Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier: QB4wixmK3lC8MTA0zN51jmwukfy93uvcSUBCX/KAFIY=
Subject key identifier: 32:CB:EC:5E:32:CC:8E:88:7B:16:9E:9C:A4:1A:87:19:9D:A0:7F:BE
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial: 019CAB6B323C4C61C816FF88C059F2FE76A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number: 0DC6
Signing time: Sun 01 Mar 2026 22:00:54 +0000
Manifest this update: Sun 01 Mar 2026 22:00:54 +0000
Manifest next update: Mon 02 Mar 2026 22:00:54 +0000
Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: i0JpH4z5vj94GAfnTiqYUFJk3ODCehXiWrLKW7hLHQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:32:3c:4c:61:c8:16:ff:88:c0:59:f2:fe:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Validity
Not Before: Mar 1 22:00:54 2026 GMT
Not After : Mar 2 22:00:54 2026 GMT
Subject: CN=32cbec5e32cc8e887b169e9ca41a87199da07fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:4a:f6:9b:d0:0e:59:ea:dd:3d:42:a4:c0:
b0:1a:15:4c:35:61:ca:64:8f:2b:73:43:b2:7a:e0:
26:ae:7e:49:dc:1d:85:5c:b4:5d:fd:43:61:12:77:
40:20:cc:7f:21:05:07:c9:91:b2:9b:04:62:88:e4:
b6:e7:10:c7:6b:d3:7a:8f:9d:55:74:04:8f:fd:ee:
82:2d:43:9d:43:02:6b:8b:0b:24:46:48:29:6e:6c:
01:7e:88:38:7e:76:83:03:65:98:b6:ca:29:10:74:
d7:0e:8d:c9:00:0a:14:c8:57:6c:27:73:4b:c1:df:
f7:4c:c1:6c:9c:ff:4e:6f:68:59:f5:0c:11:7c:33:
8f:5f:00:60:ea:bf:b9:b0:65:38:fc:0a:ab:1b:18:
ee:9f:27:75:a2:73:84:78:b7:3e:88:55:14:95:09:
b1:06:2a:38:b9:41:8a:41:2c:d9:86:2e:2d:e7:73:
bc:27:5f:b1:0a:86:2b:60:a1:7b:7c:b9:54:69:2a:
b3:96:5e:85:f9:52:a4:ee:f1:d3:d3:d4:8a:0a:c2:
36:50:f0:ab:2d:d6:5e:c5:46:e9:7a:75:49:ca:a8:
e0:9b:74:1d:07:a0:24:96:17:9b:92:5e:6d:68:22:
52:35:bd:76:43:ec:50:08:81:5a:ff:1c:d8:e1:86:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:EC:5E:32:CC:8E:88:7B:16:9E:9C:A4:1A:87:19:9D:A0:7F:BE
X509v3 Authority Key Identifier:
keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:56:57:cc:0d:0c:f5:45:d6:be:5c:3f:23:12:54:3c:d0:78:
4a:c1:db:20:ad:fa:77:b2:49:57:9b:d0:fd:5d:db:89:c0:aa:
14:0f:2a:65:2a:62:f4:ab:b6:89:34:bd:be:36:d7:a7:5b:f9:
33:47:67:68:08:aa:83:bf:46:48:13:cd:97:1a:18:06:eb:3d:
04:8a:8a:54:49:71:f9:90:c1:ab:fb:df:96:14:f1:07:cc:20:
ce:95:a6:d0:80:f0:11:e3:a3:a9:cb:dd:9a:14:dd:8d:be:a5:
e3:c0:cf:e9:13:46:28:27:2e:d2:19:8d:0e:31:cc:56:53:9e:
29:c2:dd:a1:43:f1:2f:01:55:68:f2:15:16:50:6d:56:cc:30:
61:f9:ab:df:77:a7:b6:9b:eb:d7:61:1c:32:93:13:a6:9a:52:
71:49:47:ee:54:d2:6b:72:02:62:65:4f:cd:36:09:94:9c:4e:
86:c2:2f:8a:67:29:18:24:4d:59:77:3e:a2:3a:7c:d5:8a:8d:
d6:e9:b0:75:f6:58:d7:76:fb:8b:d2:10:29:db:88:40:65:06:
bf:31:c9:6b:1b:a7:2e:f2:42:ab:46:99:f9:96:90:17:76:18:
cb:9a:60:97:a5:3e:fb:40:7a:3b:2b:68:4b:f7:fa:1f:bb:75:
ac:78:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:00 2026 by rpki-client