Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File: E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier: 9Un190yRH49P7+5FoNOrK90UUHsElj5BdcCIau2u1Zg=
Subject key identifier: CA:68:14:1E:5F:9D:36:03:77:43:C5:ED:91:65:70:59:B4:BA:DD:BE
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer: /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial: 019CAC104DC29B47F5DD1910CF4C0BDE3B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number: 0C67
Signing time: Mon 02 Mar 2026 01:01:15 +0000
Manifest this update: Mon 02 Mar 2026 01:01:15 +0000
Manifest next update: Tue 03 Mar 2026 01:01:15 +0000
Files and hashes: 1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: NFj2jIMTKxoTp471V7lHpHAa5mdFK81tY2ByXyMVExY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:4d:c2:9b:47:f5:dd:19:10:cf:4c:0b:de:3b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Validity
Not Before: Mar 2 01:01:15 2026 GMT
Not After : Mar 3 01:01:15 2026 GMT
Subject: CN=ca68141e5f9d36037743c5ed91657059b4baddbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:fb:c7:de:6c:76:e4:48:58:d7:ab:d8:4b:
1b:33:27:49:64:5e:24:b6:29:08:1b:90:3d:53:1d:
3e:34:dd:ee:8d:85:d7:8b:e5:1c:15:f7:d8:b5:bc:
53:b5:d6:8b:0c:0d:90:7f:e5:a1:de:26:ba:8e:a4:
c4:e6:58:00:57:d7:31:b8:4f:f7:f3:ff:b5:c6:ae:
2d:f1:92:13:53:a5:a2:c7:58:ad:95:1c:d8:e7:9f:
c4:58:07:65:a9:8e:85:a0:24:0a:d5:0a:f7:ac:61:
fd:2c:01:63:ad:29:43:48:ea:20:89:ae:35:eb:e7:
45:6b:74:35:80:0a:dc:7f:81:39:8a:57:07:75:75:
aa:14:99:a9:64:d9:75:bf:c6:47:e7:e5:bc:15:ca:
42:b8:09:a7:41:0c:69:fb:8a:43:af:1c:60:ae:73:
42:33:7a:ae:97:a6:c3:0d:f9:e7:58:5a:9b:0c:4e:
e0:b9:eb:7c:a5:4c:9c:cc:69:21:45:c5:e4:8a:6a:
57:b0:e1:74:16:6a:33:58:65:36:6a:83:d1:fd:23:
81:12:13:d4:d0:b2:2c:71:14:77:95:bc:54:38:1f:
72:09:44:20:f0:66:a0:bf:11:1b:6f:a0:01:2f:32:
81:2b:f3:0f:f5:81:f7:38:10:6c:c4:3d:cb:8b:15:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:68:14:1E:5F:9D:36:03:77:43:C5:ED:91:65:70:59:B4:BA:DD:BE
X509v3 Authority Key Identifier:
keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b7:a9:00:f3:41:0f:9c:dd:92:2c:35:60:fd:55:e4:4f:b3:
f2:f4:8d:cb:80:aa:cc:58:19:f5:3f:15:df:43:a4:8c:01:45:
9c:b0:98:87:9b:e4:26:d1:ae:68:26:9b:0c:ba:f6:cb:0b:72:
2c:69:7b:b8:ae:4c:cc:b6:12:2d:0d:01:66:70:6f:57:cd:1d:
ec:5a:a0:59:53:2c:e7:34:ba:73:9a:cb:d6:82:22:80:33:f6:
aa:c6:ce:eb:ce:20:f3:48:37:9e:2d:d1:39:37:b3:c8:83:de:
86:f4:08:08:de:a3:62:35:d9:b1:de:51:d5:3b:e7:f3:cb:c0:
11:63:3a:74:50:d6:ab:50:b2:fb:d1:21:b6:a2:3f:14:08:fb:
47:95:9f:64:b4:fb:78:51:fd:b0:8e:63:b8:05:8f:ba:9c:63:
24:7d:cf:6f:cf:e6:f4:0d:de:56:ba:a7:2f:7a:1d:f1:88:d9:
7b:23:63:50:88:ea:ec:22:66:94:c6:74:f9:b9:67:71:ac:b0:
b1:3a:96:a5:99:71:80:84:8a:de:7d:14:bd:66:80:65:50:8e:
d6:07:41:d5:b9:5b:91:4b:20:bd:da:4b:ed:a6:70:89:b0:d1:
fd:84:ac:75:77:74:34:35:ec:6d:20:8a:5d:52:4b:d2:4b:97:
9b:b6:e2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:48 2026 by rpki-client