Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: XSOMa2K+gjHeg9dfdjUou2IIEwAuqzQR6KnCJNiFbAk=
Subject key identifier: E2:E3:F5:98:BE:C4:5A:24:E1:7C:B3:03:04:0C:AF:7C:C6:6C:FB:20
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 019D28F2A2309AF77618BC1A1D1595C7D541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 0640
Signing time: Thu 26 Mar 2026 07:01:22 +0000
Manifest this update: Thu 26 Mar 2026 07:01:22 +0000
Manifest next update: Fri 27 Mar 2026 07:01:22 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: eE5WyeunZCFk4aFwX1N2X20opzaZpeLWz3YvTNUbZvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a2:30:9a:f7:76:18:bc:1a:1d:15:95:c7:d5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Mar 26 07:01:22 2026 GMT
Not After : Mar 27 07:01:22 2026 GMT
Subject: CN=e2e3f598bec45a24e17cb303040caf7cc66cfb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:6a:98:1a:e6:9d:71:60:30:fd:0c:e1:05:
7a:20:63:e0:89:2d:90:4c:bb:53:0b:9f:e0:48:c3:
53:0d:cd:fc:13:8f:42:d5:90:88:f1:83:de:0b:41:
68:ec:a5:d0:d4:9b:7c:af:d0:d5:ba:22:ec:f6:d4:
13:69:c9:c7:ae:d8:d5:b3:47:ae:fc:ee:12:11:f9:
b4:55:77:b4:6b:72:7d:0c:cd:90:9d:eb:08:7d:31:
a2:d7:26:dc:b2:b3:47:dc:39:25:9a:1f:01:4f:c0:
44:41:f8:85:f7:21:9b:fe:13:00:a4:da:1a:5c:a4:
75:b6:1d:f7:42:f7:fd:04:f2:b3:29:44:69:35:ac:
b9:32:68:fe:26:2f:c2:86:35:74:10:e5:cc:6e:7b:
b1:23:a2:11:97:cf:8e:da:b9:2a:50:28:f0:53:5c:
a3:b4:a3:fd:08:b6:05:dc:80:67:63:8d:b8:41:b1:
6e:38:98:77:59:23:3e:4e:d5:b4:cd:4e:59:e9:1b:
73:be:b4:b0:8c:36:c7:28:31:d7:f9:bd:c1:32:4b:
80:f3:1a:59:f4:4a:76:e0:87:a5:bb:97:2f:e9:90:
03:98:08:9a:97:7a:92:ff:b0:39:9c:d4:4e:a2:3f:
1a:bb:19:b5:1f:4e:15:77:2a:4d:9b:ba:df:23:1f:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E3:F5:98:BE:C4:5A:24:E1:7C:B3:03:04:0C:AF:7C:C6:6C:FB:20
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5f:8f:d1:b3:eb:25:66:ac:14:bd:f0:d0:83:5d:e0:13:0d:
62:78:e4:de:e4:6c:e6:75:53:62:53:ec:10:84:f4:d1:0a:40:
fc:06:7a:a0:96:4e:7c:21:10:58:8a:a2:0b:8e:c5:38:6e:45:
31:04:27:db:57:05:33:3a:15:88:90:91:31:e1:35:df:47:53:
ff:f9:f7:6d:71:62:18:43:28:b7:02:52:21:06:42:0c:6d:5a:
90:cb:f5:3e:14:48:8f:f3:0d:85:10:44:50:71:0a:be:0f:74:
42:d2:12:17:c6:fd:30:48:89:1a:a4:27:03:ba:30:fc:45:d1:
60:ea:fb:c9:ac:95:66:c2:9d:2b:94:6d:53:87:bf:1e:03:f4:
97:f8:7b:c1:60:76:83:9b:d8:cf:c9:52:a2:72:1e:32:fe:4a:
9b:27:96:ef:90:ee:20:a8:5d:19:2a:0b:09:a7:b5:f6:06:8e:
f9:e1:f4:dc:92:66:16:9f:f8:7c:5d:a2:71:df:0f:21:89:a9:
13:08:ee:71:a4:00:d5:d1:13:83:36:c8:04:bd:15:a2:81:fa:
d4:7a:0d:4b:20:e5:7e:0a:9f:44:27:64:8c:ba:a0:30:92:f1:
31:b8:dd:c2:a1:d3:cc:3c:8f:0c:62:62:88:3c:80:e5:67:61:
f6:34:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:14:59 2026 by rpki-client