
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: te9w+MlWe6Bn1CRyIwzqYnBJPy799zdCo+90fMK22w4=
Subject key identifier: 3C:CE:B2:D7:AF:BB:B0:8B:AD:F9:98:E4:12:5B:55:5E:33:4D:15:F5
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 019CABA2436A128C73EBC91676C54D7285C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 15A5
Signing time: Sun 01 Mar 2026 23:01:03 +0000
Manifest this update: Sun 01 Mar 2026 23:01:03 +0000
Manifest next update: Mon 02 Mar 2026 23:01:03 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: ZTFLlsj4w60muKX8kWp/6JpRGmu0+dQw/Rx1n6NvSn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:43:6a:12:8c:73:eb:c9:16:76:c5:4d:72:85:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: Mar 1 23:01:03 2026 GMT
Not After : Mar 2 23:01:03 2026 GMT
Subject: CN=3cceb2d7afbbb08badf998e4125b555e334d15f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:63:a3:85:4a:97:d0:49:31:e0:7e:6e:76:
eb:44:df:84:56:73:c0:c9:12:fc:a8:86:af:b8:63:
60:f6:1b:80:00:a7:ea:36:aa:d6:b0:47:fe:30:77:
24:7c:be:e0:7f:40:59:8a:2f:f7:be:34:ff:31:c1:
6f:63:6c:cb:6b:67:76:6d:12:11:ca:29:52:ed:7c:
87:38:3f:86:d0:65:7f:2e:8f:91:8b:80:be:c9:35:
c7:79:92:0b:fa:95:6c:dd:1e:5b:f3:a2:96:8f:0c:
f5:2e:cc:0a:32:da:f0:2a:6b:8d:52:8f:32:50:2b:
20:80:2f:99:cc:31:83:1c:15:0a:1b:fc:c9:5f:ad:
9d:54:dd:73:b6:1e:8a:32:46:00:d3:02:cb:ac:b3:
51:0c:4b:5c:a9:f7:06:b0:f1:57:c0:1f:b1:8f:da:
c0:1e:3c:63:3d:f8:07:b9:5b:d6:d7:73:71:31:ce:
b4:85:39:34:b1:00:85:d0:5b:81:fa:56:0f:b8:cc:
79:64:ee:1d:86:35:b8:7e:eb:84:e7:4a:7a:70:1b:
9b:64:f4:95:54:f8:a5:b3:e5:f0:51:33:e0:ea:44:
d8:fc:06:f3:15:10:0e:b6:d9:35:75:05:9a:b5:f0:
a2:f1:9b:1f:d5:63:6b:b5:94:e3:16:93:6f:cd:52:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:B2:D7:AF:BB:B0:8B:AD:F9:98:E4:12:5B:55:5E:33:4D:15:F5
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4f:79:2a:0c:0c:eb:21:fc:76:c7:7c:ac:33:76:af:60:a8:
0f:67:65:71:27:11:65:72:47:47:77:d6:b2:90:d6:b2:3a:67:
1c:23:01:ac:5d:fa:ba:ad:20:67:a6:6b:d5:08:e0:3e:3a:0e:
dd:36:8b:db:87:f1:f5:9d:de:68:36:8d:3a:cc:09:55:df:a5:
36:e0:c4:43:b9:d8:dd:5c:8a:87:63:31:f2:0a:57:bd:74:5e:
1a:09:57:9a:91:7c:35:ba:c8:1a:e4:17:e1:e7:f4:66:8a:e5:
18:85:5d:6b:b3:f2:2a:7a:18:22:ff:fa:29:7e:fe:04:21:f5:
9c:a0:34:ce:cb:d9:4c:17:29:03:79:f7:61:7a:9a:9f:e6:7d:
20:bd:e5:c5:8a:83:aa:fe:ed:79:a3:9f:6f:7f:d3:3f:f1:af:
b1:0c:a7:bb:bc:44:a8:bf:38:9d:63:be:6a:25:77:0f:55:9c:
ea:e6:64:10:cd:70:38:12:80:97:62:0d:d1:46:2e:b6:79:10:
fd:07:cc:c1:91:94:64:8a:6d:4a:7a:e9:f8:ac:dd:45:63:e1:
55:1d:27:dc:ba:6e:3d:d5:be:c0:e8:5c:66:ed:d9:9c:3a:54:
1a:e6:4e:42:10:3c:25:d5:60:ee:c2:9c:1f:05:86:e3:7a:ea:
c4:78:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:11 2026 by rpki-client