Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: NB5WxeTK1MI5AWr9exp5ihnVoQES83gf6fGF7RdJ+Vc=
Subject key identifier: 2C:17:3F:4B:5C:9F:C1:13:A9:AA:68:E5:6B:55:95:F4:29:8F:DE:5C
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 019D28F2874BA4788F56D88E7F45059CB7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 090D
Signing time: Thu 26 Mar 2026 07:01:16 +0000
Manifest this update: Thu 26 Mar 2026 07:01:16 +0000
Manifest next update: Fri 27 Mar 2026 07:01:16 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: SM0WzfUz8egW4krtHM1uv0h3KCpMYYsLnuJAVJEb5xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:87:4b:a4:78:8f:56:d8:8e:7f:45:05:9c:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: Mar 26 07:01:16 2026 GMT
Not After : Mar 27 07:01:16 2026 GMT
Subject: CN=2c173f4b5c9fc113a9aa68e56b5595f4298fde5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:d6:b3:08:90:c3:8b:1c:77:a8:11:36:5c:
25:3d:40:b1:54:f7:37:2b:bf:30:4c:ba:a2:02:08:
89:45:18:8c:ff:9d:26:30:96:6d:27:c0:c8:f9:c7:
11:df:99:5e:11:e8:e1:d0:fd:4c:e2:b1:c8:e5:83:
8e:36:18:08:c7:4a:02:ba:dc:3e:8c:77:aa:c2:5d:
2b:d9:1c:2a:42:b4:d6:32:ba:d7:68:c2:77:fc:32:
0e:b0:d9:62:bc:51:82:50:3e:0e:76:09:ee:16:c4:
b5:66:dc:40:60:8d:96:f9:30:9e:1c:e1:d7:64:0d:
92:a6:c3:84:f9:40:34:6e:50:7a:6d:7c:37:29:e8:
4c:07:52:21:66:d0:8e:3a:93:eb:c3:ea:3d:32:2c:
28:99:e5:92:d6:0f:95:f2:00:c9:d1:ba:74:3f:79:
cb:b0:4c:fb:30:55:35:6c:70:17:27:e2:c5:8b:24:
0c:d7:88:4b:6b:c6:31:d7:38:90:97:7f:00:29:d7:
3f:8f:16:5d:cf:11:3a:68:b1:43:de:12:21:c7:3d:
cc:02:89:57:f2:ad:91:84:5f:c0:4e:cb:0b:7b:14:
04:fc:88:fd:28:ee:ea:73:99:f5:0c:63:57:e9:74:
1c:a0:f6:9f:3e:3f:93:76:5d:cc:3d:77:f2:b8:59:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:3F:4B:5C:9F:C1:13:A9:AA:68:E5:6B:55:95:F4:29:8F:DE:5C
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8e:fe:41:31:46:aa:ec:4d:a5:9c:07:29:91:b7:73:8d:41:
75:4f:ed:92:24:a3:16:b1:7c:b5:fa:59:05:d8:67:df:d8:0b:
ba:dd:fc:91:65:a5:30:bf:a6:b8:8f:fe:fb:1e:06:9b:53:fa:
af:5e:ac:97:78:c6:6a:70:ea:cc:18:2a:b8:c4:8f:89:f3:5f:
53:3c:6d:a8:2d:d6:d3:60:37:05:0d:92:95:e8:22:7d:d4:68:
f9:bf:df:47:65:40:3a:a7:c4:b2:bf:bf:65:5a:f5:2a:54:89:
93:f5:e5:77:5b:04:b8:8b:59:ed:7e:b2:0e:8d:20:b2:c3:bb:
b0:fa:f8:fe:cd:2e:af:a7:eb:a9:6a:19:44:b1:d5:44:e2:a1:
b0:2a:60:0a:c5:da:be:30:08:fc:ea:dc:ca:19:1a:ba:86:2b:
ab:96:6d:fe:30:5f:3e:1b:e4:31:6d:8b:42:a9:28:a8:ce:ea:
60:73:3c:b1:ce:08:b1:64:b6:4e:8f:2a:85:12:f6:40:f8:83:
b2:46:cb:c5:82:65:57:5b:b0:a4:00:66:d5:4e:28:27:b2:29:
49:54:75:b6:90:d5:f8:86:53:7f:43:8a:7b:06:a2:17:65:60:
9e:e4:36:ff:9f:85:e4:b0:f5:ec:d4:3b:24:9f:57:80:b2:28:
c3:a9:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:19 2026 by rpki-client