Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier: qH06RlS3jXD1Fs16ztA+BB+ZoBgnSzsvUyazNzCBupw=
Subject key identifier: CB:D5:0E:28:0E:22:E1:80:A9:15:C0:E2:6B:2C:04:DC:32:8E:82:DB
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial: 019D2703A863C9EC3D0C734EEE2A7D320BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:00:44 +0000
Manifest this update: Wed 25 Mar 2026 22:00:44 +0000
Manifest next update: Thu 26 Mar 2026 22:00:44 +0000
Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: rFVnk38GXyiyHXZumVpMiH6vaDHQ2PGgq3uJfA3TR88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a8:63:c9:ec:3d:0c:73:4e:ee:2a:7d:32:0b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Validity
Not Before: Mar 25 22:00:44 2026 GMT
Not After : Mar 26 22:00:44 2026 GMT
Subject: CN=cbd50e280e22e180a915c0e26b2c04dc328e82db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:c7:3a:c5:63:06:74:d6:3a:1e:51:fe:c4:
66:71:3b:61:ee:42:a3:6e:fa:07:49:fa:e9:0f:ae:
8a:1e:0a:07:c6:34:c9:56:cd:cc:71:cf:af:d2:86:
fe:d5:2d:37:d8:6e:4c:30:35:83:92:6c:8b:42:7d:
00:a0:b7:36:e6:37:ae:5a:dc:c8:1f:28:03:4a:ab:
c9:dc:ea:23:7e:e9:07:e3:e7:95:f4:e2:85:a5:43:
b4:db:e8:92:e6:e8:3d:95:b0:18:26:5d:1e:a3:63:
fe:87:3a:eb:91:73:3e:d3:13:40:0d:85:7e:77:c2:
cd:cc:40:03:4d:5b:ee:83:cf:44:0a:8c:94:5c:7b:
e5:bd:1c:d9:e3:b5:36:8b:9c:a2:45:bb:93:7b:95:
26:3f:cf:16:49:c4:a7:f1:31:01:0f:f1:82:44:6a:
5c:b1:6a:ea:42:d0:b4:0d:f4:93:ad:1e:f6:25:b3:
11:83:27:bf:bf:78:21:75:af:cf:48:3f:54:11:91:
5a:db:04:e6:f7:ed:d6:fe:4a:d9:68:3c:1a:25:25:
1d:0e:1b:0a:a5:7f:d3:c9:8d:8a:dc:75:5e:54:bf:
92:fb:c0:80:63:23:3c:2a:fe:ec:76:90:ee:25:1f:
e8:ef:c0:86:ac:0b:d2:51:27:23:c0:96:a4:fa:dd:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D5:0E:28:0E:22:E1:80:A9:15:C0:E2:6B:2C:04:DC:32:8E:82:DB
X509v3 Authority Key Identifier:
keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:66:9a:46:f8:4c:80:ad:af:2f:49:35:d8:fe:b2:61:5a:bd:
fb:89:e9:84:d1:fa:a6:b9:69:2a:ed:af:12:58:20:a6:11:5f:
0e:2e:1c:f9:5f:dd:e6:e2:ff:88:f8:c9:9c:fd:9a:0e:40:25:
42:c1:ec:88:35:48:f3:ed:5b:7b:82:ac:cf:17:82:64:c5:1f:
ea:7f:02:f6:8d:b9:41:6e:6a:68:d1:57:ac:11:be:61:9b:87:
5e:19:d7:4e:21:89:db:c0:51:86:1e:f5:48:82:14:61:77:a1:
b2:4e:88:87:0c:2f:0b:ce:a1:24:b6:7f:f0:37:0e:da:a9:df:
0d:1b:79:3f:6f:86:f7:ec:04:47:f2:1b:18:3f:41:4a:f4:55:
dd:1a:bb:2d:1a:62:12:48:9a:4a:33:e8:5d:1b:38:6b:ca:aa:
f2:cf:15:54:45:cb:bf:6b:e3:c6:b4:cd:f8:82:2c:c7:77:cb:
3a:f9:00:9f:8a:26:90:99:ea:de:34:ed:02:4f:83:96:7f:60:
2a:9a:e2:ed:56:15:70:17:3b:b2:25:15:79:13:5d:c2:7a:53:
1e:3a:5d:8b:88:04:b7:1d:fe:53:78:29:d2:f1:b8:7b:78:64:
77:10:26:fb:e6:a9:72:a6:18:3f:df:c3:a0:ab:f4:d3:a8:76:
f1:36:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:14:23 2026 by rpki-client