
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File: a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier: zgq9w2wGs5ErCQRZ9bxnOEJ0EZ91RXGVJxOAE+FkTy8=
Subject key identifier: 64:74:C1:18:30:AE:07:0E:A5:69:CC:84:25:BD:77:A0:C7:18:67:9A
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer: /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial: 019CA97D58DF5749247AF571ADBE895BB23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 13:01:30 +0000
Manifest this update: Sun 01 Mar 2026 13:01:30 +0000
Manifest next update: Mon 02 Mar 2026 13:01:30 +0000
Files and hashes: 1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: 5lsTnCwifuvP751gwOthxJvol/IKwNnYLRTjhfTemZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:58:df:57:49:24:7a:f5:71:ad:be:89:5b:b2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Validity
Not Before: Mar 1 13:01:30 2026 GMT
Not After : Mar 2 13:01:30 2026 GMT
Subject: CN=6474c11830ae070ea569cc8425bd77a0c718679a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:cf:a8:b7:c5:bf:ec:3c:db:b9:d2:28:33:
f5:ae:fe:54:29:6d:5d:78:6c:31:fa:e2:6a:00:0a:
97:1f:ab:12:aa:2c:fa:bd:a1:d1:b3:8c:c0:3a:8c:
ce:82:2e:87:1e:60:52:42:24:d4:f2:27:81:76:12:
18:35:a8:dd:8e:b5:21:62:80:c2:ba:1f:9c:30:49:
fa:e1:94:4e:81:3c:f2:e1:85:53:84:42:f2:3f:4c:
cb:08:79:ea:d1:14:88:69:28:49:26:59:eb:b7:40:
15:d5:a4:98:7d:28:35:4f:11:a4:8b:9b:44:d0:34:
05:3f:5c:35:1f:81:88:40:21:11:23:a5:af:93:33:
b0:05:d0:75:5e:42:41:38:fe:3f:56:5b:f1:7c:d8:
3f:8b:68:df:ad:57:4a:14:ee:39:e2:d0:db:85:dd:
07:bd:33:0d:a6:08:21:a8:59:1c:12:87:c4:be:e2:
63:f0:10:ed:46:ae:25:77:10:0c:4d:7e:70:63:27:
7e:ad:cc:b4:64:16:2d:4a:97:be:3e:1d:03:0e:fd:
e9:ac:9d:d2:83:1b:99:20:0f:58:6a:cd:70:3a:4a:
90:8b:8f:4e:9c:ee:73:32:28:e9:9c:ed:75:cb:43:
a1:c6:9a:b2:a6:27:9f:d1:45:aa:db:be:28:8d:9c:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:74:C1:18:30:AE:07:0E:A5:69:CC:84:25:BD:77:A0:C7:18:67:9A
X509v3 Authority Key Identifier:
keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fc:5c:a5:d6:c2:d7:77:97:d5:8f:d9:08:0c:31:04:63:73:
17:91:20:56:7b:06:e4:af:32:a6:89:2b:e7:4e:bf:32:82:65:
82:59:f9:2b:b4:2f:11:3a:2c:16:f0:4b:81:04:00:73:44:0e:
24:62:f6:c5:ee:be:66:77:4c:fa:f7:fa:c3:45:8b:f5:d8:be:
25:98:4c:3a:63:e0:9b:1d:7c:c8:e7:57:a7:04:8f:d2:4f:2c:
09:de:d0:35:c3:29:2c:a9:a1:f6:bb:6a:4d:ce:05:a9:19:3c:
fe:db:19:9a:5f:52:49:40:61:98:ab:09:77:8b:90:66:1b:38:
74:21:0d:df:db:67:ca:ea:94:81:5d:5e:8b:7b:4e:22:04:69:
29:ef:3a:fd:8d:f3:08:00:bd:26:67:b7:28:a9:0c:f2:b3:ed:
8d:05:82:18:8a:e0:d9:98:aa:71:bb:6b:4e:79:78:42:74:9f:
8f:0b:d3:05:ff:8f:9b:9d:d8:99:3e:39:ca:09:6a:d1:d1:4c:
bf:f8:20:d9:6c:a6:39:3d:40:d7:dd:b9:e5:43:bf:19:72:5e:
ac:6a:7a:1f:62:41:60:ea:a5:34:e1:30:0c:3f:08:84:ef:02:
14:c2:62:0e:28:15:e9:53:1d:84:68:c4:15:9b:ed:56:fa:2b:
d0:0f:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:16 2026 by rpki-client