Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier: 3sQSdgs44Fq+mHfZnBx79qFV3odWMqAy1y/rUu/smtY=
Subject key identifier: DD:B3:80:79:B2:52:F0:3D:54:18:09:6B:59:31:21:90:D5:B9:84:D2
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial: 019E1E35580D2AA85FD81B17597DC862AD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number: 0F00
Signing time: Tue 12 May 2026 22:01:12 +0000
Manifest this update: Tue 12 May 2026 22:01:12 +0000
Manifest next update: Wed 13 May 2026 22:01:12 +0000
Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: I/UA7Hf4fluuCUhH1tVoYAEpW+VqkUmDg+CJtUfB6zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:58:0d:2a:a8:5f:d8:1b:17:59:7d:c8:62:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Validity
Not Before: May 12 22:01:12 2026 GMT
Not After : May 13 22:01:12 2026 GMT
Subject: CN=ddb38079b252f03d5418096b59312190d5b984d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:bc:ba:b7:09:ca:80:aa:58:8b:be:65:60:
08:d3:d9:e8:1f:fe:47:eb:06:d3:46:9b:f9:74:34:
e6:11:9c:77:36:71:2f:9a:ac:29:b2:48:c3:b6:a4:
51:d9:a2:8f:12:a6:00:db:f1:b7:31:7e:2d:83:2d:
61:c5:4a:5d:d8:50:60:ac:e4:79:8f:f0:89:43:de:
4c:50:2e:9a:44:3b:c6:98:bf:e1:71:63:aa:ff:70:
96:df:9a:95:17:6b:87:8d:02:19:e5:ee:59:fc:f7:
62:44:f9:f6:c3:92:24:79:7a:0f:ff:3d:aa:33:dc:
07:98:01:a1:27:71:df:2e:8b:c6:17:b3:18:6d:8f:
af:9e:37:41:04:bd:93:af:02:b9:23:0a:c6:45:fb:
81:5c:3b:89:ab:ff:ae:6b:64:5a:28:3b:3f:f1:d2:
f2:00:0f:d2:8e:15:3c:e1:2d:24:f0:a3:86:5a:aa:
12:d2:9c:b9:a3:01:05:f5:68:8c:bb:d6:42:8b:22:
2e:40:45:d1:13:6d:7e:04:40:01:d7:2c:ab:9e:69:
60:5d:16:d3:e5:89:26:81:7b:c8:01:92:8e:c1:b3:
d7:da:ca:39:04:b0:a3:a4:95:fe:35:ae:96:02:ad:
f2:70:93:b4:61:15:b4:82:89:c7:44:20:d1:86:33:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B3:80:79:B2:52:F0:3D:54:18:09:6B:59:31:21:90:D5:B9:84:D2
X509v3 Authority Key Identifier:
keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3c:ac:05:57:bb:b0:6b:d7:00:f1:0a:7d:09:c5:b9:5b:3d:
05:24:39:32:bd:49:f7:2f:94:20:64:fc:31:9e:9a:1a:19:14:
5e:90:0a:6e:45:b1:f8:50:39:ce:36:be:4f:db:90:e4:d1:4b:
19:a0:c0:8e:dc:25:32:81:6c:c7:e5:2b:99:97:1c:85:b4:f6:
fc:66:46:9d:48:cf:ef:83:9b:68:dc:c9:20:a7:bc:53:bc:63:
dc:fb:ad:05:04:95:49:96:49:a3:49:f8:37:38:94:b2:30:90:
bf:87:5f:af:ba:7a:26:bc:df:b7:e3:50:70:d9:d7:dd:c8:29:
07:62:15:48:ed:90:50:ed:0b:a9:f0:8c:15:1a:11:f8:e4:e7:
36:f2:92:5a:9d:69:4a:32:e5:64:c6:68:b0:7e:b1:37:53:65:
26:fe:9b:d0:d2:c1:0c:ff:d5:65:cf:b3:79:1f:de:23:cb:c8:
2f:8f:d0:1a:7b:85:d8:c5:6f:bb:ee:ed:14:5c:e9:b6:00:49:
f2:c4:44:e7:75:7c:73:9b:ec:47:32:50:4c:9f:36:9d:88:3c:
93:c9:d5:93:63:ca:1d:3c:dc:1c:9f:20:a3:4f:63:36:10:11:
df:7c:72:c6:53:8d:ea:56:ca:c0:3a:c3:35:26:a1:de:82:4b:
86:f8:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:14 2026 by rpki-client