Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File: 169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier: 68POjFb5R4Dhh6e092WltihGXbMkFr3W4QUWzKkw3JE=
Subject key identifier: 97:3F:71:0B:B3:1B:22:51:8A:D9:4E:06:79:9F:D3:EA:71:36:1A:1E
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer: /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial: 019CAA2182F9343F3A98F1FE39D0E33C0673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number: 0DEE
Signing time: Sun 01 Mar 2026 16:00:48 +0000
Manifest this update: Sun 01 Mar 2026 16:00:48 +0000
Manifest next update: Mon 02 Mar 2026 16:00:48 +0000
Files and hashes: 1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: S2stTFc+IwAgy1qGh5rzxa6yX060cmTlqyoFJQFfYpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:82:f9:34:3f:3a:98:f1:fe:39:d0:e3:3c:06:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Validity
Not Before: Mar 1 16:00:48 2026 GMT
Not After : Mar 2 16:00:48 2026 GMT
Subject: CN=973f710bb31b22518ad94e06799fd3ea71361a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:0a:8b:4f:ed:52:c8:c0:f3:a6:dc:c0:ca:
e8:3a:af:3e:71:56:9a:bb:68:27:9d:c8:2b:c0:b6:
39:5b:62:92:cb:07:d5:c4:9f:a1:d1:d3:8e:87:c9:
be:eb:b7:54:73:29:d1:f0:1e:15:47:53:0b:e4:92:
08:52:e2:cc:80:3f:1f:64:1e:93:eb:4b:df:42:a4:
8f:c4:6d:ce:3b:10:7e:40:9c:65:0a:ff:49:f7:01:
78:34:9d:dd:c9:71:8a:56:0c:82:f2:a6:f4:00:34:
e4:63:9d:2a:24:36:39:f5:61:92:53:dc:fe:a1:96:
30:d6:5b:4e:04:43:31:f0:45:21:51:be:c4:ec:fd:
75:e0:37:48:c8:99:a2:ad:bb:90:2b:11:d8:d1:b7:
5b:11:af:8c:46:86:90:ac:4c:52:69:62:96:e8:06:
7d:65:c9:49:50:aa:16:9c:d2:9a:70:5c:2c:6a:e9:
74:cd:49:ca:69:e0:37:25:41:ce:fe:9a:c7:43:5b:
a9:6b:aa:3d:c1:0a:2e:1f:80:1c:d1:bf:77:7c:b5:
ff:19:16:b5:bb:fd:3e:6a:94:43:3c:00:cf:ea:57:
c2:3b:84:31:6f:a8:87:0a:f5:e5:81:f3:14:3d:61:
33:e9:0d:27:a3:f6:1c:1e:f2:00:d0:9d:22:de:c3:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:71:0B:B3:1B:22:51:8A:D9:4E:06:79:9F:D3:EA:71:36:1A:1E
X509v3 Authority Key Identifier:
keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1d:f3:3c:e4:9a:dd:b4:2d:8c:40:09:5e:7c:22:36:ce:06:
1c:47:37:db:bd:ce:56:91:1b:b0:00:83:d6:2c:68:80:9b:52:
18:47:f2:b8:fa:7f:c2:78:53:df:6f:04:37:a0:24:90:13:b8:
67:91:38:bf:72:f5:ae:11:a2:a5:e8:33:f9:25:7a:10:3b:03:
bd:1a:2d:c4:b9:e0:e7:e7:88:34:e6:67:ec:17:f0:44:c9:94:
0f:b6:e2:e8:43:83:74:64:54:28:0e:6f:ef:52:13:d5:6c:06:
1e:7b:49:3d:0b:20:3f:cf:6c:81:11:b9:e7:2b:c9:a9:22:16:
18:94:33:25:64:ac:0b:fe:ee:60:7e:7e:d1:80:e0:18:3f:5c:
cd:c3:60:97:e0:2f:b7:17:b6:be:ee:08:62:09:f8:f3:00:d3:
1d:ea:db:e1:fa:5a:33:82:c9:4c:25:3b:dc:95:33:91:b6:c3:
0b:af:67:2e:32:cd:51:48:53:b8:17:cc:d0:62:82:7d:02:06:
80:8d:1b:3d:cf:81:ff:79:ca:be:77:83:bc:ec:09:d5:0d:5e:
b2:94:9e:4d:73:a0:78:40:0e:9e:6b:a1:8c:e1:03:ec:82:80:
24:b8:7f:4a:b7:a7:03:13:c5:d5:72:71:24:f1:0f:d4:b9:27:
ff:29:f8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:10 2026 by rpki-client