Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: YXdMos4FGP3+FcQ4c7UFY1/AkH7bMnVCPSwcs4eTqZg=
Subject key identifier: 2B:27:91:62:5E:38:B9:51:F2:4F:A6:2C:B7:E8:DE:00:D7:AE:1A:1C
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 019CAA21546129A10D18EBC2094A14181A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 0BB6
Signing time: Sun 01 Mar 2026 16:00:36 +0000
Manifest this update: Sun 01 Mar 2026 16:00:36 +0000
Manifest next update: Mon 02 Mar 2026 16:00:36 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: O3ZKV1fF6Wa6NzXONmfpZqn8odyUM/0V7iT75T9y5M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:54:61:29:a1:0d:18:eb:c2:09:4a:14:18:1a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Mar 1 16:00:36 2026 GMT
Not After : Mar 2 16:00:36 2026 GMT
Subject: CN=2b2791625e38b951f24fa62cb7e8de00d7ae1a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:50:4e:e0:9d:f1:2b:15:4e:fe:cd:44:71:
1b:ad:a1:19:ad:52:65:4b:55:7d:6c:af:1b:43:a2:
4b:a8:92:ad:87:b2:2e:48:92:7f:5b:ce:1e:45:38:
d4:e5:df:16:4b:1a:f5:e8:ec:2f:d9:a2:d1:7f:10:
7e:9a:99:b6:09:c6:60:32:9a:04:d8:39:69:22:73:
14:02:0e:8d:24:4a:7b:15:d2:80:76:48:55:39:9f:
17:cc:55:b9:dc:4d:eb:ef:a0:9b:3f:96:cf:21:fc:
ce:eb:f5:38:68:ef:30:66:38:25:72:30:9f:3e:1f:
a1:d3:68:7d:b8:a1:4c:d4:d8:54:b8:a4:e4:7c:84:
62:95:7f:23:bf:1a:97:f5:87:e7:56:2c:bd:43:cd:
4a:33:5a:3a:d5:53:fb:19:51:17:54:a7:f0:b1:62:
96:35:24:ac:33:2b:a4:5e:c4:09:12:de:11:3e:b1:
6a:e0:61:0d:1d:f4:09:73:bf:2c:46:19:8e:be:e4:
ff:5f:77:11:3b:75:17:23:b9:da:d7:3d:19:32:cc:
b0:97:07:86:29:a9:81:50:62:be:14:90:22:e7:09:
2f:84:e1:73:57:5d:7e:e1:46:c6:ad:87:a7:f8:d4:
52:7c:f8:c6:7d:08:b4:0a:82:61:e2:91:73:33:fb:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:91:62:5E:38:B9:51:F2:4F:A6:2C:B7:E8:DE:00:D7:AE:1A:1C
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:18:b9:7a:bc:bf:c8:fe:d5:89:52:46:73:5f:b6:42:4e:99:
20:59:2b:80:45:3b:18:07:7c:85:a5:bc:22:d8:16:ff:89:51:
e7:61:f4:79:a3:fd:98:a0:76:1e:67:ec:63:1d:31:7f:13:7e:
24:a0:30:fb:1e:ed:e7:23:39:41:a5:fe:8a:bc:ac:a8:20:10:
6b:34:0c:4c:b7:e5:32:89:b8:8a:64:25:ab:bc:5f:73:69:47:
0f:3e:57:64:0d:79:91:3d:3d:5a:3b:ea:b1:f2:05:ab:ae:d9:
7f:51:44:2e:dc:64:f0:b5:ca:a4:fa:77:1f:86:9f:5f:d2:07:
b8:89:42:30:3b:a9:b1:47:6b:9d:bd:42:57:cf:90:2f:10:e5:
51:ad:07:d0:79:1e:b4:e4:c7:e0:e7:bf:ce:7b:4a:01:61:75:
ab:e6:5a:fa:5b:61:dc:6a:67:ef:dd:c1:e3:f7:34:d1:70:84:
4c:81:c9:44:9d:64:c9:b2:77:89:2c:85:46:38:c9:f7:d8:73:
de:a8:a1:19:cc:a5:61:27:06:2e:b4:f8:bf:83:77:67:e3:48:
80:13:27:00:96:85:9c:55:3e:39:4c:da:c0:9c:18:ce:ee:db:
ac:cc:2a:f3:22:74:84:8a:7f:f5:34:4f:3b:3b:e0:29:96:5b:
c5:77:07:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:45 2026 by rpki-client