Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: GPU7nUFQtGFHejbRW0jI7JxDcsgfssCtsT2SiNt4364=
Subject key identifier: 50:5C:C6:33:FC:50:3D:2F:5B:73:6A:1A:48:DD:2E:B3:35:00:54:2E
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019CAB6B9311576F6A439D11DE016CC30FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0BA2
Signing time: Sun 01 Mar 2026 22:01:19 +0000
Manifest this update: Sun 01 Mar 2026 22:01:19 +0000
Manifest next update: Mon 02 Mar 2026 22:01:19 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: 7c3iT+drbG7DCZLwEB8cYP7Aje2q/3jaDaXFXUMJiAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:93:11:57:6f:6a:43:9d:11:de:01:6c:c3:0f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Mar 1 22:01:19 2026 GMT
Not After : Mar 2 22:01:19 2026 GMT
Subject: CN=505cc633fc503d2f5b736a1a48dd2eb33500542e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:5d:f9:29:f6:a1:54:04:56:42:b1:d7:75:
aa:18:8b:56:86:e7:83:f0:49:b3:9b:02:39:b4:6c:
3c:85:dc:42:7d:11:e6:35:95:fa:bc:87:4c:a5:27:
30:bc:e0:a0:91:28:b6:2a:58:00:dc:b8:5c:b3:91:
56:c2:8f:eb:42:d9:58:f0:7d:cd:ac:40:a7:b5:5e:
2b:ec:3a:52:7a:a4:40:e7:de:5b:d1:f8:0b:ec:73:
75:4e:f5:41:e5:3c:70:fe:e9:62:40:77:d4:af:b0:
c2:ac:e4:af:e9:5d:94:c1:71:b4:14:b3:e9:bb:ad:
64:43:43:97:bd:ad:d2:30:b7:ae:78:8f:37:3a:cb:
64:7e:47:0e:2f:54:94:dc:3d:bb:df:af:1d:87:f9:
66:92:64:5b:0e:1c:7c:39:26:a2:f1:5d:91:31:7f:
b3:aa:f7:8b:09:a7:c3:c3:40:8c:27:2a:62:18:5a:
f3:81:cb:f5:2b:fb:af:54:f5:ad:4b:ed:6d:2b:24:
6e:bb:5b:8f:bd:03:ac:7c:1e:ed:7e:6b:ca:62:a5:
88:44:9a:b4:83:d9:af:19:48:26:c5:56:ea:45:be:
17:b9:9b:ef:f3:8f:7e:4a:6f:54:62:c3:88:ec:c0:
8a:62:a0:c4:54:00:be:60:96:ff:e2:86:f3:24:cb:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:C6:33:FC:50:3D:2F:5B:73:6A:1A:48:DD:2E:B3:35:00:54:2E
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:32:cb:fd:8c:3b:90:3e:3d:e8:db:f4:6d:10:89:68:04:0c:
15:34:8f:96:dc:0a:4f:c7:02:16:b5:c0:75:41:8a:f3:e2:9a:
4d:ce:23:e0:2d:79:13:b8:1e:a1:56:ad:40:1f:81:fa:86:86:
ac:48:8f:9b:32:50:e0:64:3f:aa:01:40:ba:3d:37:64:87:98:
d5:db:28:de:b6:ca:51:86:d0:20:64:b9:c7:8e:ab:dd:a8:f3:
d2:02:8f:82:ea:76:74:81:d4:4b:a9:51:8b:ca:e5:9b:31:89:
6f:32:66:54:59:a6:26:49:15:fc:a3:e8:ab:8a:8e:48:79:ad:
a7:dc:80:80:4d:98:bb:ff:90:e6:6b:20:9a:7d:d1:a6:da:35:
bc:9d:b3:6d:0a:08:74:62:d7:12:1b:97:2a:ec:2b:2b:37:9b:
c7:02:f6:6c:27:d3:88:64:57:b4:e5:f9:57:f1:bc:81:99:a8:
2b:fc:7f:34:65:d4:dd:2d:08:4c:65:42:1e:c9:32:43:c3:e9:
2a:91:65:ac:fe:7b:54:79:25:1d:12:11:1c:94:a7:7d:f2:3f:
ea:e8:19:d9:09:fd:91:5b:f1:ce:ff:8f:04:d4:51:4e:dd:64:
8c:62:02:cb:ff:27:8f:91:1d:5a:c0:80:71:cd:6a:f5:2b:9f:
94:75:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:29 2026 by rpki-client