Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File: 718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier: TNSBsRDSdIbT2GxWaHE+7WoquB9gg5i1fekMyiTXuIQ=
Subject key identifier: 2E:F9:C0:51:40:08:E2:72:0D:B7:71:5B:82:47:EE:E1:A3:C8:EF:4F
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer: /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial: 019CAD223D21F9DDD44968BAAB4889622C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number: 123F
Signing time: Mon 02 Mar 2026 06:00:28 +0000
Manifest this update: Mon 02 Mar 2026 06:00:28 +0000
Manifest next update: Tue 03 Mar 2026 06:00:28 +0000
Files and hashes: 1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: Z13g2lzzd2KPhb1FmMMCC5ydpvZYpjdsnor4kJkwB1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:3d:21:f9:dd:d4:49:68:ba:ab:48:89:62:2c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Validity
Not Before: Mar 2 06:00:28 2026 GMT
Not After : Mar 3 06:00:28 2026 GMT
Subject: CN=2ef9c0514008e2720db7715b8247eee1a3c8ef4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:ea:d0:99:c7:49:ac:2e:5f:a1:5c:cf:a7:
c7:7f:6f:01:64:c8:61:5d:89:65:78:ab:c8:99:42:
77:33:3c:b0:17:7d:6d:79:cc:37:8e:13:67:bf:92:
14:e7:27:6e:ea:ae:fa:83:06:ed:63:e7:36:2b:4f:
53:ce:bc:a0:cd:c8:4e:6d:97:92:18:f6:ae:e5:b5:
e5:ac:28:97:64:92:65:48:34:69:5e:74:6a:93:b0:
f0:45:3e:60:73:94:df:b5:8c:80:bf:9e:1e:7d:57:
39:c0:b0:84:ae:6c:92:8a:98:ad:80:d3:11:73:39:
ee:66:c3:60:81:a8:4b:84:4e:ec:60:47:f1:c8:fc:
07:bf:b3:29:e0:0f:ac:10:41:52:97:84:26:5c:12:
23:1e:64:d8:ef:9d:e4:79:89:df:b7:ff:7a:5e:4e:
a2:44:fd:18:b3:1c:b1:ab:aa:a7:ba:b8:bd:8a:56:
7b:28:41:95:26:da:9d:81:09:ce:03:d7:ee:5e:7d:
72:ad:55:17:dd:df:97:17:74:aa:a7:13:c4:89:ad:
e1:0a:e8:fb:c8:bd:00:4f:03:3e:8c:80:4c:34:b2:
f6:dd:f4:58:cb:3a:ee:8d:70:1d:19:af:60:40:52:
47:b2:14:a9:06:c1:f0:1a:a7:65:39:52:bd:9b:e3:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:C0:51:40:08:E2:72:0D:B7:71:5B:82:47:EE:E1:A3:C8:EF:4F
X509v3 Authority Key Identifier:
keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ea:4c:63:ed:54:2d:6b:8a:1e:23:4f:fe:34:c7:bc:0d:54:
5a:a4:e6:a3:5b:e9:d4:71:5c:51:99:3c:4f:b4:d0:43:9a:5f:
aa:11:76:e5:28:2c:1d:5d:e7:cd:03:23:4d:1f:e6:35:c5:1f:
36:a7:0e:16:79:46:a6:9f:3a:78:19:f3:50:7a:b1:d9:33:5c:
59:99:44:41:1b:33:77:8b:ba:c9:5a:86:35:50:5d:3e:4b:ae:
29:06:5b:54:7c:bb:64:0b:13:fd:91:50:7a:07:da:d4:b6:01:
d7:16:cc:61:bb:58:9b:05:29:8c:50:e5:dc:b9:f5:6b:c9:8f:
9d:05:79:39:fe:a0:2d:aa:26:a1:65:b4:89:2b:bb:f6:b3:16:
0b:04:51:c0:6b:52:d0:d9:be:55:bf:b0:be:a2:b0:78:0b:03:
2c:33:7a:7a:9b:e6:b2:1e:a1:5a:d0:5e:3a:27:dd:3c:14:d9:
09:ff:b4:7f:ce:e1:c8:ae:f3:49:02:49:0c:ad:86:09:47:17:
d7:2c:b7:5d:91:a9:2e:49:32:bf:b9:ad:0f:2b:80:c1:b2:08:
e2:36:03:99:72:6c:a9:01:bb:f4:61:d7:88:e7:0c:47:65:0e:
94:77:26:fa:37:8a:c9:d3:7a:ca:cb:49:97:08:de:34:29:e5:
bd:ca:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:28 2026 by rpki-client