Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File: a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier: cMRUjJjZXVVSthW/8wUGaJOh3azlFg28BxqObM4HBtM=
Subject key identifier: 69:F3:84:8B:66:C8:CE:B0:2E:DD:E9:2C:F0:27:F0:44:4B:DC:9F:A4
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer: /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial: 019D27042D929DAE7B173D7C3D731337D06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:18 +0000
Manifest this update: Wed 25 Mar 2026 22:01:18 +0000
Manifest next update: Thu 26 Mar 2026 22:01:18 +0000
Files and hashes: 1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: wQOkm2/GWmPdgB9j+/oQIZ1QDUeg+YBz33IUvQ7cjRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2d:92:9d:ae:7b:17:3d:7c:3d:73:13:37:d0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Validity
Not Before: Mar 25 22:01:18 2026 GMT
Not After : Mar 26 22:01:18 2026 GMT
Subject: CN=69f3848b66c8ceb02edde92cf027f0444bdc9fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:9b:de:f1:1e:1a:c7:04:1e:4d:ae:ee:2f:
5d:28:51:e8:9b:a7:1f:09:ce:df:43:95:6e:91:3b:
2d:67:f1:cc:16:b1:b3:bc:0c:32:b8:c2:98:76:65:
13:16:23:29:e1:e2:f3:e3:4b:f3:ad:a7:42:b9:cc:
af:a0:93:c9:bd:81:a1:fc:da:4e:fe:45:04:64:76:
77:58:89:b4:d6:db:da:07:3a:f9:e5:91:a0:67:2a:
67:c5:82:36:c5:22:3c:f4:95:d8:87:ac:2c:59:ee:
5f:4a:c3:f5:c7:dd:df:5c:95:cc:82:91:b0:9b:46:
7f:e4:d8:39:7d:1c:26:a0:27:b8:d2:69:38:29:68:
6e:d5:3d:ae:99:91:06:c2:ba:8a:83:68:23:26:1b:
2d:97:be:d8:66:c2:13:3b:83:86:70:a3:56:74:72:
5a:e2:d9:9b:06:68:52:f0:45:95:e9:f8:25:d9:ee:
55:8f:c7:44:19:7c:09:6f:ae:97:1d:45:68:69:14:
ed:b0:d0:4e:1f:2a:fb:71:d5:18:e4:e7:ac:4e:d0:
9c:2a:0d:18:a1:4c:a2:c2:f6:33:9a:bf:7f:75:2c:
82:26:89:47:30:b9:96:fb:63:80:27:30:97:3a:76:
82:98:04:f5:7a:63:3e:d2:45:de:db:db:5f:72:2d:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F3:84:8B:66:C8:CE:B0:2E:DD:E9:2C:F0:27:F0:44:4B:DC:9F:A4
X509v3 Authority Key Identifier:
keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:00:ef:33:24:0d:69:d5:9f:6a:92:96:c1:50:43:05:66:c6:
74:67:33:f5:66:1d:47:1c:c9:be:1d:c0:ef:c3:7b:69:73:00:
7e:7e:87:cb:9e:1e:e4:40:e3:31:e8:f8:e7:93:a3:45:a8:b7:
a7:9e:11:0c:4e:07:0c:1d:07:ac:fc:1f:14:eb:dd:5a:dc:2a:
d8:13:14:0b:bf:db:24:e2:07:03:0d:03:c2:91:03:35:6e:b8:
dd:c6:5c:be:47:7f:d6:b1:78:fa:08:11:9b:c6:44:a1:bc:10:
1f:de:c3:ce:e7:32:9e:5d:b7:b5:f6:65:d6:a9:3a:18:eb:8b:
d1:ae:3a:0d:eb:2a:bd:8d:a3:32:05:96:c8:76:60:6c:0c:01:
9b:7e:36:80:ba:d5:a1:ef:55:25:d6:71:00:be:05:3b:5f:be:
8f:01:70:f1:3d:d3:ff:c6:ba:a8:a9:f9:b7:fc:37:01:64:7e:
42:91:02:a0:9e:8e:f0:91:d4:be:37:af:bd:1b:88:2e:d0:f9:
2d:74:96:ad:3a:a0:48:bd:74:93:21:2f:82:ca:72:d1:91:78:
85:11:83:00:af:49:50:58:e4:bc:f9:75:cd:02:ed:65:62:92:
01:82:16:83:99:21:d4:ff:3e:f8:f1:4b:cc:59:82:67:7c:3e:
90:db:cb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:21 2026 by rpki-client