Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: R3+2rj/4nk3VbU4SJSAsorGncShZIb2J5rJlfSpflTw=
Subject key identifier: A1:86:C3:1B:BB:14:C6:B2:F4:BD:A6:F0:2C:3E:4B:80:AB:1C:72:3F
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 019CAB6BB64384029665A36B7CE7C7D19F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 0B0C
Signing time: Sun 01 Mar 2026 22:01:28 +0000
Manifest this update: Sun 01 Mar 2026 22:01:28 +0000
Manifest next update: Mon 02 Mar 2026 22:01:28 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: kFsv90KNB1Vc3A41LrwI+T49cEVRHemgzHAeioCPHWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b6:43:84:02:96:65:a3:6b:7c:e7:c7:d1:9f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Mar 1 22:01:28 2026 GMT
Not After : Mar 2 22:01:28 2026 GMT
Subject: CN=a186c31bbb14c6b2f4bda6f02c3e4b80ab1c723f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:cc:82:16:0b:ef:6a:22:5d:dc:90:e3:db:
b9:59:ce:64:94:68:3c:91:5e:8e:f7:13:3f:ac:78:
cc:e5:5d:86:6d:38:17:28:3a:9f:26:12:30:ce:cc:
33:77:75:ed:d2:8c:cd:76:6d:49:0c:84:3c:0e:5a:
21:60:0d:e0:15:e1:6f:72:c4:3f:13:68:da:5f:78:
6d:25:3a:7c:72:e0:64:62:c3:ba:16:d7:ab:40:c2:
13:09:f0:d3:06:e3:8a:c4:90:9a:71:c3:73:38:b7:
a0:c7:55:56:e1:0f:64:34:3b:7a:c3:22:f4:14:b8:
14:53:49:be:61:78:38:c6:60:02:f9:ab:d7:2c:90:
c5:12:33:28:89:89:0b:5d:1d:69:72:a8:b3:d6:34:
88:ee:c1:78:f7:97:7f:44:19:14:d3:f5:a2:90:ee:
58:15:a3:5d:4b:90:f6:76:c0:9e:0d:90:a8:be:3c:
96:f2:cd:81:d7:66:54:cf:bf:c5:2c:d0:7e:c9:d2:
b8:c4:cd:ee:92:20:9a:b5:64:38:31:de:12:ee:07:
91:35:2a:21:cc:4f:6f:6b:7d:56:90:99:29:ae:79:
0d:26:a3:21:69:92:72:07:c7:66:be:e4:5c:99:aa:
14:06:57:f2:fa:4c:7d:ef:ab:1b:c6:85:e6:ac:41:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:86:C3:1B:BB:14:C6:B2:F4:BD:A6:F0:2C:3E:4B:80:AB:1C:72:3F
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:19:f8:2f:45:e6:aa:8b:4f:2e:21:99:ec:1d:2b:23:1f:2f:
bd:40:b6:e1:a7:1b:80:84:5d:b4:31:0f:3c:87:57:7d:9b:7a:
8a:ae:75:68:3e:ab:d9:3a:14:fb:47:38:23:e2:1c:67:9d:9d:
b2:bf:40:68:96:f8:91:43:36:d0:00:44:09:61:fd:ed:19:d2:
9f:20:e6:8a:c3:3a:05:25:46:2e:1e:c8:bf:d6:4a:4c:31:9b:
72:21:c6:62:d1:af:46:2c:84:91:6e:ba:bc:49:ee:6e:86:94:
81:51:23:f1:ef:1b:0e:da:a8:02:59:b7:f7:04:86:75:56:e4:
f9:6a:98:0a:d1:77:39:c8:6e:25:52:5e:08:b7:8f:53:3f:07:
f8:33:a2:e9:8c:f1:38:9a:3e:ae:b9:c5:55:26:26:60:8f:fa:
a1:31:63:c8:b8:5a:58:df:12:7b:4e:49:b0:73:b9:55:4e:8a:
96:6e:dc:56:c0:93:7d:d0:bd:bb:61:ae:51:17:59:47:92:0b:
9c:c8:18:ca:c9:19:46:86:c5:b5:63:7f:80:63:b6:da:8a:0e:
47:da:a8:ee:f7:37:62:da:00:eb:34:dd:29:64:7b:09:69:29:
d0:53:a7:1c:81:82:0a:c5:d0:50:e8:42:c8:86:da:8d:9c:82:
f2:4f:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:34 2026 by rpki-client