Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier: WWQ3LsjpLnCUIsyaY9PqbIpG/0GjZg9pvamzPKJVRXw=
Subject key identifier: A7:D4:A7:07:71:1D:15:9A:7F:C4:CB:1B:42:29:97:4F:7E:CD:69:24
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial: 019D270499AF7395274C6B4D93932812D86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number: 0AE8
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: IzgZCmmKGAe6xlrN1BaXnSwQc5xI0ozuPPgSJsCIMK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:99:af:73:95:27:4c:6b:4d:93:93:28:12:d8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=a7d4a707711d159a7fc4cb1b4229974f7ecd6924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:c1:be:77:10:72:c6:cc:79:97:ac:b0:59:
44:ee:db:d6:ee:d7:91:2b:e7:d4:b0:a8:1d:90:c2:
05:ce:b8:7c:f5:5b:14:3a:60:86:c8:51:68:73:43:
de:35:4c:8f:a9:21:0e:9f:10:df:ef:e8:7f:5c:39:
3d:fd:27:8c:37:dc:a0:c9:67:51:96:87:b8:01:06:
ea:82:de:46:c0:07:e7:11:4a:09:8b:d6:09:d6:6f:
b1:0d:5b:41:be:23:6e:2a:87:0e:da:03:7e:b7:33:
6e:e4:13:56:d9:0d:b8:fd:e1:b8:b5:fb:91:de:4c:
e0:5c:cb:40:c8:24:57:c5:15:29:e3:89:d1:db:1b:
68:e3:7d:a9:a1:f3:61:7f:e6:b1:5c:b2:cc:57:ea:
5f:79:a3:01:08:33:7f:76:20:28:65:b0:04:2b:b1:
d2:b9:7e:af:75:d0:19:cb:0f:e5:df:36:5d:0f:de:
6a:77:0e:73:27:10:fa:73:b9:a3:52:a3:f5:fd:ae:
e1:f3:f5:42:82:5b:9b:f2:95:c8:7a:82:28:3e:c5:
37:6b:e4:2a:89:d7:60:5d:d1:e7:aa:52:52:29:7e:
a5:93:d3:e8:21:05:0d:3b:5f:32:22:22:1b:0a:47:
49:bd:28:49:be:cb:ac:ab:39:89:2e:71:16:c1:98:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D4:A7:07:71:1D:15:9A:7F:C4:CB:1B:42:29:97:4F:7E:CD:69:24
X509v3 Authority Key Identifier:
keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:aa:e0:74:26:e1:bb:8c:3e:e7:ed:49:7b:a2:30:ef:52:8d:
6c:2d:8f:1e:42:87:10:c0:98:aa:8c:e9:98:4b:71:40:c0:67:
b1:7e:d9:9c:59:54:6c:a9:0e:0b:6c:1c:2b:91:9f:5c:0b:39:
61:05:6b:bc:af:58:74:56:8a:b0:dc:81:78:2a:7f:98:82:f3:
2f:f8:7f:e7:9d:d8:47:ae:89:5e:0b:89:88:b8:a1:88:b4:45:
53:ab:ba:03:f2:99:53:74:0c:c8:e7:fc:c6:65:ca:82:d4:81:
ec:61:13:d1:4d:d1:6d:51:86:4c:f4:91:08:9c:f5:c0:75:79:
5e:70:80:c5:f8:78:f9:d2:cd:57:b5:26:4d:27:b9:b0:dc:6b:
a6:00:68:c4:28:6b:32:fe:55:a3:11:f5:0d:cb:f7:7a:2d:68:
65:7a:a4:94:1a:bf:a0:df:ef:80:e3:bf:21:b6:8c:94:41:74:
b2:4e:78:b8:36:11:7c:d6:68:e7:50:83:6a:65:1e:42:10:e5:
d8:db:6b:e8:72:de:fb:69:bc:ad:54:2c:12:21:26:66:30:76:
50:9c:eb:c2:55:64:48:aa:d0:cc:d1:1a:24:07:de:cb:a1:d9:
a9:59:80:ae:0c:a4:bc:c2:6d:e3:6f:15:7f:c7:72:f1:06:b8:
3f:93:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:03 2026 by rpki-client