Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: jSJm46g3FB99O+ErcpEwcchEySDHgFvYXbisGwxWKAo=
Subject key identifier: 54:6F:33:B5:49:8A:C1:D3:23:B9:AD:B7:C8:9A:77:F7:28:EC:14:50
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 019D27A8BC1A0BC54CFE6CC9EA0925E4C5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 0BF7
Signing time: Thu 26 Mar 2026 01:01:02 +0000
Manifest this update: Thu 26 Mar 2026 01:01:02 +0000
Manifest next update: Fri 27 Mar 2026 01:01:02 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: nQNOacD8q/9jcFAgHw7JyQFsX3amSs71Pz9iI3fDmP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bc:1a:0b:c5:4c:fe:6c:c9:ea:09:25:e4:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Mar 26 01:01:02 2026 GMT
Not After : Mar 27 01:01:02 2026 GMT
Subject: CN=546f33b5498ac1d323b9adb7c89a77f728ec1450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:fa:3a:cf:25:99:00:b8:70:de:be:d2:4c:
0e:36:fd:6b:c5:d4:7a:3a:33:b0:44:5d:d5:8f:3c:
5e:c1:4f:b7:b7:5f:ec:63:dc:9d:21:8e:0c:d0:d4:
5c:6f:48:e3:f5:41:f8:17:cd:e1:72:87:c6:e7:79:
d0:88:40:f1:9d:68:d7:0d:23:3c:4a:77:5e:93:ff:
58:05:27:dd:a8:14:cc:1e:c0:a8:d7:29:68:2e:b3:
d8:69:30:0e:f4:14:e0:b0:9a:de:2b:69:cf:25:70:
5b:10:ba:1b:8b:f5:f3:aa:90:99:b3:b5:67:23:67:
23:bb:79:12:42:63:81:af:0f:6b:f0:7d:55:81:e0:
98:f3:3f:31:7a:86:40:ae:91:e2:de:1a:61:c1:5e:
17:1f:96:a6:b4:f0:08:52:3f:a4:d7:3b:22:4e:f3:
15:4c:e8:29:77:ad:03:6b:35:a2:16:71:6d:22:4d:
7f:c3:67:d2:86:fa:31:2f:c3:6a:a8:8a:13:91:11:
37:ea:bd:b7:f0:4b:75:e7:7d:aa:36:ae:c8:63:24:
7a:03:bd:01:4f:b3:26:d9:ad:24:f1:79:4c:64:50:
fa:db:31:f6:73:9b:48:74:e6:5e:f1:10:78:8a:7d:
51:39:be:04:d6:5f:61:b4:4c:90:b6:f1:1b:94:ed:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6F:33:B5:49:8A:C1:D3:23:B9:AD:B7:C8:9A:77:F7:28:EC:14:50
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:18:90:d2:c0:5f:4f:6a:13:d9:93:55:60:c1:ee:07:90:
3a:49:7e:97:ed:40:b6:c8:51:32:bf:36:79:61:3e:cd:a6:b3:
8a:8e:7d:dc:93:56:95:35:6c:b8:ef:21:45:b6:89:f1:cb:1c:
22:44:24:94:83:a8:1c:da:18:34:a9:aa:c8:52:66:50:80:19:
56:c0:7e:53:ab:03:85:5d:d9:7f:bc:7a:d0:19:79:9a:02:b7:
bb:14:7a:58:1f:71:e3:02:a7:4b:cf:38:54:d2:9f:7d:93:cd:
cb:49:e5:06:47:e8:3f:8f:3f:6d:b2:3d:f3:53:a0:0b:c2:89:
da:f7:d8:1d:92:b3:3e:ff:52:f6:34:42:2f:8c:57:57:cf:c9:
04:d8:5b:b7:6a:b4:5a:5b:97:71:a6:27:4f:54:31:ee:62:56:
5e:6b:2d:dd:fd:d0:01:7d:35:14:be:ce:9f:82:da:77:fb:38:
d0:bb:de:8d:51:dd:1a:d8:4f:ce:da:28:a9:90:c9:be:2d:60:
1e:fe:57:99:75:ab:0d:c0:18:18:79:a5:a1:9a:f8:bd:97:62:
c4:0d:2b:c6:8f:f2:be:a8:fa:d1:7d:3b:48:6c:3d:35:bd:2d:
59:43:6f:c6:7c:54:d4:fa:11:94:f6:81:e9:2a:1f:f2:23:a6:
b6:e1:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:46 2026 by rpki-client