Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: mcJf3MtWj1xTimIfQtcXDZXGl8kkHKrjM+WR6wRJRFo=
Subject key identifier: 97:C9:F0:9B:90:B1:6D:CF:6B:F4:31:8A:69:70:19:48:8D:50:7D:1C
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 019CAD90A5145EB890EA8B7B55242F008351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 17C2
Signing time: Mon 02 Mar 2026 08:01:03 +0000
Manifest this update: Mon 02 Mar 2026 08:01:03 +0000
Manifest next update: Tue 03 Mar 2026 08:01:03 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: wNmfK2XOpT9p3TtR8Xb5gL40L1XLUYcZ4fu8xtS4lec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a5:14:5e:b8:90:ea:8b:7b:55:24:2f:00:83:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Mar 2 08:01:03 2026 GMT
Not After : Mar 3 08:01:03 2026 GMT
Subject: CN=97c9f09b90b16dcf6bf4318a697019488d507d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6e:09:aa:a3:e5:78:c9:d1:e2:75:e1:8b:1b:
0e:92:47:6b:a8:6d:75:c4:c4:1f:56:80:ba:b2:1b:
e8:a4:5c:30:0e:4a:c2:b0:b5:e9:c8:bd:2b:f7:9d:
65:49:97:ac:9b:92:ba:c4:72:ad:ea:11:25:21:8e:
0d:2b:bb:ed:04:73:52:ef:3e:06:9a:61:a5:7c:9d:
6a:fd:4b:31:3c:7d:a9:2a:f1:b6:a8:20:56:5b:a5:
3b:e7:a1:75:a3:01:76:75:05:53:35:99:ee:8c:c7:
1a:17:a9:05:67:2c:70:cc:36:bc:61:f3:e7:06:34:
6b:90:5a:e8:11:2a:bd:e8:58:82:78:c9:32:1f:48:
63:a9:66:06:5c:ab:27:a0:05:c5:9e:e9:e6:92:8d:
6b:c7:db:42:92:28:5b:4b:e3:ae:99:8e:5c:15:a8:
09:85:56:9b:54:c1:6d:49:8b:f3:fe:48:fe:35:b9:
5f:68:8d:6e:a6:a2:27:ac:bb:26:28:18:2c:d1:34:
a4:48:dc:0e:a9:0c:d4:e4:50:98:4f:bb:c1:67:6c:
c1:7f:bf:ca:34:80:43:3e:0a:65:aa:d7:8f:47:e2:
d0:f3:3a:47:b3:65:1a:b6:61:48:72:b2:75:17:56:
12:bc:df:af:00:52:15:6a:45:85:d8:df:53:67:c0:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C9:F0:9B:90:B1:6D:CF:6B:F4:31:8A:69:70:19:48:8D:50:7D:1C
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b9:4e:d2:c3:e6:1f:bd:e0:19:f7:3e:ae:19:3e:17:2a:46:
58:17:60:63:26:63:41:e3:d8:7b:85:08:32:37:d7:b9:53:d1:
3e:08:e0:98:e5:75:e9:69:79:c0:65:65:ec:49:76:23:d1:6a:
34:15:b8:55:49:5b:a2:ee:b4:6b:62:b9:2f:65:a7:ba:2c:c2:
32:1b:25:ca:08:17:60:8a:71:59:15:cd:09:8e:e5:3f:41:c9:
a1:2a:f7:11:9d:de:4a:3e:13:72:cf:06:10:33:0f:fd:ca:05:
83:11:71:62:3d:58:11:1a:e3:94:86:3c:43:75:0a:4c:22:f0:
bf:90:be:38:d5:d8:f3:05:28:e6:37:68:15:c2:e1:8a:bf:6b:
fa:c0:d0:49:d8:88:69:f7:1b:59:4a:f8:d2:89:e5:de:16:eb:
b1:b3:3f:ba:0a:8e:a4:fb:9f:ef:57:d5:93:82:a1:e3:d3:6c:
27:ae:a4:56:25:a2:61:6d:d4:8c:c2:eb:60:ef:72:fe:aa:b4:
ab:3f:71:14:0a:72:a8:95:20:c2:b9:60:47:60:09:2b:fd:6d:
5b:c0:18:1d:b2:10:85:e0:5b:1b:57:fc:77:cb:ee:16:f7:43:
8b:13:78:0e:76:62:df:44:d2:55:f7:fb:95:e1:51:48:46:60:
b9:27:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:34 2026 by rpki-client