Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: oHnrKoXk68ROXYrpDyuI6ztmY4TGs5sTG4PvxDxrNfk=
Subject key identifier: F3:CD:5B:E6:EB:C6:45:91:83:E1:4E:99:F4:6F:47:1B:CC:C2:D2:B4
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 019CABD90F7572DA2690BC5B1923156AB44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 066B
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: 66sHLZSwxoqxxjUR6WlO2cdXZNryWvJpBnJscj5BkbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0f:75:72:da:26:90:bc:5b:19:23:15:6a:b4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=f3cd5be6ebc6459183e14e99f46f471bccc2d2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:15:96:a8:67:b1:7c:67:c4:e1:c2:61:fa:
d9:32:f9:3d:a2:81:c2:07:de:1d:f1:08:73:37:66:
f1:c2:60:69:3b:ab:17:73:11:6a:9b:86:16:a9:55:
ce:76:21:bf:4e:a7:07:35:f6:45:28:58:c4:d4:6e:
91:53:ab:5d:90:f7:62:20:53:22:5d:87:bf:39:c3:
6e:9e:d6:e7:55:62:12:5a:ca:b5:9d:5e:d5:b8:02:
81:87:bf:c9:fe:0b:30:c4:b6:14:ed:26:fb:14:af:
a9:55:48:16:c4:8b:fb:83:d7:8f:fd:6e:09:a7:c7:
f3:48:51:d1:ca:b2:66:77:a3:08:65:04:07:80:a1:
8e:67:12:40:e2:c8:c3:7f:8b:8d:09:23:0f:d9:f2:
77:c5:44:3d:5c:14:53:b5:22:40:ea:fe:76:c0:a4:
44:e3:84:7f:fc:c5:4f:13:96:0e:af:b4:ba:f7:29:
dd:0c:dd:66:70:1c:2f:d6:5b:a4:7a:18:a8:64:64:
3c:a1:58:83:a7:c5:3d:89:f5:99:27:ce:c9:1a:e0:
e6:02:78:44:bb:04:e5:b0:ac:e4:0a:5b:59:d1:91:
c4:0b:c2:cd:41:44:ac:83:95:98:cf:01:04:0f:c5:
ee:32:5e:cb:e7:e9:50:f2:c2:bc:ff:f5:65:79:0c:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CD:5B:E6:EB:C6:45:91:83:E1:4E:99:F4:6F:47:1B:CC:C2:D2:B4
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:96:0c:95:2e:2d:92:b9:a9:3b:85:cb:b8:9f:7e:87:8f:62:
10:c1:56:25:c8:7d:11:03:09:2f:cf:13:9b:b0:9e:b5:03:3f:
da:71:dc:37:28:10:79:fa:83:3b:d4:ca:96:76:6b:21:e1:ed:
5f:22:01:5f:2a:09:5f:a8:f9:26:bc:45:5a:cb:69:0a:d6:bc:
9b:a5:7b:c0:3e:e4:7f:b7:79:e3:31:a5:2a:8d:ad:f6:5f:62:
2a:18:0e:f6:0c:94:b6:a0:66:97:e2:68:4c:88:8d:64:2d:0d:
a8:0b:85:57:c0:94:ee:a7:a3:4f:a8:46:b1:40:9e:45:ef:30:
9c:b3:a1:aa:4f:52:d8:e1:c5:07:bc:08:e0:93:ad:3f:27:87:
d3:8c:a6:06:71:25:d2:b7:86:74:bf:5b:37:46:3d:68:fa:34:
c0:fd:f2:c4:bb:ec:fe:38:1f:73:c5:55:0d:22:77:d3:5e:2c:
95:6d:7a:2a:b4:c3:07:67:99:e4:58:8b:c8:6b:f5:bd:04:73:
a4:8d:5b:02:b9:5f:c5:19:82:64:12:ea:df:b6:32:ff:95:f5:
a9:c0:bb:0b:bf:b6:fc:b9:33:f6:2c:13:49:df:47:77:f5:1d:
7e:61:47:b1:e7:06:57:28:37:b8:b8:ce:f1:b7:4c:bf:6e:55:
1b:a5:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:30 2026 by rpki-client