b2:4f:76:65:34:d6:46:de:f7:b6:8e:a8:65:53:
bd:48:4b:0f:a1:28:de:ec:71:a8:09:03:07:93:a8:
c9:bb:b8:a2:60:cd:ac:16:df:52:f4:60:57:fa:9d:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:88:1A:2D:78:A1:27:9C:F8:90:0E:9D:49:91:79:EB:D3:92:E8:E3
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2d:09:97:0a:49:ec:6a:ea:52:b1:12:59:3b:43:e0:ce:4e:
e0:fe:84:2b:64:e9:72:a4:46:3c:0b:c1:a7:26:7f:86:33:ec:
a9:6c:7d:5b:2b:2a:99:1c:a9:19:1d:ae:74:a9:58:3c:92:32:
2c:e6:69:1e:24:5a:30:0b:1e:20:0c:73:88:2f:53:c0:98:13:
27:e2:54:80:b5:4d:02:21:a9:2a:8f:52:aa:e6:ea:6e:f2:18:
a4:71:b3:76:a3:fe:01:72:6d:43:78:63:c4:3e:84:f0:61:9d:
15:21:52:c8:fb:00:48:54:bc:39:b8:23:6d:a3:1f:ed:79:b0:
11:3b:de:eb:3c:1d:92:f8:e1:e2:3d:68:7e:3e:9b:d5:3c:f8:
03:5a:4f:31:83:b6:61:d6:89:78:b1:97:f1:62:36:7a:e9:94:
d3:7a:df:c3:08:88:65:ec:17:6a:67:f0:6a:54:77:45:09:05:
cd:ef:ee:e4:e1:a7:5e:6c:72:bd:c0:a8:8d:0a:15:02:ac:cb:
11:77:91:19:f2:c1:f4:1b:6c:4c:48:16:c6:86:e5:7d:2f:91:
2e:09:e5:9b:b2:39:95:5a:c4:f4:c6:a8:04:17:b8:8f:6f:22:
c6:e9:ac:10:e0:b3:5c:1e:67:fb:4e:86:29:fb:a8:3b:59:be:
64:ed:5d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:21 2026 by rpki-client