Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: YUd4KBsXdlGd2cKUrex19PBGp19UrXSWAQM71pUnLB4=
Subject key identifier: E5:AD:A1:7D:FB:4C:51:C6:56:ED:98:CD:A9:4C:0A:0B:CF:0D:D5:54
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 019CAB6B97331F43ED784A6D35B0177AEF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 0BA2
Signing time: Sun 01 Mar 2026 22:01:20 +0000
Manifest this update: Sun 01 Mar 2026 22:01:20 +0000
Manifest next update: Mon 02 Mar 2026 22:01:20 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: SmpO1YgCPRVvxW+EqU+QEo/N1LARm7+TpxLkaQDMxQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:97:33:1f:43:ed:78:4a:6d:35:b0:17:7a:ef:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Mar 1 22:01:20 2026 GMT
Not After : Mar 2 22:01:20 2026 GMT
Subject: CN=e5ada17dfb4c51c656ed98cda94c0a0bcf0dd554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:7c:da:2d:ed:08:a5:af:0d:08:82:46:4f:
5d:73:43:58:fa:33:44:48:43:40:6e:5e:5e:19:05:
c7:5e:52:5f:2b:c6:f8:d0:3c:08:95:ea:ca:80:ce:
7a:87:0a:2d:23:ca:08:85:5a:06:98:58:fc:b8:9d:
0e:63:6b:dd:bb:86:a7:3f:81:d5:9d:b6:9c:73:0f:
fc:39:4d:a9:f1:f9:0e:3a:0e:a7:08:1e:c9:f6:b5:
8d:98:35:f3:f1:5a:e1:5f:d7:fa:d1:01:bc:d6:7f:
0d:d1:78:e6:b0:dc:8d:8f:9e:80:0e:4a:9c:7f:b4:
6c:9e:52:27:8f:36:ad:d8:18:67:88:43:01:c6:fb:
96:76:a9:39:a8:33:bc:16:c5:cd:6e:f4:ff:8c:48:
a2:ff:2d:89:b2:73:e8:8d:a1:0c:10:97:85:d0:92:
94:87:48:8a:33:ed:f6:99:91:7f:49:f0:cf:79:35:
27:06:a6:db:5d:08:f0:29:c9:9f:9d:5f:68:b9:7c:
c9:49:d8:5d:1d:0b:5d:e8:9d:a4:35:05:23:cf:54:
39:4d:a3:9e:e4:24:a8:b3:af:27:3f:c4:b7:0a:d7:
ff:47:ea:62:62:9c:26:e9:5e:53:35:bf:b8:ea:32:
f3:af:22:65:94:43:7e:79:fe:e1:e7:33:53:71:40:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AD:A1:7D:FB:4C:51:C6:56:ED:98:CD:A9:4C:0A:0B:CF:0D:D5:54
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:97:e6:e2:79:dc:9d:9e:a8:5b:3d:05:2a:5e:19:8c:40:28:
08:62:d2:68:f3:46:24:06:ef:fb:37:27:2f:64:c1:52:3d:28:
57:a6:fb:3a:c9:28:f3:9a:e8:dd:5a:0d:e6:34:e0:df:85:b1:
45:00:43:d7:de:c8:c3:36:31:16:7f:61:bc:d9:52:11:c3:82:
9f:bd:50:ea:f0:11:eb:1d:f3:e1:bc:85:4d:e9:a9:a2:c3:3d:
37:a6:2f:f5:cb:f8:b0:db:bb:47:87:68:4e:74:20:49:6e:c2:
40:d8:66:82:67:21:8f:fd:9b:db:97:84:9f:45:c5:0b:96:f2:
bc:c6:af:10:3b:67:66:8f:61:31:f4:ad:34:70:05:39:2f:c5:
1c:f0:51:a2:8b:32:2a:c0:89:88:67:6a:21:a8:59:85:09:d0:
dc:ae:cc:33:22:53:a9:2d:24:ae:4f:40:c9:ba:47:7e:b6:89:
b4:6c:a6:79:5f:a5:15:33:fd:62:6d:40:2c:a9:e0:89:f0:f9:
6f:c3:cd:fa:6c:ab:d6:8f:b5:16:63:0f:98:d2:dc:bf:f2:57:
95:3d:cc:fc:ce:a9:36:09:42:dd:0d:0c:95:90:2f:79:e7:6e:
b6:d6:36:17:18:e7:2f:56:b6:28:03:49:8f:e1:54:07:07:ee:
00:78:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:29 2026 by rpki-client