Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File: eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier: 2iNhs2QckB3vQJVROj6E/qpBV+bs4MU8N9wGzRod3W0=
Subject key identifier: D1:25:8D:A4:B0:FE:C4:30:C5:F3:6B:6C:30:8C:DF:C7:2C:93:35:FC
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer: /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial: 019CAD597929794C85EA430C634CA71022AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number: 0F18
Signing time: Mon 02 Mar 2026 07:00:47 +0000
Manifest this update: Mon 02 Mar 2026 07:00:47 +0000
Manifest next update: Tue 03 Mar 2026 07:00:47 +0000
Files and hashes: 1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: yA8CKvDbJha8F+CrtykpwCUDdpv8PpywXtgrIIxzZMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:79:29:79:4c:85:ea:43:0c:63:4c:a7:10:22:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Validity
Not Before: Mar 2 07:00:47 2026 GMT
Not After : Mar 3 07:00:47 2026 GMT
Subject: CN=d1258da4b0fec430c5f36b6c308cdfc72c9335fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:41:57:d8:5c:b9:4b:3a:46:bb:51:22:15:
aa:55:60:d4:77:e4:90:5f:0a:70:55:2f:5c:c0:14:
db:8c:36:e9:f0:56:8b:96:5a:df:8a:da:fa:b2:e2:
a8:27:71:cd:06:fd:f2:07:88:62:32:8c:32:8b:1f:
8f:f1:15:01:4d:28:62:cd:a4:17:62:c2:95:05:f2:
9d:f4:ea:02:af:31:b4:ef:18:e8:f3:13:57:2d:55:
e6:2b:23:3e:0f:8b:0e:7a:9a:4d:b7:fb:c0:22:27:
f7:22:a9:26:61:4f:6e:2b:cd:ff:84:0c:d9:49:67:
b4:5f:17:a1:fa:24:c6:c5:e6:dc:d0:b3:24:4d:a9:
48:4e:b6:e7:86:ec:94:21:73:1a:ad:42:2e:cd:4b:
1a:a2:e2:93:9d:99:14:0a:6b:4e:ef:c6:4d:bc:3a:
4a:8e:9c:91:ce:ea:bf:88:fd:4f:32:f8:ed:27:2c:
72:57:13:46:51:c7:ae:9a:a3:6a:c5:7b:3b:bb:d6:
72:51:ea:df:d1:2a:5a:98:4a:48:aa:b2:be:fd:aa:
c9:c0:c2:0f:6f:8c:a8:01:25:4f:93:7e:fe:9b:70:
08:c9:51:ee:8f:c4:da:8f:c5:69:8e:5d:c9:77:71:
14:10:2a:ce:8c:0a:db:c6:ae:12:0a:f4:7f:bb:ef:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:25:8D:A4:B0:FE:C4:30:C5:F3:6B:6C:30:8C:DF:C7:2C:93:35:FC
X509v3 Authority Key Identifier:
keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2c:11:de:17:83:b9:22:15:84:68:25:ff:c3:63:3c:a2:7c:
6f:cd:3c:d5:f2:69:2a:69:8c:0a:c9:77:79:fd:2a:08:f2:73:
37:bd:c0:f6:78:1d:f0:df:4a:4a:a9:ff:48:ff:06:69:85:91:
68:d5:f6:52:a0:40:74:e8:70:03:82:5e:61:ba:c5:ca:97:31:
0d:da:1a:45:0f:5e:7e:85:21:67:e6:b9:7f:30:5c:64:23:ac:
73:f7:ea:41:52:ab:91:f6:9d:ae:f3:00:6c:63:0d:99:e1:4e:
31:da:ba:09:20:72:57:6a:69:4f:e1:16:cf:d1:29:f7:d3:6b:
f6:ea:b8:7d:e6:cd:2f:33:c6:61:54:43:28:c5:83:71:db:1b:
d1:4b:8d:9c:51:e1:17:22:49:7f:c7:4e:6e:b2:b6:a0:4c:60:
ef:40:78:a7:44:af:95:20:98:1a:82:c0:a7:65:75:55:8c:c4:
10:43:d3:0e:24:bb:e4:8b:7f:d4:b3:b3:63:66:67:75:d0:4d:
e2:95:04:af:44:69:92:36:25:68:c8:91:e8:78:30:28:d8:a0:
3f:50:6e:58:69:13:59:2e:71:1b:7a:73:f7:e7:c4:68:e4:f2:
92:ea:dd:82:d3:ea:eb:62:03:41:69:8e:5f:f6:93:05:fd:44:
2b:d9:01:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:23 2026 by rpki-client