Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: 0MM2lPTKdarftEVQw9bFGBNSpX6iXqJUT9szVULzc8o=
Subject key identifier: 9D:D6:98:49:3B:E9:9D:44:21:CE:84:68:9D:2A:04:64:70:B0:71:DD
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 019D27049E966ADA89C8E1174F92DC561413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 0B4C
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: dw6rrTzBFEt6ZxkDfgQwjozm6lQFCPl1Eu2lW0WXeTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9e:96:6a:da:89:c8:e1:17:4f:92:dc:56:14:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=9dd698493be99d4421ce84689d2a046470b071dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:ac:4b:b0:5a:e4:66:7f:8c:bf:17:dd:e2:
94:f9:6b:7b:71:02:d6:f4:d9:a9:11:ee:0e:17:de:
1b:ff:0c:d5:6c:4d:4a:e3:69:cf:b3:58:fa:fb:d8:
80:6b:1a:29:38:47:84:bc:c0:c2:28:aa:7c:0c:ad:
6f:38:e9:ad:cc:d8:55:e3:f4:92:a4:e7:c4:d9:47:
a9:dd:21:ac:7f:d8:a8:be:17:2a:cd:5e:14:5e:e9:
da:1f:58:66:cb:86:74:66:d9:f7:c9:56:75:8b:d8:
fb:d9:8d:ea:1c:39:37:b3:b8:a8:e7:da:d4:7d:8e:
90:98:c5:da:79:1b:c5:ab:c3:82:88:77:1d:ec:71:
32:ae:d1:3b:d7:db:f4:65:3e:ea:74:79:4f:2d:fe:
c8:aa:bb:e3:8f:1f:1a:6a:9d:1e:c5:19:09:bc:09:
b2:99:cc:d5:ff:84:8a:99:0e:0b:a5:77:d5:60:40:
cf:82:90:9c:f2:c1:56:9e:89:cd:e0:d4:46:46:7a:
42:5a:9f:ea:20:43:3e:98:bf:ae:ee:d0:10:5d:72:
af:14:1c:41:09:41:95:a7:3a:99:68:fb:d8:91:cc:
b7:a8:77:ba:be:8b:31:fb:c5:b8:75:77:8b:06:b4:
8d:d6:a3:a8:6e:59:eb:be:88:7c:7d:e2:11:aa:31:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D6:98:49:3B:E9:9D:44:21:CE:84:68:9D:2A:04:64:70:B0:71:DD
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6e:ff:e9:1a:60:15:9d:cd:ea:74:7b:79:6f:95:77:17:c0:
e8:dd:01:1d:3a:d5:d8:5a:24:ae:c4:6d:6f:c7:80:b4:f4:80:
c7:c4:e1:13:91:7a:3b:48:58:de:8f:ca:12:8a:a4:55:13:5c:
95:10:d2:0f:7c:70:2a:c4:40:51:c4:d9:83:c0:9c:88:d9:0e:
85:fe:ce:2c:82:6c:e3:38:2a:a5:bd:fb:07:bb:f6:71:6c:a1:
13:fa:7d:1d:fa:95:e1:92:04:ac:c5:21:ca:3d:26:df:a3:9b:
d1:25:1c:f5:4a:0b:f6:f4:ad:21:91:d0:e9:99:6d:79:b8:f0:
9f:a1:29:ef:e6:17:9c:8f:cd:70:e1:91:93:98:e1:c2:be:76:
45:42:ce:02:23:1b:07:16:2f:2d:43:5c:d0:2f:92:de:fd:75:
05:3f:68:45:37:bc:5e:45:90:55:91:8a:4c:82:88:75:5a:dd:
7b:ae:01:39:d6:05:cc:23:b5:06:32:9c:63:03:aa:dd:b5:ed:
96:2e:c3:84:99:4f:90:f6:6c:9a:58:fb:5a:d3:f7:e2:ba:96:
38:39:61:e7:31:31:34:f5:ea:40:a0:2d:25:7e:ca:e2:b4:82:
1e:56:bb:b1:05:de:a9:7b:16:44:94:1e:65:89:54:13:30:e9:
9e:f0:3a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:30 2026 by rpki-client