Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
File: d_M68l-VqylxEYjp_-pQzMshHXY.mft (raw, json)
Hash identifier: yc1b2sYcJNG+zc4xUOdCuT/h4DMjPTVVOI4FPm0IBPA=
Subject key identifier: A4:34:6E:FD:89:39:9A:8B:CE:37:35:69:B3:00:3E:3F:7E:3C:C5:94
Authority key identifier: 77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76
Certificate issuer: /CN=77f33af25f95ab29711188e9ffea50cccb211d76
Certificate serial: 019CACB50943CA0BB57049E80F7152BFDD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
Manifest number: 0FBC
Signing time: Mon 02 Mar 2026 04:01:11 +0000
Manifest this update: Mon 02 Mar 2026 04:01:11 +0000
Manifest next update: Tue 03 Mar 2026 04:01:11 +0000
Files and hashes: 1: d_M68l-VqylxEYjp_-pQzMshHXY.crl (hash: PrEGgrsonEpqQzYs6+iZC+RquXuYVLmNd95XE30tiV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:09:43:ca:0b:b5:70:49:e8:0f:71:52:bf:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f33af25f95ab29711188e9ffea50cccb211d76
Validity
Not Before: Mar 2 04:01:11 2026 GMT
Not After : Mar 3 04:01:11 2026 GMT
Subject: CN=a4346efd89399a8bce373569b3003e3f7e3cc594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:01:7b:e0:cf:a9:ef:ca:72:f4:5c:5a:4a:
6f:b6:01:80:3c:dc:fa:ae:e0:50:1e:71:93:76:cf:
e5:80:d9:49:4a:03:a2:10:bf:da:ab:05:14:d0:0e:
78:ef:10:ff:08:e7:1f:d4:fd:da:80:13:b8:8c:b5:
da:9a:2c:1a:8a:b0:17:31:9f:90:ad:10:67:31:5f:
fa:cc:e3:df:8d:3a:5a:bf:21:57:46:71:4f:cd:50:
d3:ae:42:1a:73:0d:1c:d0:32:19:01:fc:b4:f8:6c:
f2:d6:24:b8:cd:17:88:4f:35:e5:19:7a:a0:b2:04:
fc:a7:42:08:74:4d:dd:1d:04:1f:37:65:a1:de:f8:
c6:84:20:82:8e:2c:cb:2a:55:9c:71:04:d3:af:ec:
1d:76:b9:78:47:bc:bc:47:13:43:fb:a2:a0:cc:a1:
3b:08:c5:32:55:92:a8:6f:38:d9:80:cc:a1:92:c7:
87:36:ee:ec:78:29:5b:1c:97:59:c8:7e:b9:cc:83:
fb:a9:88:77:97:2e:ab:59:1d:79:19:70:93:2b:1b:
b2:7d:1c:43:a1:0c:19:b8:35:94:5a:12:55:db:ab:
41:03:24:45:1a:10:fb:be:df:03:0b:a6:d1:a3:6d:
e5:16:3c:36:2f:7c:b4:60:78:8c:50:74:1d:65:9e:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:6E:FD:89:39:9A:8B:CE:37:35:69:B3:00:3E:3F:7E:3C:C5:94
X509v3 Authority Key Identifier:
keyid:77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5d:1e:82:5d:1c:4d:1d:9c:eb:4b:d1:cd:52:3e:ed:00:63:
c3:e9:f2:0a:13:75:ad:c2:98:cb:86:ad:f9:cc:b5:13:2b:80:
c1:d4:21:3e:9c:f3:6a:c0:ff:28:ff:bb:0a:df:04:17:7d:76:
ba:5c:dc:88:83:7e:27:ae:65:16:9c:60:80:20:3f:72:57:1a:
97:25:01:95:1d:a4:7c:8a:e1:d2:ea:74:c0:4a:49:54:2d:82:
bc:d2:9f:d9:7a:cd:73:24:7f:62:3d:08:89:ef:57:8a:84:e5:
0b:c3:00:ad:c6:6c:1a:1a:08:da:d6:c4:7b:1e:40:e5:fa:03:
66:b7:29:e3:0c:8b:cd:36:0a:09:ec:9c:63:fc:2d:18:da:91:
20:5e:97:7f:16:70:45:88:58:b9:64:1f:6f:17:b8:18:ff:a7:
16:7e:e1:a9:02:8a:2a:8f:6b:55:d0:4c:d3:fa:ec:f4:89:7d:
46:1e:ad:c9:df:2d:0f:b4:2f:93:45:9a:ac:6d:1e:5d:6d:79:
9d:65:fe:17:c3:b0:9b:f8:76:bf:64:20:5d:20:52:a5:21:3a:
b3:ca:e3:5b:33:a9:dc:80:d6:b7:27:f2:e8:f4:e4:78:ae:11:
94:57:ac:61:6d:6f:08:38:2a:00:50:a7:d5:6b:85:46:a6:a5:
4c:4c:6f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:48 2026 by rpki-client