Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
File: b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft (raw, json)
Hash identifier: RNdWJQSabW2mhrAZkmI+Wd3GQjZtmGzFhUQqbKvGhVw=
Subject key identifier: EC:F1:8E:F5:10:D6:B6:CE:DB:F3:B7:D0:D7:06:10:1E:26:A5:F5:02
Authority key identifier: 6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1
Certificate issuer: /CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1
Certificate serial: 019CAE357F4E51DB592E94C3FDBB54A80649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
Manifest number: 123F
Signing time: Mon 02 Mar 2026 11:01:07 +0000
Manifest this update: Mon 02 Mar 2026 11:01:07 +0000
Manifest next update: Tue 03 Mar 2026 11:01:07 +0000
Files and hashes: 1: b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl (hash: rx4Vk+udY6Vph/TmLpoylfC8HlgOkljb41GhH/4rtUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:7f:4e:51:db:59:2e:94:c3:fd:bb:54:a8:06:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1
Validity
Not Before: Mar 2 11:01:07 2026 GMT
Not After : Mar 3 11:01:07 2026 GMT
Subject: CN=ecf18ef510d6b6cedbf3b7d0d706101e26a5f502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:a0:ea:61:0c:24:08:ef:25:11:f1:6f:d9:
1f:75:fe:1d:48:e4:f0:29:a6:65:1e:4d:7c:a2:82:
05:b6:7e:b9:c7:fa:33:fd:30:15:e4:ea:e3:01:b9:
be:ce:cd:b3:21:4d:9a:3e:a0:95:45:f3:20:06:95:
77:56:12:f9:77:d5:c4:3e:2b:37:bd:b6:2e:4a:04:
bb:a4:38:3c:bf:67:a6:e4:ee:ce:19:7b:4d:09:cc:
60:9d:f6:b1:9d:1f:d8:af:83:5d:64:62:8c:ba:f4:
c9:9d:15:40:57:25:08:68:2f:63:2c:2d:4b:1a:64:
8c:a4:4d:0c:15:60:d2:5d:e1:8a:e5:3d:38:ca:b8:
14:1c:f8:ab:08:df:d2:4d:0a:99:0b:ef:5c:fb:4e:
f0:3f:4e:27:ec:b7:03:71:c6:d4:80:68:ae:e1:45:
25:cb:75:0b:0b:64:61:f9:6a:71:51:53:72:bb:34:
f4:9d:c3:79:0e:63:40:cc:a4:d1:b7:9d:0e:f1:4f:
d9:5f:2b:0b:35:5b:0d:30:e3:97:30:4f:df:7a:60:
9b:4f:db:b5:be:d2:e1:32:2a:20:3d:16:ec:79:54:
8c:3d:33:b7:df:9c:7a:bd:4d:e6:89:64:71:51:28:
ab:11:89:da:aa:de:e7:7f:25:32:4b:a6:7a:c3:54:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F1:8E:F5:10:D6:B6:CE:DB:F3:B7:D0:D7:06:10:1E:26:A5:F5:02
X509v3 Authority Key Identifier:
keyid:6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0e:bc:8e:66:03:63:76:0f:0b:31:9f:93:b9:b9:64:f0:df:
64:3d:f5:ef:81:27:fd:c4:2c:2b:ef:30:f4:68:55:d4:98:a4:
8f:0d:9b:41:c3:92:8d:a2:7a:f4:2c:4a:57:81:3c:87:ca:09:
14:80:7b:07:14:e8:a0:59:d6:18:17:99:7a:c9:55:98:2e:aa:
de:f5:7c:3a:57:f5:d5:c2:0e:da:93:cb:13:d6:2a:a1:18:3d:
dd:6f:be:e2:d2:ee:e2:8e:ff:4a:7f:66:3a:c9:d0:91:e2:af:
66:dd:0b:79:4d:d3:1f:ab:67:e7:b5:7b:7f:22:43:1a:f0:a2:
79:e3:19:14:4a:bb:5e:b9:57:4b:09:34:5b:83:7e:f7:2b:f7:
1a:be:83:54:ae:b5:a5:42:63:72:84:a9:64:b5:01:c7:a8:47:
e7:b1:15:66:53:ef:8c:1f:4f:0c:55:a9:17:f3:3a:f0:81:85:
b6:05:0d:ff:44:d4:1f:6c:ea:f1:23:4c:c9:05:12:ab:31:70:
26:c2:3a:e8:70:fe:8c:ad:fc:c5:76:40:59:c2:cd:94:21:ba:
6a:e2:38:6f:c7:64:08:5a:b7:1e:85:8d:67:ce:b1:59:d9:f5:
8b:72:cd:8f:7f:2d:48:c3:74:20:f8:0f:23:fd:40:fe:42:d0:
85:95:b5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:24 2026 by rpki-client