Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier: JXb2VTTb6az7DZ50YmwB1hFqxNQ4ajooGE7MUjNx3R8=
Subject key identifier: 58:83:C5:9A:34:9D:AD:E2:FC:3B:57:EF:7F:5A:DF:29:9B:48:68:9B
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial: 019CAB6BAEC3F301558A05AC5D38803BE277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number: 120D
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: 5LMs6uAlSdlqRVNjGUwxN0CBO0b942L8FspuUAKT5W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ae:c3:f3:01:55:8a:05:ac:5d:38:80:3b:e2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=5883c59a349dade2fc3b57ef7f5adf299b48689b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:5e:f8:b8:2b:c1:af:a3:7c:e7:a8:c6:08:
61:41:8c:7f:b7:74:7c:73:65:87:f7:8f:ac:a0:75:
ce:86:25:8b:fa:49:47:4f:5b:77:1b:09:f4:e4:5d:
e2:b6:0c:6b:42:9f:af:22:15:6b:86:37:cd:f1:53:
25:7b:67:0f:d6:77:2e:b0:70:a9:0b:b2:29:c5:8c:
57:08:bf:f6:24:80:dc:37:9c:61:e1:f0:bb:cc:08:
c5:67:be:90:e0:96:78:a1:4e:77:39:7d:6b:f6:4f:
94:33:4e:3d:25:33:af:2f:a8:3f:72:50:05:66:d9:
c6:50:24:69:f4:15:d6:fe:11:52:9d:59:41:c3:77:
6f:94:8e:c8:80:57:a5:84:a1:08:de:c7:f9:63:df:
ad:0d:bd:4d:46:9b:c2:82:75:3d:fd:df:24:78:a1:
88:91:c4:ac:c4:53:86:eb:e5:fd:6e:e9:f9:d7:8e:
f6:8a:01:d4:de:d7:f8:48:f5:6e:81:39:f0:b5:29:
a7:31:80:29:6f:a2:ce:aa:6e:12:eb:d7:17:d7:b5:
45:19:6f:24:49:06:ae:7a:17:d4:0b:0b:52:28:b3:
8f:0e:62:b4:fa:91:1a:e4:f2:44:66:98:b8:ec:1c:
97:41:b8:5a:d4:50:d6:86:fc:3f:93:2f:cd:3e:43:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:83:C5:9A:34:9D:AD:E2:FC:3B:57:EF:7F:5A:DF:29:9B:48:68:9B
X509v3 Authority Key Identifier:
keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ab:28:20:03:1e:88:e6:9a:24:ed:8d:bd:99:71:66:19:ea:
9a:ab:0c:0a:de:1c:3b:73:ea:4e:82:1c:b9:0e:86:f0:fa:fa:
c0:5d:b2:07:3c:aa:23:37:24:9d:e4:4c:62:9c:ad:4a:43:29:
c7:28:e3:2e:b7:43:3e:d9:fc:b0:c7:a1:16:34:6b:f6:15:21:
23:84:e5:96:ae:fc:d0:7d:e5:5e:ec:e1:a9:99:ab:a5:b2:ed:
87:8c:36:ae:f4:c0:02:82:ba:1d:87:f0:0e:f4:52:87:fd:0c:
9e:4b:53:41:71:61:41:a3:55:aa:e3:84:d2:21:1b:48:16:4f:
59:af:e4:43:98:ea:4d:c7:04:78:13:26:e9:e6:56:42:ed:43:
8a:95:98:48:93:5c:ca:c6:f4:59:85:4d:ad:17:97:a2:fe:46:
a0:12:18:d6:94:ad:6f:45:3f:17:b2:08:a5:67:c6:57:24:cb:
5d:cc:f0:7a:9d:bc:0b:4a:68:31:9d:c9:61:33:de:6d:d9:5c:
50:08:82:53:9d:5a:4d:10:e5:10:f4:5a:7e:1b:d2:10:c1:1f:
d4:02:5e:ad:5c:01:4c:07:37:a0:b3:32:25:62:57:85:91:f0:
d6:e2:3d:7c:56:70:3c:6c:ec:b8:46:22:dd:6d:e0:32:87:50:
ce:0a:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:20 2026 by rpki-client