Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File: EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier: pAucrzlBWiDo9rrzuyMB/QrpcJCacKrTPP0tyLOFNEQ=
Subject key identifier: 1C:B6:A5:FB:30:B7:DA:88:3E:F4:3C:C3:1B:03:E8:42:1B:BE:70:8B
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer: /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial: 019CA9EAE5D1027CAF17A27251CFD48B9BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number: 123D
Signing time: Sun 01 Mar 2026 15:01:09 +0000
Manifest this update: Sun 01 Mar 2026 15:01:09 +0000
Manifest next update: Mon 02 Mar 2026 15:01:09 +0000
Files and hashes: 1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: aP6zofJu7IiVgpegMkB8RG+kFOglq6ecYVUSZxRwbN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:e5:d1:02:7c:af:17:a2:72:51:cf:d4:8b:9b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Validity
Not Before: Mar 1 15:01:09 2026 GMT
Not After : Mar 2 15:01:09 2026 GMT
Subject: CN=1cb6a5fb30b7da883ef43cc31b03e8421bbe708b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:82:b2:48:66:dc:8c:56:b8:b9:b0:38:15:
bd:89:74:ff:ec:4e:5c:c5:53:c8:3f:1c:20:92:8c:
7b:9b:b8:80:a0:4d:73:86:cd:52:ab:ba:ad:3e:71:
43:8f:19:04:98:19:14:c8:21:bc:4f:7b:9b:cd:21:
01:b3:3f:1c:98:9b:88:84:dd:75:9e:06:bc:50:a3:
89:67:34:e2:1c:6b:5e:8a:22:70:9a:28:96:05:af:
21:35:1d:40:f8:54:86:92:57:2e:68:ab:49:a1:03:
8f:3e:28:d2:d0:f8:0e:a9:e2:ae:60:cf:44:b0:b7:
e2:a3:54:28:af:72:59:a7:71:bb:56:e7:0f:fe:e1:
4c:3f:53:82:7d:e8:93:7d:d5:d9:57:a1:19:de:40:
a1:5f:1e:d1:31:57:be:29:dd:97:f3:90:fc:73:19:
40:25:c8:52:23:2e:64:7e:1b:91:94:52:68:a3:70:
e8:4e:d6:f2:47:8a:35:92:73:08:10:57:e5:9f:64:
96:90:e6:f5:af:ae:ac:60:24:a7:91:4d:90:cc:17:
a0:d7:1a:1f:6a:8a:25:5d:c8:e3:8c:86:21:88:cf:
89:5c:d9:80:54:10:11:3a:80:f2:a9:7b:b7:b3:1d:
88:6b:a6:c5:37:8c:4f:32:2f:87:89:d2:4f:31:35:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B6:A5:FB:30:B7:DA:88:3E:F4:3C:C3:1B:03:E8:42:1B:BE:70:8B
X509v3 Authority Key Identifier:
keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a9:01:db:e4:52:c1:98:a4:c2:75:fa:c4:bb:63:48:43:24:
1c:0b:da:6c:31:b5:c6:3c:25:84:4d:50:15:36:2b:09:16:f2:
bc:cd:f5:f3:6d:d9:48:04:28:dd:05:6b:55:ab:3a:77:32:b4:
12:cb:f4:58:f2:81:f8:e8:fa:59:10:fd:42:4b:a9:e1:80:b9:
6a:1a:c5:a0:9c:7b:18:90:2d:d5:be:50:22:71:06:79:b2:7e:
51:5b:c9:13:a0:69:d0:88:78:cb:fe:7d:45:7d:68:53:db:e9:
27:61:ba:38:cc:6c:75:29:b6:20:43:c8:46:3f:89:15:c3:ea:
1e:1d:c2:b9:7a:84:7e:e1:1d:94:05:ac:ee:7f:8f:df:f7:32:
14:d9:7a:1a:5d:aa:7c:08:7b:05:bf:3a:6e:24:ca:51:c3:19:
2c:ab:05:a1:2e:40:69:40:69:23:54:63:1c:1b:39:9e:3b:bc:
32:6c:8c:97:bd:f1:21:99:1a:db:d8:de:51:c9:ea:48:70:f7:
94:33:18:59:e1:6e:11:2f:07:ee:b0:e7:0e:0a:e9:a1:71:55:
bb:b4:ba:64:6c:c0:b7:ca:65:34:7b:5a:e7:3d:cb:e5:d9:14:
62:c7:43:2c:a7:1c:bb:a5:26:d9:b2:81:31:66:8a:35:c3:4f:
e8:a2:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:59 2026 by rpki-client