Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
File: v1axbhD6Re7KFoexaJ_CHxgR53U.mft (raw, json)
Hash identifier: TY32hfbafQf/E45K5gQlIHqJ6UHXmbUa6y0U/I8gXHc=
Subject key identifier: 4A:7F:AF:FD:16:E2:D1:83:0A:A3:DF:33:54:6C:B8:30:B8:21:C2:22
Authority key identifier: BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
Certificate issuer: /CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Certificate serial: 019D3375DDAC454D33E55E9396B902E1B9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
Manifest number: B9
Signing time: Sat 28 Mar 2026 08:00:55 +0000
Manifest this update: Sat 28 Mar 2026 08:00:55 +0000
Manifest next update: Sun 29 Mar 2026 08:00:55 +0000
Files and hashes: 1: v1axbhD6Re7KFoexaJ_CHxgR53U.crl (hash: vHQWq+TzxdpYMLFS2bv6pHxPu87vA7AN8OzaR+DpTiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:dd:ac:45:4d:33:e5:5e:93:96:b9:02:e1:b9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Validity
Not Before: Mar 28 08:00:55 2026 GMT
Not After : Mar 29 08:00:55 2026 GMT
Subject: CN=4a7faffd16e2d1830aa3df33546cb830b821c222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:63:45:44:44:8c:05:6f:8f:b4:75:9b:0f:
32:f0:6e:0e:54:73:43:9d:08:21:f7:2d:96:a2:07:
0e:22:93:d2:26:65:ba:e7:84:5e:1a:6f:a1:07:2e:
ee:e8:c4:36:f6:15:1d:03:47:a6:61:6e:93:6b:42:
ba:6b:4f:bf:b2:87:53:00:2e:30:71:a1:9a:52:17:
99:b9:6d:3d:0f:e5:a6:18:d9:6d:6c:4b:e1:27:d7:
9d:01:d6:5f:95:ab:92:b1:23:65:2a:7b:19:fe:7d:
e8:51:06:3e:a4:56:1b:54:5b:b2:9b:28:68:8c:b7:
b5:9a:b5:bd:90:bc:64:79:f7:0c:dc:5c:be:e0:f3:
60:a7:81:6f:18:fd:de:70:4e:62:ab:ec:55:09:a1:
0c:af:e4:74:30:a7:31:6c:4b:23:9e:88:89:35:f0:
ad:32:4a:df:8a:71:43:09:ee:44:b5:0b:c8:7b:a9:
af:04:a9:92:7f:4e:dc:e4:80:04:37:20:db:de:9c:
bb:f8:20:dc:83:7f:37:57:eb:7e:0e:b0:ef:66:9a:
5e:8c:29:91:0e:1d:9f:e3:94:99:5b:4b:62:94:c1:
80:8d:77:ac:ce:a9:29:6a:8c:f0:6d:5a:dc:a0:ed:
fb:c6:f5:ad:3a:af:ad:28:02:c1:c0:1f:2e:a9:bb:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:AF:FD:16:E2:D1:83:0A:A3:DF:33:54:6C:B8:30:B8:21:C2:22
X509v3 Authority Key Identifier:
keyid:BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:46:e5:b2:bb:4f:58:22:25:1f:42:91:b6:ca:1c:5c:5b:7d:
e4:d0:8c:be:5c:c5:ec:60:32:f6:65:35:13:bf:fd:cc:07:84:
45:ee:18:a3:13:5d:ac:ed:91:a7:d3:c8:fb:a1:e8:86:47:a6:
da:42:47:d4:61:2c:36:f4:7c:2e:e6:25:b3:68:51:9b:ec:37:
55:cf:58:49:d7:52:5f:82:61:31:cb:6f:f6:17:ac:4b:e5:95:
48:e2:82:44:3d:bc:b4:a9:1b:73:f6:84:ac:bc:ce:39:57:89:
15:77:b3:2b:0c:e7:94:27:a2:fa:68:98:bb:97:14:30:21:cf:
1c:18:ad:a1:f8:63:2e:e8:7b:89:ee:f4:f8:01:cb:d5:a6:48:
e6:7c:95:7e:9f:48:75:82:53:b1:3b:6e:d3:62:ff:04:9d:84:
0c:46:3c:42:aa:ab:b6:54:68:ec:15:27:43:c0:54:7d:52:39:
58:db:66:9d:63:03:a5:80:7f:c6:3c:c7:db:0d:0e:f3:a1:eb:
98:22:5b:4f:e2:8d:6e:4d:7e:8f:cf:d9:90:88:51:cd:f2:6a:
ab:ac:39:74:fb:e2:08:99:f5:26:51:e1:78:24:57:f5:44:60:
a4:f3:ea:dc:c5:2a:1c:4b:0f:ef:9b:66:0d:57:ed:3a:b6:17:
4a:4f:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:35 2026 by rpki-client