
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
File: tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json)
Hash identifier: vaQUsUOXc0dqr+spcG0VOOs4z5dBWBEtdf+v3lHXyZE=
Subject key identifier: 73:F1:28:B9:AB:47:81:F4:7B:15:B1:A5:DD:B9:4D:DF:9D:16:46:AC
Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
Certificate issuer: /CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Certificate serial: 019CAB6AD1EC248E9C40DA69E998AF578F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
Manifest number: 1049
Signing time: Sun 01 Mar 2026 22:00:30 +0000
Manifest this update: Sun 01 Mar 2026 22:00:30 +0000
Manifest next update: Mon 02 Mar 2026 22:00:30 +0000
Files and hashes: 1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: nI66zhvRKG4O9QPG3g1jfTo+LqlrF9vKWwIS6W1YSDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d1:ec:24:8e:9c:40:da:69:e9:98:af:57:8f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Validity
Not Before: Mar 1 22:00:30 2026 GMT
Not After : Mar 2 22:00:30 2026 GMT
Subject: CN=73f128b9ab4781f47b15b1a5ddb94ddf9d1646ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:9e:13:9c:3f:ee:1e:43:f5:e0:82:cf:fe:
fc:49:d6:8d:35:40:b9:27:78:d5:3d:41:c8:d7:1c:
1c:81:a2:d6:56:f0:e8:41:11:b2:80:99:72:0b:5c:
a7:d0:ef:9b:90:22:0f:5d:54:fe:e3:df:2f:d0:87:
12:8c:0f:d1:90:e0:0b:0e:93:ee:d5:a0:3d:e0:13:
b5:0c:e7:bb:9e:cc:b4:44:6c:24:39:2b:8d:34:f6:
cd:84:9a:9a:02:b6:00:26:08:f4:1a:76:49:70:9f:
e7:67:29:17:b8:97:01:a4:ea:97:96:6e:84:1f:cc:
64:05:de:3b:b3:f7:48:c7:c0:15:24:6b:f9:72:34:
35:17:45:82:40:b3:f1:7b:d5:70:2c:66:fa:72:24:
76:78:61:48:ee:f6:55:bb:94:0e:7a:d2:48:9c:f4:
72:cb:6f:a9:09:d5:53:32:15:9b:58:2f:e0:bd:1b:
9c:00:0e:c5:02:ec:a4:ac:78:7d:95:dc:c7:c2:7e:
fc:96:15:d0:ea:71:9b:d4:99:23:cb:6e:b4:f9:61:
1c:31:75:c5:98:06:74:95:be:0c:af:28:8d:6b:8e:
dc:45:f4:8e:50:7b:bf:d7:5b:08:75:57:24:37:80:
d0:77:06:49:68:61:05:ff:9f:e0:b7:d9:6c:ce:da:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:28:B9:AB:47:81:F4:7B:15:B1:A5:DD:B9:4D:DF:9D:16:46:AC
X509v3 Authority Key Identifier:
keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d2:a0:3b:68:66:46:94:3b:40:f9:3f:32:ae:11:45:68:c6:
f0:75:9f:88:d6:9d:41:ce:ca:62:db:52:49:8d:c1:9b:cc:09:
27:e0:d1:a6:40:6a:a4:f9:7a:96:8c:46:a5:73:af:8f:e7:c5:
c5:74:e2:2c:14:1f:60:03:5e:14:c5:25:5a:71:3e:d7:28:be:
34:eb:07:5e:4c:31:69:5d:d7:cc:b5:62:a9:7a:6a:dc:67:b8:
15:e7:00:14:d5:1e:f5:5c:17:e5:41:7a:c0:63:b5:6c:99:86:
3c:a3:13:1e:3b:83:49:f2:19:ce:fa:61:6d:93:15:c9:f4:d9:
46:69:24:7e:5d:e6:94:79:1c:b6:d3:ba:8f:dc:72:69:52:41:
4a:b3:a3:d1:70:85:06:42:0f:fa:63:cc:14:0f:b0:22:68:12:
74:42:03:3b:27:51:9a:ab:c7:23:ce:19:c8:e9:d8:9c:7a:57:
ae:da:fc:8a:cb:6c:4b:d8:89:03:70:1f:c4:db:44:d7:21:10:
23:8b:a9:23:2d:0c:64:64:5c:a3:70:da:08:d8:1b:4b:d9:6c:
9c:51:34:15:52:66:5e:bb:7c:24:a7:38:a5:78:bb:0a:b1:b9:
bf:bd:e3:77:18:dd:06:f3:51:a0:9d:c9:29:29:bb:9c:0a:38:
0c:9b:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:15 2026 by rpki-client