Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: uMMwG3ksuonVA24z8d6K1AqsU758FSEw6RXP9D007Bg=
Subject key identifier: 07:B2:B0:1E:9F:AB:97:40:B1:6B:CD:FE:E8:DB:CC:79:D8:A1:10:61
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019D27044DEC3649196DA55EE8677911E3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0BE2
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: JJhB3Ro2YWSxctvzj1EL3G+/+/60tSQWogg13AKu6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4d:ec:36:49:19:6d:a5:5e:e8:67:79:11:e3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=07b2b01e9fab9740b16bcdfee8dbcc79d8a11061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:bf:22:d1:ea:7e:70:3a:e5:41:a8:90:3a:
ec:cb:27:3b:14:b9:2a:32:a2:0f:a7:1f:93:08:74:
f3:2a:fd:c4:51:93:1a:94:35:4c:cb:2a:30:77:ff:
fc:70:7d:e5:0d:e1:e1:89:0c:11:f2:1a:b4:59:4b:
60:85:78:e9:91:ef:85:3b:8c:11:96:5e:c8:ec:46:
42:31:ad:92:3a:30:73:0d:b1:6e:95:67:58:14:86:
7c:57:d7:fb:36:4b:d6:84:08:75:63:3a:fa:db:34:
62:f4:56:20:2e:0c:1f:95:bd:62:d8:27:10:b7:71:
2e:ec:f4:d1:e2:6c:dd:58:04:23:59:60:00:81:4c:
2c:97:9d:3e:0f:0c:96:63:6f:67:18:76:a6:d4:5f:
3f:cb:ae:75:1e:33:bd:b2:7d:48:3f:95:49:e2:ef:
f3:2f:de:c0:ad:e7:2a:0a:24:54:6e:9a:5e:ff:2f:
95:f9:cd:a5:d0:6d:c4:a8:a1:fa:94:05:88:5c:66:
91:f4:6d:d0:25:28:39:39:f6:cf:aa:fc:98:e8:9d:
b6:0a:b4:8c:54:78:3e:65:53:4d:3c:72:e4:9f:67:
b3:1e:8a:62:53:3d:31:30:ea:55:7e:3f:7e:71:c2:
b1:8c:80:ba:8a:04:74:47:a1:04:05:96:18:6e:f9:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B2:B0:1E:9F:AB:97:40:B1:6B:CD:FE:E8:DB:CC:79:D8:A1:10:61
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:92:96:c2:09:1d:68:bc:ca:ce:9c:15:f6:13:98:81:08:e9:
82:aa:e1:ee:e4:5f:62:a4:8e:38:12:c8:56:3c:20:80:4a:8d:
18:63:14:75:b0:4c:7e:fb:57:b5:27:0c:6d:27:db:82:97:cd:
f2:14:79:7c:de:7d:dc:cc:2d:a6:89:c5:87:2b:ca:7d:ab:0a:
da:c1:92:78:25:b0:17:32:c6:f6:39:88:8a:aa:b0:30:74:0d:
07:c3:1d:a9:38:2e:a2:2c:ed:3e:4b:71:40:44:93:1b:63:60:
66:8c:ab:95:d6:01:18:1f:ae:73:60:ee:34:04:82:8c:8b:61:
1c:12:83:80:6c:4e:57:06:a4:af:10:80:d1:bd:f1:1d:3a:6b:
73:35:fd:49:0f:6e:23:9e:f2:f5:2f:a5:48:3b:73:8a:4e:fc:
36:c8:7d:ee:51:a3:80:42:24:3d:86:45:3a:e1:d2:26:0a:67:
15:11:d2:fa:16:99:6d:b7:ab:a6:90:fa:07:61:b2:09:bd:9b:
b4:ac:f7:65:51:e2:52:50:f9:27:74:4e:32:cf:d0:46:2f:17:
e8:ca:43:66:8a:6e:f9:ee:ea:c8:90:7b:60:d7:91:9a:20:12:
ff:8a:9d:a3:fc:df:19:d2:f7:82:c6:7f:2f:49:db:0b:97:9a:
fd:1d:4e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:25:33 2026 by rpki-client