Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File: d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier: suvw7rnMBp6hkGo6S+faNYqOLncIkezhKmZGxxEs02g=
Subject key identifier: 95:EA:FC:89:09:33:A1:F5:D6:75:DA:1C:9A:3A:2D:6C:E4:37:48:9E
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer: /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial: 019CAC46CFBB1B261C508A3D1C392A830CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number: 0620
Signing time: Mon 02 Mar 2026 02:00:47 +0000
Manifest this update: Mon 02 Mar 2026 02:00:47 +0000
Manifest next update: Tue 03 Mar 2026 02:00:47 +0000
Files and hashes: 1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: 1nnfHTl0i/RxsIx/Ng7t3k29K3e1LYBbWHIHuMH+G+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:cf:bb:1b:26:1c:50:8a:3d:1c:39:2a:83:0c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Validity
Not Before: Mar 2 02:00:47 2026 GMT
Not After : Mar 3 02:00:47 2026 GMT
Subject: CN=95eafc890933a1f5d675da1c9a3a2d6ce437489e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:e6:f6:80:4d:cc:c9:e9:0f:6b:3e:06:10:
c7:f2:0e:83:92:e8:db:a4:4c:10:3f:17:9f:17:a0:
89:1f:19:d7:71:f7:3c:23:08:5d:05:f5:63:90:1e:
2b:16:49:74:55:8a:85:a8:0d:ca:e8:36:b2:5c:37:
30:b6:d6:1e:16:f3:f6:56:06:98:21:c8:22:f1:e2:
88:c6:72:a7:48:72:35:d7:44:31:be:d9:96:26:f1:
1f:db:77:5e:69:64:08:8d:ba:d5:e9:a5:3c:aa:de:
61:1f:23:bd:c1:2d:c7:34:be:50:e6:cc:13:d1:60:
cc:f9:de:7f:6b:99:0e:36:0a:49:1c:54:97:62:c3:
f4:bb:e9:ef:78:dd:64:36:41:2c:2e:4f:c9:cd:c0:
8d:6d:da:c3:05:2a:ca:57:4c:e4:c2:d5:30:8b:4b:
98:b6:08:31:33:ad:3a:a0:62:1a:a5:eb:d0:33:42:
d0:ab:88:d8:e9:08:a2:01:3f:ae:e3:56:22:ef:16:
c6:ec:88:45:94:4b:d7:cc:a8:36:32:eb:c0:30:79:
1d:03:b9:df:bd:55:f1:81:85:55:98:3d:01:aa:26:
36:71:6b:71:00:ea:4d:b8:32:76:79:4a:39:f3:a7:
75:98:58:29:ee:6a:3f:1d:a0:d8:b9:74:a1:38:4c:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:FC:89:09:33:A1:F5:D6:75:DA:1C:9A:3A:2D:6C:E4:37:48:9E
X509v3 Authority Key Identifier:
keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a2:e9:60:36:ca:15:c5:fe:b0:4d:d3:71:1b:fb:fb:cf:43:
73:b0:84:bb:60:b9:b8:94:66:51:37:d4:00:1a:c4:fd:ec:ac:
b7:03:77:b4:5c:a4:39:c7:3f:48:f5:15:87:84:fa:11:d3:22:
5c:d7:fb:5b:73:bd:50:4a:3b:30:b6:1d:d6:13:57:ca:27:3e:
1e:fe:d8:8e:25:6e:7c:f3:37:52:0c:73:32:af:82:6b:bb:a4:
b5:b9:93:1d:0e:08:8b:96:b2:70:41:01:d3:e7:e8:5f:d5:e3:
19:c9:11:ca:59:44:d8:8c:fd:2b:cf:cb:56:e6:64:e8:2d:ef:
31:64:c0:c1:6d:63:66:0a:2c:ee:6d:22:99:c2:02:5b:7c:9f:
50:60:12:cb:a7:9a:8e:11:15:6e:b9:cd:3c:32:80:33:89:6d:
05:65:0d:84:df:8a:2e:a8:7f:40:d2:28:1f:f8:0e:5b:9e:92:
09:86:10:0e:72:41:0d:1c:e4:84:90:f1:d7:c1:52:54:30:72:
50:3e:8f:d2:08:74:48:62:cf:15:41:ff:ae:76:8a:1e:02:e0:
84:5f:64:4a:0d:0e:91:d7:8c:1c:da:30:98:93:92:66:43:a1:
99:d9:9e:3e:62:06:37:5d:43:0f:00:55:e4:01:d6:12:09:38:
37:95:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:00 2026 by rpki-client