Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: UWvZmXgL5jXpr0UgN4CnCDAyDAejbdkzT2OMfuo4c0s=
Subject key identifier: 61:63:C1:6C:44:1D:59:1E:46:EF:D7:E5:A4:28:84:44:3A:87:6A:BE
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 019D27A8FEAC74C0ED2A904BBC8C9294A274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 0C05
Signing time: Thu 26 Mar 2026 01:01:19 +0000
Manifest this update: Thu 26 Mar 2026 01:01:19 +0000
Manifest next update: Fri 27 Mar 2026 01:01:19 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: 5lz/YOH4ZgSCF9dymKtaIKJMfWgaf4bs1cSMyAA34WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:fe:ac:74:c0:ed:2a:90:4b:bc:8c:92:94:a2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Mar 26 01:01:19 2026 GMT
Not After : Mar 27 01:01:19 2026 GMT
Subject: CN=6163c16c441d591e46efd7e5a42884443a876abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:65:c0:24:3b:15:87:11:9e:80:64:7a:5a:
70:95:bd:4d:aa:89:24:48:ee:9f:db:0c:d2:12:c2:
41:f0:18:f4:94:ad:c0:e8:a4:d4:a1:ef:34:7f:d8:
c3:7d:f4:32:63:bd:27:8b:fe:ec:ba:3d:5b:d4:d7:
8d:b5:74:1d:37:6a:2d:d6:6c:f5:86:7c:ad:dd:61:
de:44:30:a1:5a:5c:11:8c:4d:61:ce:f4:b2:2e:2b:
44:4c:fa:84:fa:50:67:36:05:00:99:a5:47:e0:f5:
43:52:4b:ab:b1:92:67:ab:54:18:bb:4a:5a:d9:ff:
dd:7c:ef:0d:87:e4:79:1b:95:eb:08:05:ec:8a:ec:
9d:ac:72:0b:cb:7b:a8:15:b2:99:cf:79:d9:a0:cc:
78:ec:7d:2c:b3:6f:a5:7f:f2:cf:c5:e7:d8:5c:54:
9e:5e:42:6e:fa:e2:a1:6c:14:57:6a:63:ab:6a:79:
44:30:a8:e6:5c:34:95:ca:39:57:5f:90:c6:4e:e2:
db:53:84:35:b6:8f:ca:1f:ee:cb:bf:ce:84:f2:5f:
9e:c1:54:a5:04:d4:75:f1:73:29:5b:17:bc:d2:98:
28:ca:49:17:07:10:76:69:58:ee:3b:dd:fa:65:57:
5a:65:d4:c1:9f:59:2a:cd:9b:1b:a8:f7:56:a8:14:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:63:C1:6C:44:1D:59:1E:46:EF:D7:E5:A4:28:84:44:3A:87:6A:BE
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9c:6e:27:71:97:c1:f0:c2:3a:ad:bc:f4:65:25:25:ca:3b:
1b:4d:01:89:92:04:0c:ad:2f:2b:58:a8:78:bc:b8:12:1b:f3:
46:bc:6f:3d:b7:0b:3e:90:15:f1:a0:06:71:0c:f1:44:96:a2:
dd:3b:b9:e4:22:07:1f:d3:68:cb:39:8e:5c:20:a7:7c:d2:76:
12:a2:4a:f8:f7:34:c4:b1:e9:89:dd:51:cc:65:4b:22:12:d7:
57:9c:4c:2c:56:1f:ee:8c:1f:31:89:8b:67:56:1f:dd:a3:d2:
e3:b1:45:11:1a:05:4c:ee:16:67:bb:5f:4b:cf:88:8a:e1:60:
6f:22:46:4a:00:46:bf:d9:a0:45:67:5a:25:75:1c:1e:00:5f:
52:fe:2b:31:db:8c:76:98:9b:14:cb:54:f5:ef:8c:09:58:1e:
14:38:18:78:3d:87:27:3a:0f:cd:89:4c:29:c0:17:ea:a1:b7:
a5:15:5e:ce:4f:25:b7:45:84:df:36:2d:2d:9e:42:25:d0:12:
bc:20:99:58:c6:26:4f:4f:d3:60:9e:d3:95:ae:56:e2:78:4b:
47:c7:b8:17:ae:9c:bb:4e:30:e3:e3:89:52:a2:62:5a:7a:61:
57:4e:37:5d:39:10:69:43:b2:78:ff:ca:b7:d1:5b:7b:18:c4:
85:7e:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:27 2026 by rpki-client