Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: 2j+4RSknLcYMPEbxbp5YzAVO/bt+LKrPi84OSMBZNSw=
Subject key identifier: DA:73:FC:CE:1E:26:E1:28:B6:C6:35:B7:E9:D8:64:A2:C9:87:F3:C0
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 019CAC46C301A7F53D806DEB3B713DD0AA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 17D5
Signing time: Mon 02 Mar 2026 02:00:44 +0000
Manifest this update: Mon 02 Mar 2026 02:00:44 +0000
Manifest next update: Tue 03 Mar 2026 02:00:44 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: Sw0KU+CCB4CDVjvQl1qnKyeSkRuSMZX9xxSGvK+0uNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c3:01:a7:f5:3d:80:6d:eb:3b:71:3d:d0:aa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Mar 2 02:00:44 2026 GMT
Not After : Mar 3 02:00:44 2026 GMT
Subject: CN=da73fcce1e26e128b6c635b7e9d864a2c987f3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:68:03:49:6c:dd:55:b7:af:92:d6:e1:24:f9:
87:34:8d:17:e6:90:52:69:ad:dd:25:c7:a6:f1:26:
52:8c:7c:ac:66:28:ce:91:50:9c:2f:59:63:d5:54:
2c:9a:0c:21:5a:d8:6f:ed:0d:03:12:df:a6:c2:0b:
92:a0:d6:4f:fa:0f:e9:4b:24:ee:24:5a:c6:f8:cd:
8c:19:8d:37:ca:e4:83:6d:f2:20:ef:fd:a4:6f:11:
4c:66:21:0b:1b:a6:8e:a8:d4:41:93:f5:65:0c:f8:
cc:99:6d:9a:62:f6:46:e5:73:6a:a3:38:b8:e8:47:
81:dd:32:71:72:fc:af:05:39:f4:3a:5c:43:5c:35:
6c:83:df:84:41:5b:a7:6d:36:0b:93:ca:0c:86:66:
f0:09:1d:9d:97:fd:5a:a9:2e:e2:89:ae:4c:77:5d:
da:8c:4c:02:1a:14:03:88:7c:31:42:7d:5a:ac:4b:
fe:64:70:9e:04:9d:3c:6b:2a:a2:06:50:c8:00:83:
d3:a0:f7:29:0a:4e:91:e7:b5:31:52:54:6b:9b:bf:
33:3f:e9:5c:f5:e8:e3:9b:68:61:7a:77:83:77:9c:
63:67:03:9c:44:c2:5d:cc:5b:6c:1a:2e:20:ff:4d:
db:57:81:ed:7b:fa:3f:0d:48:22:42:2e:0a:e8:61:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:73:FC:CE:1E:26:E1:28:B6:C6:35:B7:E9:D8:64:A2:C9:87:F3:C0
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1b:05:98:1c:d4:2b:29:6f:c2:4a:04:a8:cc:22:0a:05:ba:
8f:00:e0:3b:be:cb:9b:57:14:fc:22:9e:96:09:eb:3d:0a:7d:
b0:c7:59:94:60:5b:b2:05:97:6c:91:c7:cd:ec:be:f0:c7:3e:
d1:2b:66:bb:15:97:7e:ea:67:6e:89:4e:75:ae:13:2d:0d:65:
3a:bf:3c:e0:23:6c:7b:29:bd:ed:2b:66:7b:49:e5:d2:ac:ad:
5e:8c:3b:f3:c7:e7:b4:30:a3:62:37:41:5b:e8:d3:81:28:7e:
80:89:93:70:a5:c2:02:28:93:81:cb:b6:65:96:1c:32:e9:72:
12:af:d3:3e:08:a0:69:a9:86:ed:5e:0d:3c:66:13:94:1b:1d:
f2:1c:1b:da:2a:88:3d:93:d4:a3:88:56:3f:2e:37:ba:cc:f5:
25:55:6b:f9:16:31:e5:ed:77:9f:b6:69:14:40:32:d6:d8:e3:
02:4c:e8:74:1e:4f:55:f1:b6:19:6a:8a:af:d2:eb:ab:12:86:
6f:15:19:7e:d8:03:08:d3:30:4c:1d:09:fd:d1:41:21:e4:01:
56:c3:3f:8a:5f:6d:03:f9:7c:88:73:af:0c:2a:fd:c1:c1:62:
5c:4c:62:09:25:2c:81:a0:a5:91:ea:51:c4:45:e7:cf:6e:71:
4c:7d:26:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:25 2026 by rpki-client