Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft
File: cM8vAv8fpzt72x-_g6u77C07HL0.mft (raw, json)
Hash identifier: JtW5zisG5x5CHZ5NyufsSDGx6OI22xQE9clgEL0/2d8=
Subject key identifier: 45:09:A3:B3:E2:AC:35:31:56:03:91:E1:3C:F3:F8:13:13:3A:4D:D7
Authority key identifier: 70:CF:2F:02:FF:1F:A7:3B:7B:DB:1F:BF:83:AB:BB:EC:2D:3B:1C:BD
Certificate issuer: /CN=70cf2f02ff1fa73b7bdb1fbf83abbbec2d3b1cbd
Certificate serial: 019D27E0558745B36B40A39EF1B59434FF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM8vAv8fpzt72x-_g6u77C07HL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft
Manifest number: 0160
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: cM8vAv8fpzt72x-_g6u77C07HL0.crl (hash: VdNcRtMDXZPvPCfKLzS162bO6Z/qPEH2P4sd3CGQDgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM8vAv8fpzt72x-_g6u77C07HL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:55:87:45:b3:6b:40:a3:9e:f1:b5:94:34:ff:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cf2f02ff1fa73b7bdb1fbf83abbbec2d3b1cbd
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=4509a3b3e2ac3531560391e13cf3f813133a4dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d8:fe:86:39:ca:46:27:8d:d5:29:30:37:46:
49:1b:c8:f3:e9:02:27:fc:e3:46:07:0f:09:d4:be:
a3:c1:02:8b:02:e2:2a:85:8c:da:85:79:e4:ad:26:
87:24:ad:f5:fb:19:46:5b:12:60:b7:d4:1b:cc:fb:
e7:95:c9:39:8c:f9:00:9e:31:ef:f6:0e:97:04:de:
4c:a0:4c:a5:21:5f:a9:ed:e5:dc:1a:ef:90:95:96:
33:8f:69:86:d4:c8:65:1a:67:f6:1f:53:c5:15:3d:
b2:15:1d:be:e5:fe:ef:f9:19:c9:9b:35:b2:82:e7:
31:53:28:5a:87:32:aa:54:d2:0f:a3:01:d5:dc:82:
53:8d:0b:46:25:45:ee:d3:80:62:b9:3a:b8:43:4a:
d1:c2:ea:62:9c:4a:51:1a:c1:9c:41:0d:da:a6:78:
c2:78:da:65:68:c0:ea:b0:53:7f:9b:b0:8d:95:8b:
f6:54:b3:30:21:b8:df:49:8a:5b:b0:7e:52:42:3d:
23:10:e1:cb:3b:32:24:d7:3a:22:d9:76:83:50:ca:
e2:f5:d8:dc:82:0a:9e:bf:15:db:55:98:e7:20:f1:
c9:87:43:d7:67:73:70:6a:73:32:da:af:d5:26:5b:
0e:be:e7:2f:a3:7e:d2:29:1c:de:c3:43:42:85:ed:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:09:A3:B3:E2:AC:35:31:56:03:91:E1:3C:F3:F8:13:13:3A:4D:D7
X509v3 Authority Key Identifier:
keyid:70:CF:2F:02:FF:1F:A7:3B:7B:DB:1F:BF:83:AB:BB:EC:2D:3B:1C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM8vAv8fpzt72x-_g6u77C07HL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:57:e0:4a:46:1d:ef:12:66:e9:26:6e:0d:6b:15:e2:b5:2d:
63:02:19:c9:a9:a9:93:dc:b0:57:a4:aa:ee:ed:12:79:4c:46:
69:b5:43:a8:9a:78:77:b5:6d:41:c6:6b:a8:5b:25:b6:da:ef:
2e:e7:20:e1:14:63:dc:b0:91:b7:5f:03:63:19:c7:38:cc:10:
0f:c6:b6:5b:5d:93:09:ab:08:4b:bc:2f:c0:ac:0e:82:f9:ac:
46:41:50:e6:29:7a:00:23:e4:60:ac:1f:3f:23:0c:ae:9b:e4:
90:d2:28:2c:c2:37:7d:b3:1d:1a:a4:2b:fa:64:e1:ca:62:c9:
ad:7e:e5:3a:de:92:ed:91:48:79:95:36:9f:18:ad:c6:bb:71:
22:40:35:26:7d:ea:39:8f:32:b0:91:b3:3b:57:d9:82:6a:57:
4e:38:99:14:ed:33:ad:da:f9:64:7e:fb:d8:7f:6d:4b:f5:42:
bf:10:3e:07:07:2b:a6:47:3f:90:d5:b3:3a:0e:56:e5:b1:4e:
38:78:20:f1:46:ca:83:1b:83:0b:22:d6:32:88:c5:78:88:80:
f8:ee:9f:ce:a2:95:46:0f:69:10:20:99:0f:56:18:00:54:45:
4e:1b:53:cc:2e:0e:19:8d:b0:1e:5b:6b:50:b7:8c:31:0d:45:
f0:35:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:27 2026 by rpki-client