Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
File: rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json)
Hash identifier: 3zhEjKgXh3u9hO3pbcy/iJyWSlX1WC/2gjQaziL3Hk0=
Subject key identifier: 27:BE:D3:F2:84:8A:1E:6E:CC:34:24:7D:0D:47:11:42:4F:ED:24:3A
Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
Certificate issuer: /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Certificate serial: 019D2703E6A3E54E0E41B269C8936C477D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
Manifest number: 148D
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: OjEzREtiCnn7cG2ezVMIbLZ2kxmTTwgcWNDQdbXLpTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e6:a3:e5:4e:0e:41:b2:69:c8:93:6c:47:7d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=27bed3f2848a1e6ecc34247d0d4711424fed243a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:73:f0:83:a0:04:66:db:87:58:50:11:cf:
5d:e7:03:b2:fd:99:bc:10:ac:24:ae:e5:f1:68:e8:
70:45:ac:66:0a:c4:3d:34:10:11:0a:30:c9:c3:eb:
40:28:58:3a:8e:5b:03:28:36:69:6b:cb:9e:6c:39:
11:e2:7a:14:ad:da:0f:5f:ca:b9:8c:de:94:b6:2d:
f5:80:de:e1:75:5c:a4:80:d9:45:66:02:3f:9b:5d:
12:09:78:c8:14:38:c6:48:38:35:bf:a7:5d:05:8f:
eb:2b:f0:03:89:87:fd:33:62:b8:d5:71:71:86:25:
5b:93:62:3e:da:20:23:0e:32:7c:fb:af:f7:32:38:
2a:f6:c3:43:05:b8:9d:23:4c:8f:12:81:63:74:54:
f0:ae:92:6f:eb:cb:f0:51:d1:49:b5:9e:bf:a0:0d:
54:fa:8d:1f:8d:af:3b:a4:3c:7a:12:be:56:33:7d:
89:9d:e6:bc:69:8c:7a:a3:53:ee:81:0d:3c:ad:8d:
e4:17:ff:b2:a3:42:b2:ba:84:4f:30:01:67:8f:31:
98:d5:05:2e:2e:63:bb:4b:e5:9d:f2:99:90:24:9b:
cc:e8:ad:3f:07:8f:8a:1a:42:ca:19:4d:94:b2:30:
df:10:37:b7:48:8f:2f:70:d6:9d:4d:7e:09:9c:4a:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BE:D3:F2:84:8A:1E:6E:CC:34:24:7D:0D:47:11:42:4F:ED:24:3A
X509v3 Authority Key Identifier:
keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7a:07:09:d5:9b:7a:42:a9:56:80:e7:be:42:1f:e5:49:99:
a6:80:d9:35:2e:06:32:05:9f:4c:3c:b7:49:e6:d3:e2:3a:d8:
c4:e0:24:1b:a5:46:83:d7:60:8f:1a:9d:3a:cc:2e:be:ad:f4:
b9:6d:d3:ec:ae:a0:c5:aa:ab:8a:79:d9:5c:02:d8:45:86:a3:
9f:51:24:59:36:16:4f:66:6b:d8:ca:71:73:00:b7:4f:4b:4e:
3e:ee:d6:62:06:fe:6a:cb:82:cf:27:18:22:3f:83:6c:1a:6d:
09:6f:2f:d2:fb:ce:4a:f3:93:9c:3e:60:b9:cc:fb:89:29:14:
64:80:3b:32:94:50:ab:94:01:99:53:6d:93:94:6b:00:8f:fe:
b3:86:97:7b:c7:42:57:83:06:bd:85:88:df:38:8b:05:8f:08:
b4:db:bc:19:7d:8a:15:16:88:76:0e:48:bf:3f:66:a1:54:b4:
7a:d4:be:23:0f:e6:3f:85:de:c7:a5:1e:61:57:69:36:51:d8:
78:bd:ec:6b:76:ea:d0:ca:0e:85:68:55:62:89:12:0c:ec:8d:
31:2c:eb:b9:df:d8:05:2b:05:4b:0f:5f:d6:00:a2:e0:1b:cc:
30:60:27:c8:6a:00:71:3b:0f:e2:cf:c1:e0:28:de:72:2c:a2:
93:4f:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:27 2026 by rpki-client