Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
File: bSsrfHiimiI-pZxnydqj3H7bHnQ.mft (raw, json)
Hash identifier: ZWAA7obWaxahS83tCO0CJeqDuMa2Ck236LR86T6j9pk=
Subject key identifier: 9B:F9:DB:36:FF:D4:75:81:54:5C:AC:B3:E1:D2:86:B0:F7:DB:59:AD
Authority key identifier: 6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
Certificate issuer: /CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Certificate serial: 019D27A8DBB86824309ADC0EA31511950C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
Manifest number: 0450
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: bSsrfHiimiI-pZxnydqj3H7bHnQ.crl (hash: qxxR7jvP4tSgr23clacs0NNUhpZJx1zTuuWlD3j/d9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:db:b8:68:24:30:9a:dc:0e:a3:15:11:95:0c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=9bf9db36ffd47581545cacb3e1d286b0f7db59ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:d6:66:dc:07:fa:0f:c4:58:05:be:84:87:
e9:6e:23:5f:02:d8:19:d9:57:15:5a:1e:e2:71:98:
29:e9:d8:aa:db:a9:85:ca:72:df:90:cb:28:7d:cd:
55:4b:ec:75:ab:df:e6:c7:bf:9b:0f:22:ed:79:5b:
84:e2:53:41:6f:f4:62:f0:af:6f:67:06:1e:ee:74:
e8:f9:f5:df:1f:b8:2f:5d:f7:0a:67:bb:7d:c1:8e:
58:09:78:33:1b:94:59:6f:b1:aa:d8:04:2a:fe:3d:
a2:2f:48:68:f5:32:91:6a:17:5b:f6:af:2a:58:ed:
17:ec:3e:8f:9c:22:73:1d:4d:3e:1f:df:7f:f6:7b:
24:70:15:ad:06:fb:17:81:99:83:68:9d:fc:a1:12:
62:0c:0c:53:6d:b1:93:a8:e2:6f:46:7c:0d:02:d0:
ad:90:f6:23:50:47:08:59:bf:bc:fc:9f:d4:43:a8:
4e:1a:ec:8c:6c:b1:a1:0b:2e:27:b9:49:fd:15:a4:
b1:27:f6:01:f5:56:2c:66:49:d3:21:51:73:ff:1d:
ac:b6:7d:ce:5a:b1:99:67:d9:a0:d2:d1:7e:fe:3d:
76:49:ef:76:84:00:3d:a2:f5:e5:15:25:af:96:2c:
fb:6f:9c:18:6c:b9:ac:26:ab:b8:bd:44:13:8f:14:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:DB:36:FF:D4:75:81:54:5C:AC:B3:E1:D2:86:B0:F7:DB:59:AD
X509v3 Authority Key Identifier:
keyid:6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cb:47:b3:ab:20:59:cc:0d:e5:c3:95:5b:8b:08:a3:c4:ec:
3c:9a:59:78:9e:ca:a2:23:7b:55:8b:c2:73:f9:ec:bc:10:fe:
a5:a0:9c:05:0d:28:5b:d6:ee:7a:4b:30:6b:77:c7:fc:06:f4:
b6:57:d0:66:37:65:1c:fb:7d:b5:8d:2d:8c:2c:46:0a:60:10:
17:75:93:00:51:b0:5d:01:54:ae:45:18:c5:01:29:50:be:4d:
b3:10:c1:00:c1:d4:76:17:47:62:ab:b8:fc:b1:84:a2:21:e9:
5a:83:05:fb:fe:52:5e:e2:6c:2a:d7:3f:b1:b1:15:79:40:9b:
2c:d6:90:3f:41:b8:e5:90:97:d2:33:fb:17:7f:dd:53:f8:3f:
7f:f4:24:53:68:3c:d6:45:ab:cd:9f:58:29:62:7a:55:54:f0:
a2:5c:7e:83:ea:b3:8f:ac:3b:de:3e:59:31:ef:e9:ef:53:95:
03:ac:89:f2:08:fb:b0:fd:91:7c:a9:48:54:4b:b8:49:83:37:
ec:37:e8:5b:43:9a:f2:a9:ad:2f:40:ae:d7:52:ca:bc:9c:52:
05:bf:d7:95:a6:56:78:7c:7b:b0:7c:6d:37:e0:3e:11:76:0c:
fe:86:4c:52:31:6d:f7:88:49:69:61:c4:22:f5:a9:46:80:f7:
db:61:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:20 2026 by rpki-client