Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: ASdG+nRB4nA1l1LpG0MY6jijSG5VvCMVW7kiQji7afs=
Subject key identifier: 3A:6B:A7:41:8B:7D:0F:46:5B:30:0B:F4:82:07:E8:CC:0F:C5:9A:89
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 019CAD59300637AB69298BFD0603DBB263A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0DD1
Signing time: Mon 02 Mar 2026 07:00:28 +0000
Manifest this update: Mon 02 Mar 2026 07:00:28 +0000
Manifest next update: Tue 03 Mar 2026 07:00:28 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: jEUy/5oOCxkKyTyvxcb9FYzZy2JcPe2CE3Q26kvmDvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:30:06:37:ab:69:29:8b:fd:06:03:db:b2:63:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Mar 2 07:00:28 2026 GMT
Not After : Mar 3 07:00:28 2026 GMT
Subject: CN=3a6ba7418b7d0f465b300bf48207e8cc0fc59a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:d8:f0:91:6b:93:7d:c1:b9:9f:9c:5d:e5:
47:27:94:76:fd:47:90:7b:a7:70:e4:87:4a:35:b7:
b5:ed:2c:e6:f1:0a:9d:af:d5:71:1b:0a:a2:0c:4b:
dc:1b:fb:dc:05:a1:92:41:cc:2f:28:3f:9a:0e:44:
15:35:f3:c1:bd:14:26:c8:67:44:a9:96:96:5f:11:
18:0b:b5:9e:24:3c:ff:fb:28:8f:ba:d1:38:09:26:
20:be:72:2f:a8:45:41:82:99:e9:d6:43:00:68:71:
8b:5d:0e:08:45:ce:26:75:99:d6:2e:71:59:1a:37:
ae:f5:99:ca:1a:4c:2d:32:12:5f:5c:47:fb:de:38:
9d:ec:f2:b6:ea:d7:2a:4e:1f:15:83:39:b8:6c:7b:
e7:28:da:4f:a2:71:2b:a6:85:01:a9:ad:36:d9:df:
f5:d6:68:33:20:7c:89:e6:7e:cb:f5:2b:1e:d0:d8:
ea:f3:1d:fd:89:1f:2a:bd:50:7d:5f:3d:81:24:5e:
28:8b:ad:9e:c1:d2:32:5b:7e:3e:d4:57:c6:83:8d:
4b:ce:2a:13:fc:d9:11:ff:84:48:b8:fd:e8:6a:44:
82:4f:3b:a0:80:34:ac:b6:c6:6c:df:12:95:5e:69:
c1:77:b1:9f:6d:7d:32:a1:af:42:4f:a7:d0:62:a3:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:A7:41:8B:7D:0F:46:5B:30:0B:F4:82:07:E8:CC:0F:C5:9A:89
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:7c:df:fa:39:a8:96:67:00:8c:07:18:6b:88:2e:f1:90:
47:2f:e6:63:f7:0e:0b:86:2c:92:56:df:93:e7:0a:3f:e8:ba:
7f:43:2d:83:a0:fb:4c:85:ed:a7:ef:0b:dc:eb:50:f0:a4:8a:
0a:1b:6a:9f:eb:05:7d:a8:7d:fd:16:af:c4:33:5c:2b:2a:18:
28:36:df:c3:13:3e:45:1f:05:d4:57:fa:a8:c1:c6:ec:f2:ee:
fb:fc:ab:23:08:c2:f1:51:55:d0:5d:31:49:ce:2a:f4:b8:e2:
c4:a4:95:9f:0e:b9:87:5a:94:a3:b4:d7:06:c0:a8:09:6a:01:
b2:4f:21:2d:fd:ca:35:42:eb:95:d4:97:5d:b5:8b:81:9c:3d:
e9:5c:84:7a:8f:60:b1:99:f9:c6:f7:ea:89:6e:74:07:8c:25:
9b:fa:8c:f6:fe:4d:25:70:36:f5:67:8e:d8:5b:e5:55:a5:54:
36:b8:9b:d9:a1:58:11:d0:f2:ff:f2:47:4d:a7:ba:d4:43:3c:
f9:8f:d1:7f:53:c8:5f:53:f9:c7:53:43:17:f2:d1:31:1d:4c:
70:fa:ce:63:88:22:0c:1c:4d:7a:74:cd:2e:f5:ed:8b:42:20:
5a:f5:c9:0c:4d:9f:71:08:e4:c5:e3:7f:ab:03:ca:b9:28:ce:
b8:b1:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:53 2026 by rpki-client