Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier: ot8ZfwdwSuUCOoGveiBE6j8AsOm5wjwuZCSFFXljPPc=
Subject key identifier: BA:A3:82:30:1F:27:D8:63:63:25:34:58:32:DC:72:29:5D:59:B2:B4
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial: 019D2AE0E1683302954FCD24CB7296E0F1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number: 0939
Signing time: Thu 26 Mar 2026 16:01:13 +0000
Manifest this update: Thu 26 Mar 2026 16:01:13 +0000
Manifest next update: Fri 27 Mar 2026 16:01:13 +0000
Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: M4M1K+L0SdD7IEjNl3QAblht9MHYYJRRjpIUECs4XgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:e1:68:33:02:95:4f:cd:24:cb:72:96:e0:f1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Validity
Not Before: Mar 26 16:01:13 2026 GMT
Not After : Mar 27 16:01:13 2026 GMT
Subject: CN=baa382301f27d8636325345832dc72295d59b2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:a9:b8:a0:a8:0e:00:f4:22:df:c3:c4:70:
d7:04:2a:62:87:e5:ea:ea:4e:1c:41:63:76:1b:f5:
b3:a3:0d:02:fa:da:99:d5:47:a2:b4:d9:a3:b8:32:
a2:f0:63:3c:ef:fd:91:b1:ba:c9:08:e8:6d:d5:a2:
99:71:78:e5:96:33:6f:e5:a9:45:0e:8d:e9:6e:4c:
18:ff:a6:43:30:06:de:53:6c:71:3b:0b:76:58:52:
a8:a2:31:cc:19:e8:9b:e8:a6:ca:34:cd:dc:cc:e5:
68:75:0f:e0:ff:c9:a6:fa:fd:72:a2:28:7e:0c:30:
4f:c9:a6:d5:b2:6a:a7:d9:80:56:7f:5f:e0:0b:50:
dd:6a:be:98:24:aa:0d:16:72:9b:8a:9a:c1:31:7b:
d8:9c:dd:73:3b:61:a5:57:ab:88:2b:d6:93:20:bb:
2e:4f:f0:6a:ff:33:44:50:4b:af:e5:a1:b8:0f:17:
2f:77:93:91:0a:7f:93:85:8c:95:fd:1e:38:5f:69:
bc:97:f0:54:f3:ce:5d:2d:5f:6a:77:7b:8e:87:61:
a1:38:ee:27:20:d3:f3:8f:bb:2e:24:de:ff:fb:72:
71:0e:40:9f:e7:2d:0f:fd:ef:43:6d:e7:82:0f:f3:
22:bf:82:81:e8:dd:a0:6b:50:ed:b3:ec:b9:09:63:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:82:30:1F:27:D8:63:63:25:34:58:32:DC:72:29:5D:59:B2:B4
X509v3 Authority Key Identifier:
keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bb:a3:21:1f:ca:a3:56:b4:79:0b:ca:b0:e1:e4:d1:4d:96:
b6:cb:84:51:69:c9:5d:7d:54:b9:b0:49:07:32:24:fc:da:7c:
98:79:1d:1c:53:d3:da:a2:d5:11:a8:f1:59:0e:f6:1f:d0:69:
39:e5:01:89:42:01:40:a3:a4:8d:55:2f:24:5f:78:02:76:8c:
29:ca:ab:51:15:f2:91:f4:89:ee:01:a8:a5:f1:75:b0:1e:3f:
9d:cd:a4:57:51:55:07:e2:e7:63:59:2f:d7:18:55:1a:c3:f3:
7e:3d:8a:6d:dd:f1:97:54:e5:90:65:5f:ed:82:21:7c:08:fa:
12:61:89:0a:d6:28:83:35:8a:13:23:ba:8a:a6:83:90:0e:f7:
84:27:6d:c3:92:49:57:2b:8c:6d:fa:0b:06:dc:fa:3b:d3:f6:
07:91:33:61:fd:20:d9:c3:e2:6c:45:a2:82:28:5f:04:af:98:
cc:c3:2c:40:3a:c7:76:e4:ae:48:bf:31:ed:11:e3:3d:db:06:
c2:d5:92:34:e2:cc:21:ae:97:d7:27:c3:02:91:f5:dd:00:11:
5e:55:d7:17:5b:f1:9e:c6:ff:49:0b:cf:03:eb:e3:2d:d0:ca:
c3:f4:f8:0b:34:02:a0:94:7d:67:37:ef:dc:a7:14:38:7a:4c:
a1:4d:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:47 2026 by rpki-client