Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: E8N15CtxaoNrMxewWmMoz75qRicf/ZKS4D9iU2LZynk=
Subject key identifier: EE:81:C0:7F:60:08:2A:57:E7:C5:C0:29:17:75:1D:8A:F2:2F:3E:5C
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 019CAA5898E40537A6A28E9553ED2B8720BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 100B
Signing time: Sun 01 Mar 2026 17:00:58 +0000
Manifest this update: Sun 01 Mar 2026 17:00:58 +0000
Manifest next update: Mon 02 Mar 2026 17:00:58 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: zu1HDkwHPpEj2a3Z4rGhiBdpVPj2kiNg5rVhAEHG7q4=)
2: SlpF7r7mXCWXhPzZBmODYnXQ2AQ.roa (hash: jMJC3ZxPYgXKuHU+fXZq1zQnba0EbcW6rqUVC+m4QQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:98:e4:05:37:a6:a2:8e:95:53:ed:2b:87:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Mar 1 17:00:58 2026 GMT
Not After : Mar 2 17:00:58 2026 GMT
Subject: CN=ee81c07f60082a57e7c5c02917751d8af22f3e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:aa:81:a9:d5:6c:cf:39:54:55:70:22:bf:
5b:56:6d:4f:98:c7:9f:26:30:44:9e:12:48:12:f5:
c5:d8:66:2d:3d:eb:aa:ac:e7:11:fa:20:0b:97:72:
ee:1b:89:ae:13:8b:73:ab:47:ed:bc:8d:ce:11:07:
60:ec:94:8e:29:ed:e3:01:05:e0:cb:e6:5c:73:7b:
83:e4:f8:98:26:f7:45:a1:85:da:1a:5e:44:ea:4b:
c0:26:e6:8a:da:32:5a:6c:16:70:d5:00:9f:b4:af:
eb:31:85:ee:d0:58:23:44:03:2d:e8:49:e6:40:36:
9f:c6:99:c5:dc:98:3a:21:d2:3a:21:17:20:af:dd:
01:31:b4:11:e9:6f:cd:6c:c2:81:7a:56:5f:cb:4e:
7a:a5:15:f3:e4:d4:1d:f3:29:c4:a3:b3:a6:16:2f:
1f:ff:20:9e:90:50:c6:15:c2:aa:d0:69:d3:e7:7a:
11:24:96:34:bd:f7:d4:27:5e:0b:20:2b:a0:13:31:
f9:ce:be:e7:64:ea:1d:18:23:71:15:43:b9:18:50:
f1:26:e1:6f:47:fd:ed:5e:a4:2f:d2:47:05:a2:11:
2c:34:47:d1:4f:a4:52:4f:45:03:c6:7c:a7:bf:a6:
1f:45:d9:6e:7e:93:da:3e:9d:b2:58:a0:fb:aa:96:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:81:C0:7F:60:08:2A:57:E7:C5:C0:29:17:75:1D:8A:F2:2F:3E:5C
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:87:68:f9:91:29:eb:a1:68:1f:0a:f6:b6:41:1c:5b:f8:
75:73:0d:72:13:20:d0:49:05:8e:4a:32:55:57:d0:80:dc:9d:
08:51:77:49:b7:a8:25:58:15:31:4b:42:d2:07:54:54:e3:a9:
02:2b:c0:54:fd:f0:86:79:32:96:5a:c1:dd:b1:07:08:30:a4:
55:8b:4d:a8:b2:47:f1:ba:45:39:82:f9:1e:a9:1e:a5:dd:e9:
b1:5d:1b:fd:43:53:75:d9:f2:96:7d:a2:e2:16:20:10:30:c5:
f1:91:97:32:62:65:fd:45:69:39:61:f9:39:b4:fd:04:2a:8c:
ec:27:a8:93:fc:ea:5f:bb:1c:97:75:6b:f0:7b:a6:e9:ce:75:
eb:7b:8b:11:73:83:c9:f5:a2:e0:a6:0e:ae:94:98:a0:d4:43:
34:e8:9f:78:9d:72:07:a9:7d:76:22:b2:3b:75:2b:69:76:4f:
58:0f:d2:8e:1b:7d:61:df:06:c4:4f:3e:c2:07:06:f2:cc:81:
35:1a:67:43:22:33:a5:c6:b2:f4:c1:51:73:f2:1a:9f:16:e8:
f1:fd:29:28:c9:2b:96:b5:a3:92:6c:3f:94:e1:88:f6:fd:97:
1e:2d:9e:cb:ee:11:38:61:09:2b:de:8e:ea:7c:6f:24:c5:dc:
47:8b:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:18 2026 by rpki-client