Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier: z/hhx4P/9s53RzqbsFyLM/zULz/MAsQXzyUcspDvd/k=
Subject key identifier: 66:97:D9:D1:0E:E9:ED:02:59:77:2C:02:5D:F8:D9:70:64:BD:BB:99
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial: 019D25F1E4999CCCB17E702A4B4B63FF49B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 17:01:42 +0000
Manifest this update: Wed 25 Mar 2026 17:01:42 +0000
Manifest next update: Thu 26 Mar 2026 17:01:42 +0000
Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: prAdPCbV1SoqqDuH/umFSTbRaU4SA+AXw0d1kjhXwfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e4:99:9c:cc:b1:7e:70:2a:4b:4b:63:ff:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
Validity
Not Before: Mar 25 17:01:42 2026 GMT
Not After : Mar 26 17:01:42 2026 GMT
Subject: CN=6697d9d10ee9ed0259772c025df8d97064bdbb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:df:0c:22:00:bb:8e:34:f8:c8:3b:4f:93:
40:e8:f4:7c:b0:64:e2:2b:15:e0:95:f8:2c:c2:9f:
6f:2d:06:84:1a:3c:42:2e:99:6f:89:50:34:bd:77:
01:24:56:a3:0e:a9:66:4b:3e:6f:1c:d9:3e:ae:39:
53:c3:00:91:85:4e:55:48:b4:de:e2:02:e1:b6:38:
24:5c:16:35:be:c1:b6:94:17:f5:2a:21:ab:b3:63:
a0:b8:90:6b:2f:d2:47:2b:ad:fe:b7:eb:3b:f0:97:
74:08:a3:0f:3f:45:98:93:33:2e:ac:81:e4:2d:95:
72:e1:f5:4d:2c:5a:62:4e:28:0a:18:f8:13:d0:92:
07:c7:2b:0d:ce:06:e8:d0:5b:f9:cc:53:20:93:0f:
1e:d3:af:f1:b0:65:73:c8:d0:a1:06:34:06:b5:11:
14:23:c0:33:81:5d:29:53:ce:0a:c9:32:8e:a5:c7:
21:ba:3e:fa:38:08:32:88:c6:4c:54:69:fa:b3:52:
2b:7a:1c:28:d7:b4:ef:8c:04:96:52:6b:e6:64:0e:
71:4e:bf:da:63:03:a5:fc:43:fd:e9:7f:df:68:aa:
b5:5e:af:8c:16:96:47:44:1a:f9:d8:66:2c:45:73:
bf:46:90:29:a7:82:41:22:d1:fb:92:b3:15:07:b0:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:97:D9:D1:0E:E9:ED:02:59:77:2C:02:5D:F8:D9:70:64:BD:BB:99
X509v3 Authority Key Identifier:
keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:45:02:8b:a7:fb:96:76:93:ac:b2:7f:b4:07:9b:94:d9:a4:
1a:0c:75:30:0f:51:47:dd:f0:2b:53:cd:70:a4:d6:66:4f:d6:
fb:9c:9a:6d:68:f0:49:8e:38:4f:2e:ad:cf:a7:b7:60:97:b1:
11:b1:99:3c:34:3b:1d:84:72:63:3a:13:05:b4:e9:b4:ef:9f:
ff:eb:9b:7e:05:84:10:c7:37:e3:73:a3:73:5d:3b:02:c5:42:
3e:14:ca:e7:42:94:36:54:df:3e:45:50:58:20:d8:32:c0:18:
6c:8d:89:28:54:fa:b2:70:f1:ed:3e:83:32:91:4f:bc:a5:04:
1d:ee:57:07:58:d0:ff:1e:55:b4:a3:9c:55:3c:23:ff:c7:12:
8c:db:7a:81:7a:f1:59:30:9b:dc:c8:90:ec:1b:a3:51:d0:45:
97:81:b2:82:83:53:93:52:dd:5c:d6:e6:4f:25:2d:78:00:67:
89:25:e4:bf:8d:be:f5:1d:49:83:46:55:47:04:52:c6:d7:6e:
44:8d:77:d3:8b:80:f4:51:c1:b6:45:a2:2a:0d:fc:e8:09:f2:
a0:cb:a1:67:30:90:d5:95:42:c2:07:ff:81:1e:9e:13:a5:d8:
93:24:35:5c:90:b4:7c:77:27:4c:f4:a1:a3:4b:3e:94:17:52:
ef:38:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:42 2026 by rpki-client