Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
File: RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft (raw, json)
Hash identifier: M7AmBYiNw1MRh1NYZvVnfvZPYdvu2QmODN21grB1GgA=
Subject key identifier: 26:1E:EE:60:2A:6E:CE:47:D3:AC:70:28:28:FA:8D:19:67:26:68:9D
Authority key identifier: 44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
Certificate issuer: /CN=440586c54614b96edb84709524a334b31c9999fd
Certificate serial: 019D2703A00A9FB149A0ACB33252D06BB72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
Manifest number: 0B8E
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl (hash: 6PkRcKNj2JR/WbA60S1g+plqPW7LPwJw86NSKgZWP0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a0:0a:9f:b1:49:a0:ac:b3:32:52:d0:6b:b7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440586c54614b96edb84709524a334b31c9999fd
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=261eee602a6ece47d3ac702828fa8d196726689d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:af:b6:09:f9:f7:36:ac:52:64:65:37:d0:
a6:71:93:b3:aa:b9:1c:da:f8:ff:81:1e:02:48:7a:
61:69:8f:6b:d3:89:22:5d:ab:6d:ed:5f:85:83:f8:
00:24:ce:49:4c:57:51:81:db:74:37:b2:d9:87:0c:
49:1e:94:aa:b9:36:71:11:a4:00:43:2c:82:1e:c0:
26:e4:0e:16:5b:a8:08:8c:5c:4e:b0:df:c2:03:7b:
cb:d1:9a:0c:92:ae:ba:cd:53:4e:03:b5:6c:4e:da:
70:7e:86:fb:61:b9:92:ba:b8:88:64:d7:ce:5f:4e:
9d:cd:d0:13:5c:c2:e4:b8:d2:87:a5:4b:e9:ea:2c:
0e:1d:ed:71:f7:b2:97:a9:11:64:54:9b:e7:ae:0d:
38:58:cb:f1:24:55:89:a2:79:a0:1f:b5:bf:cb:bf:
99:1f:a3:49:d0:69:4e:50:5a:b7:ae:f1:46:3a:00:
37:f4:d2:77:f2:82:fd:90:df:c0:1d:4f:39:ca:ea:
c2:5a:ce:d5:1e:c1:60:75:5f:3a:31:ef:6d:72:ef:
f5:e2:72:59:d5:eb:79:eb:37:e6:33:ad:c6:45:bf:
83:62:49:6d:28:33:da:67:a6:a8:f0:26:d0:21:39:
f5:44:7b:af:a9:46:ba:05:9d:7d:da:95:3c:d7:29:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1E:EE:60:2A:6E:CE:47:D3:AC:70:28:28:FA:8D:19:67:26:68:9D
X509v3 Authority Key Identifier:
keyid:44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:20:36:a1:af:e7:14:76:c3:d7:78:0c:35:3b:a0:03:aa:08:
61:36:a8:c8:00:7a:f7:4e:6e:d7:bb:cf:15:1f:ca:62:5a:b1:
8b:46:2c:9b:1c:57:b8:aa:43:29:2a:82:c2:02:d8:4a:c5:cd:
cf:a4:67:b2:24:4f:9d:45:04:a9:9e:89:55:f6:26:8f:23:11:
04:69:ab:6a:93:db:98:5e:29:e3:ac:a5:8c:5f:c2:37:09:85:
0b:cc:9a:91:38:7c:32:29:75:d0:28:48:a1:db:d1:41:70:93:
d8:69:c9:0b:b6:8d:ed:6e:e0:ef:48:f3:b6:4e:e0:8b:0b:b5:
ed:e5:b3:33:0d:d8:7c:a5:df:18:36:98:11:03:0b:d8:3a:d8:
03:be:ea:5f:f6:69:dd:8a:4e:60:e3:b3:f3:9b:4c:35:d4:86:
7e:05:6c:bb:40:44:46:4b:45:d1:da:2d:b7:f3:c5:f9:94:0e:
63:5c:b2:ec:0b:18:f2:86:c0:81:b6:0b:7e:8c:29:a0:c9:73:
3f:87:80:2f:bb:97:02:bd:e9:c0:1d:b2:58:30:47:97:5f:c4:
10:02:b5:3a:23:22:d5:b1:6b:8f:fb:33:da:41:9d:9f:a1:2a:
81:24:a2:2a:94:e9:ab:d0:b8:28:86:3f:f4:8a:d5:23:3d:5f:
4e:11:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:39 2026 by rpki-client