Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier: 88C+mjiEY214pqV4CXbOOl3NDwUGqTRLau/2NUoz1MY=
Subject key identifier: 8C:3E:B7:B1:38:4A:34:6E:86:DE:29:08:1A:00:0F:08:DC:2A:89:F1
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial: 019CAB6ADD668C39F676EDB6C57B2CAD4BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number: 0C0E
Signing time: Sun 01 Mar 2026 22:00:33 +0000
Manifest this update: Sun 01 Mar 2026 22:00:33 +0000
Manifest next update: Mon 02 Mar 2026 22:00:33 +0000
Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: ViAZbNkfXApubb9eh0QQqmrI3XgqYUFHcqWN0hQSSO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:dd:66:8c:39:f6:76:ed:b6:c5:7b:2c:ad:4b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983ea291971990dc486f93812783fadd87ade863
Validity
Not Before: Mar 1 22:00:33 2026 GMT
Not After : Mar 2 22:00:33 2026 GMT
Subject: CN=8c3eb7b1384a346e86de29081a000f08dc2a89f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:ee:4c:67:f5:60:a4:cf:fc:9b:1c:af:65:
4d:71:2c:36:e4:fe:a9:63:6c:67:5e:b8:bd:3d:a1:
7b:2f:bf:6d:7a:fd:bd:c6:cb:6e:3e:ec:71:2e:77:
d1:e9:62:74:61:4b:5f:85:08:4a:4f:ac:c6:02:bb:
b2:6d:29:d2:8d:e2:8d:d0:1b:3d:24:e7:82:50:20:
fa:28:8e:1a:ed:dd:83:cf:b4:52:77:ac:fe:d5:9b:
ca:dc:5a:37:1f:db:e7:87:91:71:29:8f:ca:91:54:
9d:3f:ee:60:5e:ca:44:11:a5:f4:c9:84:f8:8b:e4:
80:2b:5d:80:5c:33:88:47:d8:db:d3:b3:f0:66:81:
12:6a:33:9f:5d:d8:bc:49:27:01:01:40:bf:25:1f:
a9:e3:3c:91:60:b9:15:e1:68:6f:8f:06:ef:d0:ca:
5c:63:52:79:d3:c8:70:1d:a0:f0:37:7c:ef:60:68:
72:99:2a:55:9e:a3:f7:f6:ff:54:f8:01:d7:b3:53:
e2:8d:c0:93:61:36:05:4c:62:e4:e5:07:60:83:39:
01:ca:88:48:c4:f3:00:9c:49:16:59:a8:8e:4c:bd:
88:0d:44:2c:98:4f:25:42:87:5a:98:f3:d1:e9:30:
ab:03:6e:92:88:f8:bf:bb:d7:ec:e3:76:ce:5a:91:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3E:B7:B1:38:4A:34:6E:86:DE:29:08:1A:00:0F:08:DC:2A:89:F1
X509v3 Authority Key Identifier:
keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:42:b5:c5:02:c2:74:60:41:d2:d0:9a:3f:66:dd:51:27:5d:
c3:2c:cc:ef:f3:fb:7f:4e:7a:ad:20:e3:93:4f:d2:57:27:b1:
88:d3:0c:99:52:84:ac:a2:0e:b4:3b:e8:ee:ab:fa:1d:97:9d:
e1:6f:64:06:68:81:47:c2:65:34:d8:f3:48:44:92:72:be:96:
84:f9:e9:95:36:54:d0:05:23:f7:44:38:f1:b5:2e:88:89:a3:
c3:1e:8f:41:3d:cc:ef:d1:af:19:9e:2e:b7:28:91:7f:a3:b3:
a3:24:ff:bc:5f:6f:d1:1d:27:8c:16:51:a1:52:33:88:38:82:
56:77:3b:34:26:7d:3b:a8:f7:e1:5c:18:03:85:bd:f8:70:8e:
4a:9e:92:86:ba:ce:0c:1f:17:85:ae:79:58:1a:84:72:bf:66:
29:a4:64:00:5f:a1:de:88:ba:5b:d6:ae:51:47:23:17:a7:45:
48:9c:97:c3:c1:a1:19:11:40:8f:a5:5e:df:00:cc:8a:bd:fd:
26:b2:95:12:d1:86:6c:ed:4e:9f:d4:25:aa:2f:15:0d:c9:bb:
2c:0b:fb:25:ae:5a:02:c2:a9:7c:e9:96:07:03:8b:2f:f8:8e:
f1:0f:4a:e2:76:0c:89:f4:cc:e9:20:97:e4:76:29:5e:4c:84:
a2:6c:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:43 2026 by rpki-client