Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: 9TxYFDCfCorYZTDVzXr4hF6fHhuSmPquQi2kpgG1RS4=
Subject key identifier: BD:B6:98:58:6D:A1:1D:66:CF:9A:5D:BC:B9:5D:6E:D5:1F:C8:B1:2D
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 019CA9EAF0F01BB3CA337E0E9CCA963AE177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 0542
Signing time: Sun 01 Mar 2026 15:01:12 +0000
Manifest this update: Sun 01 Mar 2026 15:01:12 +0000
Manifest next update: Mon 02 Mar 2026 15:01:12 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: VHpDhx0rolb6/g/oIQ3XNOvTa8SU83IR/vQ5x7/eyMM=)
2: FoEw3sSBgl3t0ttG82J0ACX5bo8.roa (hash: MuH9TiWx0hlkjcPkeOxwnOHNyUeFkmZNNs45DwxLq/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:f0:f0:1b:b3:ca:33:7e:0e:9c:ca:96:3a:e1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Mar 1 15:01:12 2026 GMT
Not After : Mar 2 15:01:12 2026 GMT
Subject: CN=bdb698586da11d66cf9a5dbcb95d6ed51fc8b12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:89:fd:a1:9d:f3:42:66:ff:c6:51:39:06:
3d:bd:11:10:cf:8a:3d:d2:ce:cb:5b:6e:04:3c:d7:
db:22:4f:a1:5f:2f:29:ec:48:6b:2f:8e:eb:20:cf:
79:bf:19:43:18:1c:ff:e6:6f:fb:40:48:e6:23:c7:
d0:18:b5:e2:79:f7:b1:1b:4b:b1:45:01:4b:12:8f:
1a:c8:d0:3b:93:a5:27:e8:45:97:b5:4d:85:1a:34:
bd:3d:d8:9e:4d:b0:1b:ce:d3:81:50:5c:6f:04:ae:
68:80:08:d6:c4:d3:a1:bd:9b:de:d4:06:70:36:ca:
73:6b:dd:7d:35:ae:84:05:61:97:39:d5:77:75:88:
1a:14:cf:55:11:cf:22:94:42:28:da:e7:e3:26:22:
d0:d3:f5:74:20:cb:e6:58:22:e4:9d:91:d9:18:65:
bb:e9:92:a3:fe:15:2c:51:9d:c8:18:3a:9d:b8:00:
e6:14:5a:87:a6:80:6d:40:b0:a1:be:92:da:8a:4f:
02:04:70:c8:b2:b9:c9:30:67:53:b5:07:ed:38:80:
3c:fe:3f:ee:fd:c0:d1:50:89:44:d9:f9:3b:41:8e:
f0:d6:94:30:9e:6a:e5:e3:37:6b:8a:1e:b1:f4:4f:
68:92:20:c7:99:97:1b:60:58:60:ff:ef:b6:6f:f6:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B6:98:58:6D:A1:1D:66:CF:9A:5D:BC:B9:5D:6E:D5:1F:C8:B1:2D
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:99:19:db:6a:24:b6:4b:ba:eb:ca:c3:d2:55:d7:d1:49:5c:
2d:c5:3f:1f:25:50:bb:a3:09:52:d2:0b:42:a3:c9:42:6b:c8:
58:2b:bd:29:78:24:04:ce:7f:99:10:7c:05:91:0f:50:5f:81:
a0:a8:04:7e:ae:eb:d7:f0:5f:6e:17:b2:28:f4:31:68:0f:ea:
bf:cd:74:fa:8c:50:9c:60:58:65:fa:36:7a:b4:84:9e:aa:d0:
7c:04:bd:8d:96:9d:2f:68:a7:7c:af:07:0a:b3:30:5e:a9:55:
d9:d8:d6:17:b4:78:99:0b:f1:d6:03:02:3e:cf:9e:34:9b:95:
30:80:c0:62:9d:0f:da:10:dd:13:64:5b:0a:bf:4e:20:49:b6:
67:cd:f3:17:0a:97:0f:a0:f5:a8:6f:e7:d5:af:f8:29:e6:ec:
e0:07:57:24:71:a2:6c:6e:07:e9:ba:ff:65:c8:63:a3:58:f3:
0e:32:a2:0d:ad:9a:73:94:2a:92:2f:42:8c:22:76:d5:d3:0f:
bd:fc:cf:45:90:75:b3:46:4e:5e:75:5f:ec:b8:50:f7:15:64:
aa:7e:29:b6:9c:7b:c7:f7:19:73:f4:1b:17:62:2f:22:2f:15:
c7:e5:37:dd:c7:53:e4:e0:f5:c5:98:6d:80:71:90:3f:5b:5f:
31:01:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:13 2026 by rpki-client