Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
File: _e3ZOtbKqmCtSfD5N32Kq_h34ts.mft (raw, json)
Hash identifier: IXsTZ9gpNc8ZoaWHfxhmhxISn5eG0k2Pxkbskqc2+24=
Subject key identifier: 2F:A2:26:20:21:E2:7F:4D:35:6C:8C:5A:A4:11:44:39:44:F4:E5:2F
Authority key identifier: FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
Certificate issuer: /CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Certificate serial: 019CAB6BA4085EACBBD6EA51835EE7706381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
Manifest number: 09C5
Signing time: Sun 01 Mar 2026 22:01:24 +0000
Manifest this update: Sun 01 Mar 2026 22:01:24 +0000
Manifest next update: Mon 02 Mar 2026 22:01:24 +0000
Files and hashes: 1: _e3ZOtbKqmCtSfD5N32Kq_h34ts.crl (hash: Gx+IauxmrJcfLuUmHZV9+mx7qKt4gymhpMGYbRMsHIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a4:08:5e:ac:bb:d6:ea:51:83:5e:e7:70:63:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Validity
Not Before: Mar 1 22:01:24 2026 GMT
Not After : Mar 2 22:01:24 2026 GMT
Subject: CN=2fa2262021e27f4d356c8c5aa411443944f4e52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:20:70:8c:8e:18:c5:34:0f:ff:1b:6f:7a:
f2:f7:75:49:3d:9a:76:8a:40:4f:2c:e9:56:11:33:
b7:99:ba:57:85:fd:3d:0c:8a:b3:89:45:fa:61:6f:
bd:41:f7:b5:10:5f:74:e9:1b:19:08:74:f6:d4:3f:
e3:ef:dc:5e:91:ad:35:c6:37:e4:f7:2e:d4:52:13:
c9:e5:cb:44:f1:2f:65:21:ac:6b:0d:21:44:af:9d:
d9:70:f4:24:d3:dd:a4:d9:fe:eb:b9:5d:9c:60:e2:
c4:bf:7b:a6:72:a1:51:19:ab:52:53:30:a4:83:e7:
1d:cf:0b:c0:3c:e7:ea:a1:15:b3:c9:bd:81:6f:82:
41:bb:05:33:70:e3:63:4c:93:71:3d:07:54:fb:52:
d2:e2:9d:ac:e9:60:c1:3a:08:60:dc:93:cf:e6:4f:
0a:6b:6f:ef:9e:b0:39:7c:a9:77:1d:13:83:ba:5b:
cd:72:2b:a0:34:03:6e:12:4e:86:79:2a:f6:4f:07:
10:68:00:f1:29:81:c2:db:33:59:a7:e9:da:e0:81:
d8:13:0b:bc:b4:da:3a:35:c1:24:d4:00:8d:2b:be:
12:36:0c:78:71:6b:5d:48:8e:6e:7b:ce:72:cc:0e:
f4:59:ed:52:87:63:2a:d5:87:bf:5c:03:5f:be:6f:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A2:26:20:21:E2:7F:4D:35:6C:8C:5A:A4:11:44:39:44:F4:E5:2F
X509v3 Authority Key Identifier:
keyid:FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e4:19:76:0a:9a:45:40:38:80:dc:88:be:59:15:92:49:cb:
80:5f:d7:cd:4e:d6:9d:c9:e5:6a:b4:7f:a5:35:2d:b8:32:6b:
b3:d1:17:65:49:c2:80:fa:1c:30:60:00:39:d3:2e:b3:67:a5:
db:f7:82:3e:0b:18:98:3d:2d:bb:2b:71:c0:0b:f8:10:86:90:
3b:36:fb:04:dc:8f:23:c9:ef:fc:fe:1c:71:1c:0c:69:39:f3:
31:ff:e4:ca:a1:e6:d5:3d:e8:41:21:ac:eb:6f:eb:63:22:8c:
4a:49:05:c3:5d:7a:81:04:5b:56:f5:dc:1e:83:25:15:ed:8e:
4e:53:86:54:b1:80:05:63:c0:20:6e:fb:2a:65:6a:20:92:98:
44:23:db:4f:d3:0b:e9:49:f9:51:61:2f:8a:98:4b:04:9c:72:
7c:7c:88:29:6c:94:32:fa:c0:19:1f:b7:55:8c:8e:71:2c:82:
bc:a3:56:44:91:91:f1:9f:96:bf:9d:c6:2e:f0:53:75:4d:d2:
34:07:02:80:41:fb:b1:12:a1:15:e7:d5:2d:93:19:32:61:ad:
d5:fb:93:38:fc:f1:1c:51:ed:6b:e9:de:06:e5:1c:d3:8e:19:
dc:98:6b:de:66:e1:21:6e:b1:5c:de:7a:79:a8:36:73:e2:dd:
43:d6:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:46 2026 by rpki-client