Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: rc/kOfjjY1AFiowsYttklDQY4VfrYxouE5J209cPgcI=
Subject key identifier: C5:34:1D:95:BA:C1:53:E8:DD:E1:A8:40:92:64:DC:D9:52:15:44:26
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 019CABD8F4885DB335BC485C938EC561B3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 0824
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: xMc63ehyeXl/RLsw1udvsavJEhpFlqqXLzu1mU2SdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f4:88:5d:b3:35:bc:48:5c:93:8e:c5:61:b3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=c5341d95bac153e8dde1a8409264dcd952154426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:d8:22:5d:be:a6:ba:de:28:84:26:d3:b6:
09:91:dc:9c:7c:b4:f1:5b:9a:95:65:8f:9c:16:10:
ad:c7:32:ac:c0:a9:57:be:f5:e2:10:9c:88:e8:b0:
95:9b:b1:a5:7e:92:9a:a1:bb:ae:f7:a2:e2:bf:36:
47:84:33:9f:39:cb:2f:41:cb:f5:60:4d:41:b1:56:
bc:ba:5e:99:a7:fb:13:6c:b5:4b:b0:7d:c0:ba:23:
59:78:ef:c7:dd:72:6e:05:4f:ab:b4:aa:82:1b:0e:
a7:93:fd:f4:66:6d:e1:49:d5:02:46:6a:06:01:f1:
06:76:d8:df:e5:3e:83:14:61:03:bf:76:d5:80:a7:
4f:59:0f:05:d9:09:ac:04:01:6c:d9:32:04:5b:0a:
6d:51:e2:30:eb:e9:af:59:fc:32:33:ef:62:7b:48:
48:5c:d3:43:57:f6:bd:c9:39:4a:df:34:cd:d4:ea:
9c:cc:c7:1c:2d:20:be:22:8b:09:42:86:c8:76:0d:
32:a4:97:ed:4d:df:1f:64:23:4f:2f:6f:f3:71:1e:
e1:77:57:5c:08:6d:9a:79:71:bd:3c:8d:e3:7e:60:
79:1f:83:75:10:11:3e:0c:b2:05:fc:38:d9:fa:5b:
11:d1:5e:45:0b:b7:cb:9c:b0:68:1c:0d:ee:7e:d4:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:1D:95:BA:C1:53:E8:DD:E1:A8:40:92:64:DC:D9:52:15:44:26
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a0:66:07:6e:6a:0c:35:b8:54:92:a6:2d:37:17:d3:f4:c4:
50:0c:73:85:ea:f9:8d:68:50:e4:07:ca:5f:16:7f:9e:61:06:
3c:a7:d1:fd:0e:01:28:a0:36:18:a2:a9:19:be:3f:98:c4:f2:
46:5d:8a:f9:a9:2a:75:61:54:55:0a:56:b7:a3:e4:89:62:16:
4d:ad:6a:84:3f:90:75:42:36:a0:01:43:15:c5:d8:3b:c2:4e:
2c:80:7a:86:2b:a0:5d:08:08:48:c3:59:3c:26:03:12:da:22:
9a:13:90:18:d3:1d:55:70:30:14:59:c5:9f:54:73:26:f2:6f:
43:ac:e0:90:e0:06:b5:3a:83:38:86:f9:cc:03:92:40:28:c9:
78:46:63:8e:cb:d9:55:6a:d8:41:23:ff:68:31:7b:02:86:27:
96:36:83:d5:40:27:a8:62:df:31:b7:9f:30:ac:99:2e:49:33:
c6:38:86:0e:05:5b:f6:cc:a9:2d:17:26:c9:e9:44:50:d2:34:
e9:0b:fa:50:77:46:23:70:55:83:e7:cc:f9:d5:82:ad:8e:1c:
23:49:4a:0d:d1:3f:6c:c8:24:88:d2:15:ca:54:5c:fa:46:64:
4a:52:0e:0c:24:4c:99:5a:f9:a4:cb:de:49:2f:e4:6c:06:8f:
57:4e:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:13 2026 by rpki-client