Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
File: CteC3XOwPU5NdCHikNY6rfdcFyg.mft (raw, json)
Hash identifier: K7p7rCgpNLo1gZvILs4LOyLl4u54eu4ibcGVCd7NSDI=
Subject key identifier: 98:31:DB:86:A5:E8:B9:55:D0:71:40:D2:F5:A2:2F:F7:70:63:7C:A6
Authority key identifier: 0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
Certificate issuer: /CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Certificate serial: 019D27A916C3D0A802462E59EA2A740FFDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
Manifest number: 01FB
Signing time: Thu 26 Mar 2026 01:01:25 +0000
Manifest this update: Thu 26 Mar 2026 01:01:25 +0000
Manifest next update: Fri 27 Mar 2026 01:01:25 +0000
Files and hashes: 1: CteC3XOwPU5NdCHikNY6rfdcFyg.crl (hash: DFrBI/lQ7vTQBwPfYEaYClKmknzjYHJqqQqb7VbX4IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:16:c3:d0:a8:02:46:2e:59:ea:2a:74:0f:fd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Validity
Not Before: Mar 26 01:01:25 2026 GMT
Not After : Mar 27 01:01:25 2026 GMT
Subject: CN=9831db86a5e8b955d07140d2f5a22ff770637ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:70:ec:bc:52:47:9d:3b:c7:0e:fd:8f:1a:
c2:38:ec:5e:6e:d5:0b:c3:4d:e3:ed:f5:68:f5:c0:
f6:6f:5e:f0:af:77:25:de:ef:06:68:b5:3f:44:a8:
07:91:dc:59:11:4a:06:30:96:d9:53:af:7a:cd:55:
41:53:6c:49:01:aa:d0:41:e8:6e:b0:fd:f8:b1:36:
be:e7:9e:31:8a:47:4c:56:21:aa:b3:90:70:df:7d:
7e:1c:e2:e5:45:17:da:81:2c:82:1c:5d:02:da:83:
2c:13:cf:63:cd:b5:95:78:cf:2d:dc:52:ed:a9:06:
20:4b:2c:a6:89:66:18:35:67:da:44:71:7b:af:f1:
53:81:72:b1:21:8f:c2:65:ee:1b:0d:cc:d2:84:3d:
95:33:a4:d9:37:11:08:12:45:1d:df:c9:de:4b:63:
ca:1f:ea:ed:75:6b:0e:0b:e7:58:dc:6b:cf:0b:b1:
be:5a:79:4d:89:8a:2f:e6:1b:7f:9d:75:10:89:8c:
04:1c:2a:54:29:62:78:7c:db:2e:4e:4d:27:b1:af:
b7:e3:1c:37:87:45:7e:e8:b0:14:d2:4a:3e:4e:d2:
c5:33:9d:cd:e3:f3:98:af:92:84:53:8d:f3:22:8b:
51:fd:8a:00:09:1c:12:e6:14:5e:e2:c5:be:c1:c2:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:DB:86:A5:E8:B9:55:D0:71:40:D2:F5:A2:2F:F7:70:63:7C:A6
X509v3 Authority Key Identifier:
keyid:0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:83:85:33:1b:a3:72:f3:5d:71:7b:b0:84:9f:27:98:24:
66:06:cd:c6:7d:8c:c7:06:38:8c:a5:0a:b5:98:37:a0:4e:f0:
c3:64:08:50:f7:42:2b:43:ae:15:1a:31:5e:c9:48:81:c4:dd:
17:6b:f3:22:76:2c:29:3a:53:cf:ac:b3:bc:79:e4:68:95:6c:
ff:10:df:15:b8:c8:89:40:f7:03:f9:d1:fb:3e:74:41:3a:1a:
31:90:7d:fd:86:a2:7a:7e:30:a6:db:2e:be:74:e0:f9:00:f7:
91:f4:49:d6:ce:03:8a:46:36:d0:8c:85:ca:c2:a8:2a:69:42:
4a:fd:7d:af:fe:06:e0:c3:13:da:1d:76:50:5c:8c:27:cb:91:
e7:30:eb:04:f9:87:49:a0:92:89:f5:69:84:b2:c1:0d:67:f1:
24:18:fc:b1:70:57:47:e9:26:00:03:85:f9:30:18:7f:c4:50:
55:c0:e1:48:28:43:4f:9d:fc:1a:d3:d9:65:bc:ef:5c:3d:6a:
dc:7f:d1:ab:43:5b:a6:ed:0c:88:43:39:d7:4f:95:5f:2d:8d:
f7:12:d5:3f:86:71:f4:c2:e5:8a:2a:11:da:72:0b:57:9c:77:
15:c5:c4:a0:6e:3a:e0:ba:97:e6:d1:5f:90:0d:4c:c3:f2:f9:
66:ed:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:50 2026 by rpki-client