Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier: QGu+FF7eOuJpa5B0u76Ho2+K4yN9rlbg04aj/qWPCtg=
Subject key identifier: D0:DE:43:F6:31:37:A1:53:42:D8:18:6F:09:17:D1:8A:29:20:88:3F
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial: 019D2704C88A89356078A7FF0820E1F05A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number: 0E06
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: otrGsT1spD++2CBWEeSZma8MRtyJVwx0yZ/X6eg6kOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c8:8a:89:35:60:78:a7:ff:08:20:e1:f0:5a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=d0de43f63137a15342d8186f0917d18a2920883f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:30:7e:01:83:b7:73:9b:e1:fc:0b:0c:de:
f9:db:a8:b6:11:77:4a:6d:77:e9:94:bd:56:ad:a9:
6a:5e:f0:99:fe:15:c2:4a:9e:4f:fb:e8:ad:af:9d:
7b:73:9f:0f:aa:14:8d:9b:d0:8d:73:de:ab:08:e2:
42:f9:d2:b1:81:84:85:45:77:a7:dd:af:64:cd:5a:
92:72:80:4f:d0:d8:3d:f3:0d:ea:a1:20:ac:e0:8c:
00:a9:47:25:9e:f1:6b:29:ff:53:ff:e5:6f:29:40:
c1:90:d4:75:5e:5b:af:0a:39:0c:42:ed:e4:d4:cc:
c4:42:cf:8e:9b:13:15:36:b1:88:b7:4d:b5:0c:89:
69:d6:85:ad:83:ca:29:03:e1:3f:27:d3:04:8b:60:
2f:1a:ba:68:43:dd:11:be:07:53:03:bb:7c:ce:ab:
01:74:e9:7e:21:16:de:a2:51:2d:2d:3e:ca:1b:b4:
a4:e7:f0:56:3b:ca:71:2f:e4:03:a3:ed:85:c8:b8:
cf:0e:d3:e1:6c:93:56:fb:91:16:7a:e5:4f:65:65:
3b:04:b1:1a:a8:dd:d5:35:f0:33:ae:2b:d9:42:dc:
b5:a8:30:a2:0f:77:7f:ff:a6:e2:fd:d6:5a:8e:f1:
e4:9e:41:55:b2:11:9b:9c:ef:0e:45:70:96:8b:ed:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:43:F6:31:37:A1:53:42:D8:18:6F:09:17:D1:8A:29:20:88:3F
X509v3 Authority Key Identifier:
keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ec:13:20:25:7c:e9:93:d0:c4:06:4b:d8:55:11:c4:21:2c:
ac:96:b0:68:22:ec:07:58:26:7f:17:68:35:ce:3a:21:cd:e8:
d9:67:c1:84:7f:a5:39:1f:6e:d0:d7:af:8d:c1:75:e2:fa:8b:
6e:8c:23:dd:da:46:6d:d0:7d:2e:23:25:b7:5f:ed:2d:a1:a5:
e2:00:2c:e5:3e:8d:ee:88:67:bb:40:06:57:69:db:99:91:87:
f0:9f:30:8a:96:29:65:e3:fb:fc:b1:07:c6:83:88:bd:3f:ab:
2c:74:77:82:e5:d2:6e:09:19:d1:74:07:7d:63:92:9a:83:39:
c5:af:4c:01:7c:8c:62:28:5a:75:16:38:b8:26:5f:39:34:31:
0c:d9:c2:25:2c:ac:2d:b6:f4:f5:91:e9:36:df:92:17:9e:7e:
35:6c:6a:03:a1:2e:de:9d:7e:7d:0e:c2:38:73:02:aa:cf:e7:
97:12:91:e5:c2:29:78:50:78:34:2d:54:c2:9f:66:39:61:72:
0c:d0:ce:79:4c:cd:7f:80:11:31:10:8f:b6:0b:a5:31:59:47:
45:01:43:1f:34:f8:e0:78:59:14:b0:8a:dc:92:a4:3c:18:95:
9c:24:40:42:22:ce:6f:bf:4f:f4:b4:a7:ea:28:49:d0:69:3c:
9b:f7:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:10 2026 by rpki-client