Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: bv7VcDWXVpn1+0styhA5Ll10rISEKnnleLejhN2zj2w=
Subject key identifier: 20:EA:59:CC:8F:FD:49:BB:32:EC:70:76:37:00:22:57:D0:B2:B1:36
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 019CAC10439BC581B8D1C9BB94A970E45E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 0759
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: LJ/Ka0MRMmEE4YyjkzU4Iz9EmILGeMjBACD9qVya8n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:43:9b:c5:81:b8:d1:c9:bb:94:a9:70:e4:5e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=20ea59cc8ffd49bb32ec707637002257d0b2b136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:36:b4:de:a9:45:dd:36:22:44:55:a6:98:
40:3f:1f:a4:2f:c1:6b:b1:be:31:a8:e7:6a:8a:86:
56:56:b3:55:7d:ed:3a:1d:47:03:0d:3f:ed:18:3b:
d6:45:fe:bc:19:c9:35:97:ec:43:03:e2:e7:13:72:
dd:a0:da:1f:47:f0:1e:d1:e8:dd:65:15:13:0c:3f:
59:d5:a7:2c:c2:b2:e2:da:67:f6:e9:63:dd:4d:99:
0d:f5:fa:b9:22:a5:5c:24:fa:3a:1c:6f:c0:bc:77:
16:a0:5c:bd:d5:c6:9d:ab:a0:ec:06:79:e5:5e:1d:
63:81:5e:5d:f9:e0:ff:af:60:4d:4e:bd:f7:41:7a:
9a:5e:55:1c:ab:e1:30:bb:2c:3a:a1:67:d3:92:05:
2b:9c:5e:1c:f9:9e:21:13:51:4a:1a:2e:b2:d9:1b:
58:71:d7:26:c4:8e:30:c9:f4:34:21:23:d1:50:8f:
0f:00:03:34:62:e9:f8:5f:14:2c:58:43:7d:b4:ef:
e6:d2:21:80:a7:ec:07:6e:7a:39:86:ef:e6:4d:36:
77:1a:d3:ea:1b:26:6d:29:c0:e1:db:1b:7e:72:50:
b0:bb:cb:0d:e4:41:24:62:af:01:79:ee:5b:7b:00:
43:44:71:d2:c4:9f:8b:72:1d:26:59:ea:a8:ba:71:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EA:59:CC:8F:FD:49:BB:32:EC:70:76:37:00:22:57:D0:B2:B1:36
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:26:07:5a:26:69:a8:8b:44:b5:5c:0c:4c:9f:4b:fa:e1:9d:
e3:8e:6a:d0:51:99:0b:bc:ae:67:29:ca:14:41:35:eb:0e:1d:
2d:49:6a:79:ee:69:20:d6:4b:96:27:31:65:1d:d7:c0:f1:dc:
c4:65:7a:4b:36:f2:51:47:0a:88:6b:b0:16:5f:dd:a7:f1:ea:
40:26:dd:3f:fa:8e:fd:3a:3a:28:74:fa:9e:4f:68:97:e8:48:
49:17:36:9b:e1:43:e1:b2:e1:2c:ee:95:c5:16:e6:3a:55:7b:
eb:a1:bc:77:24:45:c2:0f:c0:40:26:e7:38:1f:02:93:72:07:
55:62:d4:b5:9a:65:99:38:03:c4:ab:33:dc:87:6c:7f:fe:e5:
39:3f:48:ae:21:28:ed:07:0c:52:86:d2:13:3a:76:be:4f:e1:
30:2e:ab:f0:b7:e9:b9:c0:3e:9b:a3:cb:29:a5:80:f6:74:d3:
42:7f:67:eb:e6:81:0b:4a:e1:26:b9:fe:40:b9:86:4b:1c:72:
4b:77:50:f6:f5:9f:df:c7:9a:97:27:40:92:56:0c:b4:0d:50:
c8:f7:9d:09:76:be:1c:3b:3d:5e:e1:41:f1:16:93:ec:a2:62:
fd:ee:5b:f3:91:07:cf:d0:ca:4a:30:5d:c0:47:0e:20:ef:9e:
ab:4f:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:32 2026 by rpki-client