Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier: Mr9TcM0uxtS/X2drPoZ1bPgxtS7Q7n7apYJ3qDcobEs=
Subject key identifier: C1:19:E4:10:69:CE:64:F1:7B:02:7A:7E:9D:AB:44:90:BC:4B:A0:9A
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer: /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial: 019D28F255F6C1FC86F9291134D54E06D261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number: 0B1E
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: 27QqziFLnwfGqU7pusVA0vihojzfsg1AIc4Qjf5kWmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:55:f6:c1:fc:86:f9:29:11:34:d5:4e:06:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=c119e41069ce64f17b027a7e9dab4490bc4ba09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:bc:99:22:2e:3e:d5:a3:51:0b:b5:c5:02:
70:68:d5:5c:b9:03:f1:5e:fb:ff:3a:1b:16:f4:f4:
4c:4a:3c:ba:93:3c:99:b5:9f:ef:bc:4f:65:93:83:
14:69:d3:9e:aa:f8:5b:0c:4b:35:81:98:57:90:cc:
e8:9a:99:2a:48:08:75:da:5a:44:8a:ef:9f:06:71:
f4:d8:05:2b:44:58:43:0f:a7:0f:a2:18:fb:2c:fd:
fc:1e:f3:76:03:71:59:27:9a:8a:16:52:7c:19:3c:
de:36:a5:96:0d:50:05:e8:48:4d:df:e9:c7:e9:68:
49:fc:1f:b0:d0:3d:3c:07:c5:21:f3:39:c4:8e:ed:
a6:30:05:3b:dd:43:bd:85:1d:64:35:c3:8c:81:a7:
8d:a0:9d:9c:13:15:06:33:6c:42:fc:77:c4:df:3a:
d0:e5:c2:f2:b0:e0:a1:c9:00:2f:0d:38:4a:26:a4:
02:42:71:34:f5:d6:3d:c4:2e:6a:c5:ae:65:85:6a:
ca:77:15:e7:bc:c4:44:ed:59:a5:17:7c:31:47:eb:
b3:04:9e:2f:27:0f:3b:48:90:64:d9:b3:1b:69:af:
a6:31:66:02:76:00:38:3e:16:69:64:ee:3d:97:b4:
6f:8a:a4:27:50:63:05:64:d9:85:04:0d:70:e0:b8:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:E4:10:69:CE:64:F1:7B:02:7A:7E:9D:AB:44:90:BC:4B:A0:9A
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:aa:55:97:a2:08:b3:fa:aa:97:53:0f:5e:29:28:6c:86:ae:
0e:56:48:c3:35:cb:b0:b5:fc:b7:24:49:a6:f5:b1:ed:53:7c:
ae:a9:bb:3c:03:fb:f9:c8:51:80:ab:17:e3:f1:54:b2:ca:96:
7a:e0:83:0b:0e:3a:03:bb:f8:42:ba:cd:3e:d2:a7:d5:e4:f8:
a4:44:70:64:50:18:d1:b6:f0:b7:ab:88:35:96:96:75:4e:e8:
5e:0b:92:ce:4c:f1:4c:ee:26:c8:91:4f:44:60:a4:33:63:62:
a7:78:31:17:b0:c5:89:e9:17:a3:de:09:f2:59:c8:d0:7c:95:
f0:e2:07:3a:11:b7:15:14:0e:2c:52:66:e6:a7:ee:44:25:69:
db:17:43:e6:4f:bb:8c:ee:72:a9:96:c6:fc:d8:ee:5f:38:d3:
14:61:27:e3:c7:0f:4f:c4:a1:51:50:de:40:4f:48:2c:9b:86:
f1:5c:89:17:8a:9b:2f:ff:34:7e:ea:54:de:31:5c:51:18:21:
63:26:6f:24:d9:c4:11:67:79:77:43:a3:a2:27:bc:dd:95:92:
c6:b9:72:ae:d1:a6:3b:8c:b7:ad:30:ad:83:0b:51:0a:50:7a:
06:66:fd:5f:3a:c0:bd:90:f0:2e:e4:c5:1b:41:32:43:7d:57:
1b:9e:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:00 2026 by rpki-client