Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier: QD+buXqTvINcgMwwcxdkVUcRWorPAfABXg1bchkgid8=
Subject key identifier: 25:D2:16:13:9D:71:05:3D:0E:AC:F7:DC:9C:5C:F9:A5:31:9F:41:20
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial: 019CAB6B52474614239D1C92AEA6EFC60953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:03 +0000
Manifest this update: Sun 01 Mar 2026 22:01:03 +0000
Manifest next update: Mon 02 Mar 2026 22:01:03 +0000
Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: rkFk0u8/Cz721cAFvn2EANXFh9oVOnz7di38LEuPl8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:52:47:46:14:23:9d:1c:92:ae:a6:ef:c6:09:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Validity
Not Before: Mar 1 22:01:03 2026 GMT
Not After : Mar 2 22:01:03 2026 GMT
Subject: CN=25d216139d71053d0eacf7dc9c5cf9a5319f4120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b5:85:1c:ee:4d:d1:08:2b:7e:2f:ab:f6:46:
47:fd:a9:a3:ed:c0:67:ec:5b:50:f8:24:41:61:f7:
30:fe:d8:76:ac:57:f6:b4:4b:4e:c2:82:f0:41:32:
a7:67:9c:df:c6:bb:cc:73:30:5f:b8:c5:97:ba:df:
d7:04:4d:c8:a8:6b:7b:6a:cf:88:95:7d:94:96:da:
99:5a:da:6f:b8:09:31:1b:90:90:82:22:56:8c:0f:
2b:37:55:c2:eb:28:16:59:94:bf:00:cd:c0:ae:1a:
65:1c:d6:a4:c0:f9:45:b7:63:d2:9d:75:93:3f:40:
62:38:f2:de:a6:5b:c3:5f:b3:19:ac:2c:70:47:20:
96:5a:c8:e7:b8:9a:fa:f0:3c:ed:41:60:ec:c1:3a:
76:f5:00:34:62:31:1e:37:c6:3b:94:6d:9a:b1:51:
23:d4:62:02:e3:d3:e6:30:05:a9:a1:50:b5:6c:d4:
de:f0:d0:66:dc:f3:44:95:a6:bd:2c:b5:66:2b:0d:
1b:eb:ff:e4:e1:9c:45:92:55:9b:6c:71:42:8e:80:
2d:d1:fe:e3:ea:8c:ee:f6:44:61:24:33:1c:69:b5:
8c:d1:1e:7c:f3:fe:ae:6a:76:af:a5:3b:c1:33:7c:
63:b7:8d:39:96:84:5d:5d:06:c3:70:dc:86:04:66:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:16:13:9D:71:05:3D:0E:AC:F7:DC:9C:5C:F9:A5:31:9F:41:20
X509v3 Authority Key Identifier:
keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a1:ff:c9:90:a5:77:44:11:4e:85:8e:97:ff:b5:ad:1c:26:
6f:6c:35:d4:32:1f:38:4a:8b:b7:6f:dc:02:46:93:ac:df:52:
31:0a:8d:53:08:07:6a:c6:e7:1f:4f:93:67:35:b6:ca:3d:92:
7a:f5:1c:a1:55:63:c4:1e:82:e5:ad:ec:55:b0:b1:7e:2a:91:
18:98:bc:f1:79:0c:34:3a:ce:86:1d:ae:00:1d:6a:f4:02:45:
93:ea:40:eb:83:86:8d:c7:3b:8d:bc:91:9a:7d:0f:28:2b:a8:
86:82:65:f7:67:6a:36:89:34:9b:a8:31:b9:93:d1:7b:a3:63:
97:ee:7c:7f:af:03:21:99:e3:15:76:79:4f:b3:06:bb:0c:09:
7c:c9:6b:1a:d4:ce:da:d1:58:d0:2d:20:da:03:df:b4:3f:2a:
e3:3d:c2:18:66:98:a0:28:3f:23:c4:39:3f:b9:04:87:b6:6d:
d6:36:9d:ef:1f:03:69:b9:03:e3:d3:1d:47:42:2c:82:d7:32:
83:6c:3d:b4:1d:52:55:48:81:4d:8c:a0:d0:a6:0b:da:5c:64:
d4:6c:07:8a:f9:21:d5:69:9c:00:27:92:a6:5f:42:24:72:3f:
c5:73:99:cd:43:5d:71:a5:60:54:54:a6:ca:1a:7b:6e:9d:9c:
9c:74:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:00 2026 by rpki-client