Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
File: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft (raw, json)
Hash identifier: OUuezJ5fQ/bXh0/gOrdOkeOIDvpYgFwu2c/A80sTej4=
Subject key identifier: 0C:68:A8:69:46:39:71:75:D0:B9:C3:12:1D:FB:5F:7C:63:65:0F:03
Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
Certificate issuer: /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Certificate serial: 019CAB6B5E66076A20E6BBD7FD4EB4E5F1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
Manifest number: 0595
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl (hash: 48K1ibFlzd+XwaIThjF8BK4QwpH37aW1urPCsaRHWWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5e:66:07:6a:20:e6:bb:d7:fd:4e:b4:e5:f1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=0c68a86946397175d0b9c3121dfb5f7c63650f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:5f:1a:20:93:c0:1e:b1:8b:8e:6d:a0:74:
bb:1b:d9:ab:d2:b0:ef:28:af:98:86:7a:11:47:bb:
ad:ca:26:00:5c:08:35:e3:0d:1e:5b:69:41:5b:92:
2f:63:3e:2c:a5:71:1e:bd:d1:f9:a2:95:c1:e7:04:
5f:1b:cf:b2:e6:6a:ad:19:07:bb:20:9e:68:0e:0f:
df:45:57:65:05:1c:b1:e4:b0:86:82:a5:9d:1c:c9:
fb:66:a8:a4:52:ba:64:03:82:97:0f:20:44:e1:a5:
e3:3c:dc:17:73:82:b8:de:ba:09:f6:aa:3f:a2:dc:
d4:25:d6:70:82:96:0f:37:9f:b8:68:d4:14:bd:71:
f0:2a:1f:e0:24:73:72:26:9e:55:b8:67:c3:45:39:
ae:96:fd:3f:96:a8:d2:d0:99:10:ce:6e:df:52:60:
e4:16:9b:a4:88:9d:c3:6b:e2:c8:b6:30:37:29:62:
1d:bf:20:3d:b7:8c:f7:6b:ac:3b:e7:b7:e7:9e:03:
2a:ca:a9:0e:f9:3f:29:c6:44:8a:06:42:32:e6:da:
5f:7a:c1:3e:ee:eb:25:dd:77:b8:24:44:8c:6c:72:
98:22:c4:a4:ad:7f:a2:12:16:52:4f:bc:fa:89:54:
31:ed:80:c4:0b:70:91:0a:de:ab:16:92:70:cc:9a:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:A8:69:46:39:71:75:D0:B9:C3:12:1D:FB:5F:7C:63:65:0F:03
X509v3 Authority Key Identifier:
keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:29:ae:18:20:a3:7d:8b:82:ed:77:d8:0e:9a:f7:b9:62:3a:
a2:d2:1b:18:40:c7:c0:b7:f6:23:08:15:22:7e:5e:e2:10:07:
88:98:fa:11:46:a9:24:36:7f:94:03:49:48:23:5b:c5:30:99:
e6:b0:b9:41:f6:28:02:4a:bd:7f:44:14:c1:1f:64:d4:69:53:
79:0b:f4:8e:e8:28:35:3a:65:f1:bb:f3:53:f6:ce:9f:5c:a2:
13:14:58:95:96:2c:cc:a2:89:1a:ef:5c:99:12:0d:56:94:bd:
92:89:77:49:d7:53:17:f5:f7:83:80:df:d0:97:55:51:53:09:
94:9e:58:29:1c:5c:1e:08:75:2c:db:6b:95:72:bf:b9:88:19:
9e:b2:a9:6f:48:79:2b:b9:2a:47:fc:91:50:19:fb:4b:1f:ba:
91:4e:f2:84:6e:12:a7:8c:39:7e:56:8d:11:7f:56:a4:3d:63:
53:21:7c:ca:93:00:3d:46:0e:e5:86:70:e5:f8:d4:87:9f:07:
d9:07:37:d7:8d:39:a1:17:4b:eb:22:82:f5:40:82:24:43:8e:
d3:e9:6a:30:38:53:6e:08:4f:92:b6:ba:25:2f:58:36:93:fb:
c7:d6:76:6a:48:99:44:92:57:3d:b8:f2:33:6d:57:02:26:0b:
82:ca:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:25 2026 by rpki-client