Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
File: C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft (raw, json)
Hash identifier: CfoUVwI3FEIb8huTylEJpwBH0UQGa2EFECaosYx7DXo=
Subject key identifier: 90:48:96:BB:3B:4E:77:10:11:16:F1:72:76:59:10:53:EA:E1:79:24
Authority key identifier: 0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC
Certificate issuer: /CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
Certificate serial: 019D254CEAF1B67664F5786BA6EBF6C9EA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
Manifest number: 01A9
Signing time: Wed 25 Mar 2026 14:01:31 +0000
Manifest this update: Wed 25 Mar 2026 14:01:31 +0000
Manifest next update: Thu 26 Mar 2026 14:01:31 +0000
Files and hashes: 1: C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl (hash: J34F9dvwSb/T/cxhac0KNwQNEe22ZOMX3VEtF+ZhkzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:ea:f1:b6:76:64:f5:78:6b:a6:eb:f6:c9:ea:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
Validity
Not Before: Mar 25 14:01:31 2026 GMT
Not After : Mar 26 14:01:31 2026 GMT
Subject: CN=904896bb3b4e77101116f17276591053eae17924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:4f:ff:fe:8d:f9:3b:50:14:80:5a:b5:76:
28:45:30:27:f7:4d:84:ad:c8:92:42:df:11:97:93:
43:00:b3:c0:13:fd:6a:d7:82:9d:41:33:2e:90:1f:
3e:d7:a5:72:74:5a:6f:df:1a:c6:88:ad:d6:f8:1c:
1e:8a:aa:05:61:95:68:9f:2c:dd:77:dd:70:01:a1:
e5:58:d8:4c:8e:8f:78:4c:15:4d:48:43:db:6b:56:
d9:eb:c2:10:47:25:2a:76:2d:8f:07:e6:55:94:51:
19:e8:40:bf:c5:29:13:42:b6:a6:61:e6:36:36:52:
7a:d2:f1:a8:03:ce:a7:fa:33:82:9c:bd:f2:ae:89:
b3:ff:02:e2:a0:0d:25:26:bf:59:fa:9f:5d:32:27:
45:a1:41:90:29:fa:4d:83:82:d7:ec:22:bd:f3:94:
aa:8d:32:5a:27:fb:a7:b2:8f:c3:8a:ee:9d:50:ce:
b0:5f:00:16:01:c6:0c:70:60:ba:3b:59:a2:ed:47:
e8:d2:b3:10:a4:33:33:d8:be:f4:02:39:88:17:c4:
d6:08:ed:d9:5d:2c:2e:05:62:bf:c9:fd:5d:7f:a3:
90:10:c0:2f:03:61:af:5c:c8:29:66:61:76:5b:c6:
a0:e9:ee:3a:54:26:f8:d3:cd:11:ed:64:79:b3:60:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:48:96:BB:3B:4E:77:10:11:16:F1:72:76:59:10:53:EA:E1:79:24
X509v3 Authority Key Identifier:
keyid:0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:57:f1:5b:fc:e4:81:f6:fa:08:2c:83:dc:93:b7:2c:f6:ec:
cd:30:32:dc:b7:4b:87:13:c3:ff:98:98:ec:94:a7:5d:13:21:
b9:23:56:02:21:eb:f8:5f:a4:b6:dd:f0:3d:82:85:83:55:19:
d7:15:e4:5f:a4:48:99:15:81:23:67:de:51:ca:63:ca:43:fc:
fe:a2:08:56:50:c8:d0:7f:c7:25:57:f7:b0:af:60:c8:c4:01:
0c:ee:42:f8:74:df:c6:31:5c:71:d9:bd:f3:e3:e8:d9:4c:c7:
79:72:e9:1d:54:e5:e7:26:a5:14:ff:28:36:1f:48:a1:f0:61:
25:ee:cc:10:35:7a:b2:5f:de:0d:c6:68:f2:8a:f8:e3:5b:e7:
4a:a4:32:39:1d:17:01:4d:30:82:48:5a:13:92:3e:63:4e:92:
06:2d:8f:9c:1f:ba:0e:eb:e2:81:d2:51:97:f7:09:f1:b9:d6:
d7:03:71:a0:58:9d:e8:c0:b3:2f:09:37:8c:fc:8a:79:6a:7b:
18:a6:36:99:55:bf:c0:93:13:5a:8c:f4:e9:9f:cc:22:f9:c0:
38:e1:1f:23:2f:4e:de:fd:01:33:fa:a7:6e:f7:8c:4e:85:2b:
30:dc:6e:37:cf:0b:89:c9:bf:ae:b4:1a:ab:9f:24:01:3f:7d:
36:33:b5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:59 2026 by rpki-client