Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File: 169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier: +x8pcX87qlTM+A+zzWLhqYmTZjxlZr59+ALYeFwijOc=
Subject key identifier: 24:7A:0D:28:E8:F3:4E:4A:C3:C0:AC:D0:FA:07:24:2D:EA:C0:AC:84
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer: /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial: 019D27A934F813CBABE186DBEE406CE4E69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number: 0E2F
Signing time: Thu 26 Mar 2026 01:01:33 +0000
Manifest this update: Thu 26 Mar 2026 01:01:33 +0000
Manifest next update: Fri 27 Mar 2026 01:01:33 +0000
Files and hashes: 1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: tZhX0f/WTxMhuZ7OHAvrCq6D1azCCF/PYJ1yJW0BvXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:34:f8:13:cb:ab:e1:86:db:ee:40:6c:e4:e6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Validity
Not Before: Mar 26 01:01:33 2026 GMT
Not After : Mar 27 01:01:33 2026 GMT
Subject: CN=247a0d28e8f34e4ac3c0acd0fa07242deac0ac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:a4:a2:e8:6d:2d:c8:3e:64:05:98:74:fc:
41:74:76:ce:9c:82:7c:cd:4c:74:4c:8e:c5:f2:c2:
df:00:e2:aa:c1:3e:ff:d9:34:97:04:5e:e9:55:87:
4c:31:85:b0:5f:24:58:ae:a8:b0:24:77:5b:3b:c7:
2e:46:bb:8f:93:19:19:62:74:64:5e:de:58:0c:ef:
6a:0e:3f:24:38:4e:19:c6:cf:ba:7a:95:7b:73:1a:
55:65:da:8b:15:9f:97:38:18:f6:c2:70:98:d8:a7:
ba:11:63:44:a6:5b:35:94:95:0e:94:c8:74:ad:35:
d4:f7:78:20:93:79:8b:ae:53:08:12:d2:3e:a0:cb:
18:8d:0a:23:b6:78:6b:4d:f5:b4:45:17:b3:c9:1a:
72:e5:ab:86:6e:2f:21:37:88:f9:43:85:c1:a8:c7:
45:39:e6:d2:5f:55:9b:88:0d:6a:b4:69:d0:79:aa:
d1:c4:ba:8e:79:12:5a:93:c4:2b:03:75:e8:c7:77:
e2:13:43:42:c2:1c:bd:9c:8b:f4:0c:e0:a3:95:15:
cc:7b:45:cd:0a:d3:e8:32:31:35:03:a6:82:5e:fa:
eb:9d:e0:96:e6:4f:e2:39:be:a0:b5:c6:8e:72:57:
50:33:29:c1:e4:79:55:20:20:92:ff:c9:5f:aa:9c:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7A:0D:28:E8:F3:4E:4A:C3:C0:AC:D0:FA:07:24:2D:EA:C0:AC:84
X509v3 Authority Key Identifier:
keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e5:80:88:e1:75:5e:cd:eb:1a:12:ee:d7:09:ff:bc:25:3d:
6f:70:ea:ce:c6:f1:d8:d7:bb:e0:23:bd:e6:79:83:52:3a:bd:
79:6c:9f:cf:56:ce:bf:b5:20:27:c7:00:e8:f9:05:b0:63:8f:
6a:dc:19:52:39:c3:e4:78:fb:e4:d7:3e:f4:b1:98:ae:10:80:
ab:e1:e3:a9:b6:fc:8b:8d:05:df:de:8c:e4:ed:05:25:36:90:
96:4d:0c:ee:49:64:e6:46:17:d3:48:d6:d8:3f:75:77:6a:3d:
bc:1a:99:30:56:1f:1d:d9:5e:3e:f0:48:ed:a0:9b:a7:b1:0e:
ad:cb:7e:2f:e3:15:f6:e8:51:c8:d6:e9:c3:20:f0:4c:b7:6d:
ca:69:7c:6e:92:f8:71:29:16:c8:c8:18:1b:10:0a:b6:4f:5a:
ba:f7:35:f6:c0:32:48:7c:f9:ea:24:2c:70:41:46:f3:1b:e3:
4c:82:7e:eb:45:93:31:67:2f:33:10:f6:ec:9e:1a:31:c3:4b:
d9:36:99:f8:63:c7:53:2c:cc:da:50:42:7c:72:4c:ba:07:e0:
d5:86:96:2f:df:5a:29:72:63:9d:b8:11:6e:57:08:76:ff:7a:
ad:ed:9e:30:b6:bf:85:74:1d:24:a2:61:a0:f1:e6:38:a6:80:
4d:8e:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:48 2026 by rpki-client