Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier: iooq95qeFNB280xrK7eOS/3tISqnTwfmZbzbrEl64m8=
Subject key identifier: 73:C7:52:C5:9E:F1:9A:DE:C8:E8:FA:F9:CB:7F:4D:B4:34:66:3F:02
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 019CAA584B65321C990090C097284F7CBCD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number: 0D92
Signing time: Sun 01 Mar 2026 17:00:38 +0000
Manifest this update: Sun 01 Mar 2026 17:00:38 +0000
Manifest next update: Mon 02 Mar 2026 17:00:38 +0000
Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: BlHW8mJBUFelChheFMrgU/xIs9Nu5ix31v2AFe8UnJ4=)
2: pk7GnCKoxkqkPmBMLQvy0zcaqM8.roa (hash: 3tcXLqvph/hx58R2cNUaqQx5GKRZxyDjikkRZceH7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4b:65:32:1c:99:00:90:c0:97:28:4f:7c:bc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Mar 1 17:00:38 2026 GMT
Not After : Mar 2 17:00:38 2026 GMT
Subject: CN=73c752c59ef19adec8e8faf9cb7f4db434663f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:1f:75:51:d5:81:9e:4f:bf:36:1e:1e:3d:
6d:99:06:87:1b:ba:7c:c3:26:02:23:35:8b:38:5e:
f5:c6:17:de:32:44:fc:5b:95:07:5f:1f:e3:bb:f9:
74:1b:9a:ae:4b:b9:6f:f7:1e:f5:c5:68:30:c9:19:
9e:25:7e:41:e9:2c:f5:74:04:3c:c4:8d:20:d1:bf:
c9:e2:f0:38:97:71:34:1b:2b:e4:68:ef:75:71:40:
e4:e6:c6:bf:ae:c0:35:02:f2:46:69:3d:01:4c:22:
72:4e:cf:e5:09:01:54:2f:c6:3b:43:ff:8b:12:ce:
75:f0:07:40:68:5f:38:a3:fc:99:57:4b:6c:2e:13:
ff:46:3d:0f:a7:dd:81:98:3f:c8:d8:44:13:8c:c5:
48:11:f9:42:b8:ee:f1:62:b9:52:39:0d:e5:22:e9:
57:41:a5:84:02:5e:ff:11:e1:bb:1a:a5:cb:25:9c:
c6:bf:43:03:ae:8e:a8:fb:00:12:28:cb:32:67:75:
af:1c:01:f7:e2:b1:76:86:43:03:69:5c:3d:5d:19:
01:57:4c:35:b4:a0:a8:55:5d:f9:34:0a:52:4f:0f:
56:50:f2:17:67:f1:4d:e0:c5:09:03:06:d1:c3:d8:
88:7b:88:df:a6:90:d7:fc:46:93:da:68:a5:69:0a:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:52:C5:9E:F1:9A:DE:C8:E8:FA:F9:CB:7F:4D:B4:34:66:3F:02
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:97:72:1b:5f:29:56:85:4f:cb:5a:e4:c9:8c:af:83:0c:fe:
50:37:86:ce:e5:6c:ec:e1:6a:e5:57:66:ad:f7:bb:72:ce:dd:
c2:d7:31:55:30:a9:f8:94:fa:6f:d7:47:46:0c:99:a9:b0:a5:
52:ae:f2:2c:53:2b:9e:8a:39:89:07:eb:7c:eb:74:bb:9d:9e:
26:be:84:03:9f:02:76:92:f2:3f:2f:58:ac:b6:a3:0f:61:b5:
c2:95:ef:2f:0d:b8:cf:5a:49:d2:41:cd:57:bb:a9:ae:bd:07:
3d:3c:e4:e8:a3:79:47:50:ac:b0:eb:37:bd:83:bb:c9:e9:2c:
47:09:b7:a7:d5:6e:9e:ac:06:99:14:d6:58:67:6a:0e:2f:67:
dc:51:28:09:3c:c1:c9:99:1c:40:cd:17:d6:a4:7b:ac:3a:c3:
15:6d:38:2f:17:c0:05:76:09:64:bf:97:56:c7:53:de:5d:be:
6f:c8:f3:f2:e2:ee:84:df:7a:87:f7:ac:0e:bf:77:a6:19:cb:
e0:2d:4e:23:1b:d0:98:ee:dc:1a:5f:5d:a8:b1:58:36:45:55:
1a:8d:fb:26:5a:03:45:77:22:94:60:c1:8a:7b:1c:02:c7:ba:
91:b1:17:86:4d:07:71:6d:7f:fd:ee:b2:67:df:4c:6f:fd:d4:
a2:13:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:40 2026 by rpki-client