Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
File: cc2ljxUk2CM2224M8qKf-vLaifg.mft (raw, json)
Hash identifier: KteWisAiSyh00Gv4YJqfV8jy7rgmOy+eHcgzxReVkx0=
Subject key identifier: EB:FE:4B:BF:BD:6C:A4:9A:8F:5F:29:A1:D7:19:89:58:C2:B1:D6:15
Authority key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
Certificate issuer: /CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Certificate serial: 019D2AE138FA5093E2998814DE730A0A4315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
Manifest number: 10A3
Signing time: Thu 26 Mar 2026 16:01:36 +0000
Manifest this update: Thu 26 Mar 2026 16:01:36 +0000
Manifest next update: Fri 27 Mar 2026 16:01:36 +0000
Files and hashes: 1: cc2ljxUk2CM2224M8qKf-vLaifg.crl (hash: 4eNryG8Oauo6JbnYUANyc4yUmlvvd0umWtmmO2JgXTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:38:fa:50:93:e2:99:88:14:de:73:0a:0a:43:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Validity
Not Before: Mar 26 16:01:36 2026 GMT
Not After : Mar 27 16:01:36 2026 GMT
Subject: CN=ebfe4bbfbd6ca49a8f5f29a1d7198958c2b1d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:fc:a2:f3:50:f8:c4:02:0f:9f:ee:85:d3:
c0:6f:c2:38:b9:bf:74:99:0e:64:f6:f6:3f:d4:ff:
75:0d:0c:2b:a4:47:21:cd:c6:af:b3:db:ce:cd:8e:
bd:25:d8:87:5f:65:b4:2b:c4:2d:d4:29:a2:c9:4e:
fe:e5:f3:95:ae:c7:07:5e:11:87:af:d0:21:20:8f:
5e:28:2c:bf:be:d4:3b:83:c0:09:2b:6b:97:b9:39:
fc:32:ae:a4:fc:5e:04:9e:6b:2d:23:4e:58:6b:02:
98:2a:c2:36:71:87:db:04:be:e0:d3:13:18:b1:7b:
31:2c:a0:f6:c2:5c:34:27:6a:56:ae:f9:8e:94:3b:
0c:f0:f8:86:a1:04:9d:0f:20:ca:40:a3:c1:7c:c3:
c0:00:5b:0b:b0:7e:8a:66:1d:a1:b6:ea:ba:38:31:
dc:0d:8c:91:2a:fa:a5:26:5d:4d:4e:22:c6:d4:ec:
fd:55:45:bf:a9:48:53:9a:d5:de:fc:e4:93:b1:ef:
56:46:38:c3:83:f3:94:eb:8b:96:d7:8d:b2:61:ca:
00:fe:68:a3:f2:64:2d:4d:48:ab:68:ae:a5:77:e8:
58:3e:a5:8f:bf:b4:02:e8:7a:7b:29:31:f7:a1:3f:
cf:46:f9:ee:84:49:46:e4:15:e9:dc:b9:8a:fa:59:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:4B:BF:BD:6C:A4:9A:8F:5F:29:A1:D7:19:89:58:C2:B1:D6:15
X509v3 Authority Key Identifier:
keyid:71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:42:b7:1f:02:6b:3e:dd:64:1d:9c:50:30:e9:93:f3:45:75:
8c:cc:5e:8a:9e:3d:19:d2:06:1e:60:cf:99:7a:ef:f9:ad:bd:
dd:96:42:98:b8:4d:14:52:fe:ec:73:0e:db:db:71:3e:3d:c0:
b9:1e:2d:cb:02:03:2f:0b:94:19:b0:ac:4f:be:ba:f2:59:11:
20:e9:ec:bb:84:60:01:f0:cc:02:cf:69:b1:ed:45:4f:20:66:
6b:03:fa:e6:0d:54:5e:c8:49:57:61:a8:c8:f4:b9:5c:ac:d7:
cf:eb:2b:bc:6e:79:34:bf:30:bb:09:46:b6:a2:d3:96:1d:f4:
67:9d:b0:94:ee:1a:fe:b0:35:a9:34:08:fa:00:8c:20:6b:cb:
f3:db:7a:e9:41:f4:c1:91:60:bc:e6:1f:e8:a7:43:d2:07:d3:
6c:5b:94:4f:e1:b8:e8:fd:d7:3f:82:1c:a0:d8:c9:c9:09:a1:
c0:e7:86:5c:e2:74:d3:85:6c:b8:5b:9f:86:d5:f6:c6:fa:d1:
bc:7f:25:25:63:8a:bd:99:1b:f8:3a:a1:07:22:8e:97:b8:ec:
69:84:09:98:e5:71:79:f9:6c:6b:93:6d:af:7a:43:f0:4e:95:
87:d4:80:b3:d2:29:95:a2:98:0e:8c:fb:d0:e5:bc:06:0d:9a:
c5:c0:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:44 2026 by rpki-client