Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File: _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier: /7v43JQD1rsVUC2GMrfmOhwKZafC0p4sMXQ9NCog9Lg=
Subject key identifier: 18:A1:7C:56:1C:D8:4F:F7:13:65:59:0F:3D:8D:3A:D0:8E:27:A6:63
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer: /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial: 019D2703E1E8C474CAE145816F84D86DE0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number: 1586
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: Vp5rdmK9FucEhf5RBnnLK4C6hgfpa7b7xc767wdiUtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e1:e8:c4:74:ca:e1:45:81:6f:84:d8:6d:e0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=18a17c561cd84ff71365590f3d8d3ad08e27a663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:a4:16:e3:52:43:10:02:cc:68:e1:ec:50:
07:3a:b9:28:02:96:49:ff:60:4f:e6:71:6a:ef:66:
7a:e2:2b:ab:9c:4d:6f:4d:5c:db:cc:6b:ff:e4:be:
6b:0b:6a:78:75:34:48:a1:c6:fc:93:91:7a:77:3e:
6d:81:5f:be:d6:97:ba:ec:b4:ec:69:ba:c7:7c:4e:
57:93:52:6f:45:a9:3d:b0:82:f4:d5:a9:41:72:5b:
38:64:7f:02:44:ef:93:e7:ad:56:13:ab:93:48:67:
7c:fa:bb:23:c5:05:4c:2e:c3:65:d0:4b:d8:ef:a9:
1e:04:fb:82:7a:ee:52:6f:31:20:5f:ac:7c:14:77:
9c:87:25:ff:40:9f:0e:06:e0:89:c6:74:89:d1:72:
65:c0:58:84:59:4b:5c:29:3b:73:b6:18:00:08:0e:
5c:25:a5:07:25:9a:c2:04:64:82:b4:38:3c:1f:92:
5f:d5:b9:00:c7:6e:36:54:f3:61:50:12:82:85:08:
fb:29:07:ec:c1:e9:c5:a0:b5:f4:9a:76:c3:ce:24:
1e:37:10:95:d3:4e:83:0a:9f:4f:70:cd:8e:0e:3d:
29:25:b3:7d:8c:a3:af:8c:95:81:7f:63:25:b7:e8:
6f:7f:e7:7d:c8:80:43:58:8c:1d:a3:1c:3d:1f:a6:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A1:7C:56:1C:D8:4F:F7:13:65:59:0F:3D:8D:3A:D0:8E:27:A6:63
X509v3 Authority Key Identifier:
keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b1:9f:0f:62:b0:b2:2d:e5:1d:45:61:5e:bf:4e:2d:5f:ff:
e5:c4:03:da:38:2b:bb:82:30:02:93:81:01:e8:10:8a:6a:24:
eb:aa:75:96:81:99:35:72:c5:4e:01:31:d7:60:82:55:d3:9d:
71:e9:b5:c2:86:3c:57:ae:74:34:45:61:6a:13:68:9e:cc:e1:
27:45:9f:72:dc:4c:01:ff:48:03:05:86:ec:3b:73:f3:24:70:
c9:6d:da:10:64:af:d3:09:06:b5:d7:e9:0f:50:1e:cb:9a:e7:
08:29:97:ae:f8:43:e5:91:5b:39:c6:6b:7e:a3:be:76:93:6d:
bb:7b:51:0f:0f:20:d8:06:f1:82:ad:a0:b6:84:7f:89:df:fb:
cf:43:aa:58:8a:0d:b8:4a:6e:a5:a9:9b:e0:c7:0c:69:b2:8c:
72:b0:a5:23:72:1d:aa:19:2a:40:00:b1:a0:15:c0:6f:d2:61:
68:37:f3:f2:3b:a6:2c:90:66:f2:6d:2a:58:57:04:ae:e1:4b:
57:f0:da:ee:c6:73:11:a6:c0:fc:b5:e8:18:0b:46:e4:16:dd:
26:22:eb:c8:77:80:8a:00:23:de:43:52:07:e9:46:d6:e2:85:
58:0b:dd:8c:a2:f3:a7:e4:78:af:3e:b5:6b:13:d7:0c:22:ed:
de:74:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:47 2026 by rpki-client