Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
File: ap2Z4esn7Hq76TViechBGkEw_co.mft (raw, json)
Hash identifier: e7ES4mCo/lzyOjBWtZQHDVeHdiTALIDKdGqsHgtYlo4=
Subject key identifier: DB:03:1D:06:AC:A0:74:C1:83:F1:D0:3D:9D:B1:03:32:83:98:6C:F5
Authority key identifier: 6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
Certificate issuer: /CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Certificate serial: 019CABD941CCDE9005577F26C0A5AD9E7880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
Manifest number: 0EBC
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: ap2Z4esn7Hq76TViechBGkEw_co.crl (hash: P5n02DRZ/b/ilZzci2n9oLBlo6bdVA9FiI7jAyEl0rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:41:cc:de:90:05:57:7f:26:c0:a5:ad:9e:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=db031d06aca074c183f1d03d9db1033283986cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:5c:13:fd:38:fe:38:7a:5c:ec:36:c7:ee:
c2:92:c1:2b:32:2a:ed:ce:29:00:22:34:2e:95:38:
05:e9:a5:99:b7:6f:8d:e9:bb:6b:64:a3:ce:40:2d:
60:3a:28:48:d5:d3:13:17:29:2f:5a:8b:b2:dd:05:
d8:f3:f4:b7:a7:40:82:05:bf:8f:70:b5:a5:8a:fa:
42:da:ab:a7:56:6f:ae:dc:98:1c:f7:f4:46:8c:2a:
d4:5e:6c:3b:1a:4d:bd:ae:33:4a:4c:17:93:a3:23:
6d:b8:bf:f7:b8:1e:da:8d:8b:63:7c:02:a7:9a:b3:
3a:4b:49:07:a9:63:45:5f:5b:9b:f1:2a:37:24:10:
0e:91:23:14:5c:2a:26:0d:8c:b6:e8:a7:ec:31:07:
6d:97:44:ab:5c:8e:4c:a1:ff:81:7d:34:58:7c:dc:
c7:1e:7b:d1:cb:26:11:de:02:32:e9:29:1d:7a:fa:
4e:6a:60:f8:71:41:49:a1:44:63:10:1e:36:6f:42:
0f:ef:4c:c6:e2:d2:93:c2:ff:df:3e:35:27:27:88:
8a:67:71:f2:7c:3a:5a:88:1b:60:29:19:c1:50:38:
98:7e:3b:43:5e:1b:ed:b7:eb:37:fc:76:47:ce:66:
7d:54:b9:bb:58:fe:6f:e1:71:1b:e7:57:4e:64:4b:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:1D:06:AC:A0:74:C1:83:F1:D0:3D:9D:B1:03:32:83:98:6C:F5
X509v3 Authority Key Identifier:
keyid:6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:53:80:b6:a3:02:3f:1b:d1:85:39:c3:b1:c1:c9:f5:d2:66:
54:23:36:8d:fa:c4:21:2e:09:8f:3b:04:ac:76:08:b7:3a:ec:
63:b9:97:ae:ca:04:f6:d8:85:ba:0a:5b:0b:68:12:66:b0:3a:
bc:f1:82:15:f8:11:b8:ac:8d:fc:74:d0:c6:66:bc:61:76:0c:
31:40:bb:3d:42:c3:0d:b2:ce:9a:f9:e6:00:57:d9:50:24:82:
15:f2:6e:94:f2:42:95:5c:08:a0:6c:f8:8b:5a:87:73:c2:d7:
e1:5b:a6:df:19:50:5b:37:67:40:cc:69:4f:6e:a2:84:78:ff:
2c:20:fa:68:5c:42:34:68:f2:93:bd:66:24:10:a5:1e:0b:56:
4b:78:78:aa:38:e5:66:ab:42:a1:c8:3d:72:35:e7:34:aa:f2:
99:23:52:b8:b6:c0:3c:18:36:7b:55:bb:94:94:bc:0a:b3:cf:
ba:32:9c:ca:a2:03:fb:d5:8d:2a:37:f0:fe:64:8b:23:16:6c:
85:72:88:41:f8:d4:62:76:cd:06:dd:d4:a4:da:7e:19:8a:ee:
ce:41:1d:03:06:19:d6:04:2b:77:3a:cd:87:9b:93:0c:3b:0b:
f0:21:3f:75:72:3e:81:f3:a6:9c:3d:3d:40:63:73:4b:0b:e2:
39:db:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:57 2026 by rpki-client