Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: H6smHQOLWJbn7AvDZeaD1XI0YVs9M1N2LNYfLKBWUS4=
Subject key identifier: 04:77:AF:D7:53:37:48:3D:93:85:24:E2:47:5C:43:C7:45:26:5A:4E
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 019CAB6B8C824DACEE16B9C044B94D705095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 05FF
Signing time: Sun 01 Mar 2026 22:01:18 +0000
Manifest this update: Sun 01 Mar 2026 22:01:18 +0000
Manifest next update: Mon 02 Mar 2026 22:01:18 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: F0ui4cVPBuAcqNysPfvaWihfHigaTS9GrvSmNrMhbJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8c:82:4d:ac:ee:16:b9:c0:44:b9:4d:70:50:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Mar 1 22:01:18 2026 GMT
Not After : Mar 2 22:01:18 2026 GMT
Subject: CN=0477afd75337483d938524e2475c43c745265a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:2d:fb:92:0c:c6:d5:6d:b7:60:ae:26:f8:
8b:8d:e2:52:da:e4:de:90:eb:eb:4e:e9:7b:c2:d3:
12:b3:55:f0:36:8e:f8:31:9d:e8:e2:a8:3e:3e:72:
d4:72:02:17:4e:3c:5f:71:a3:49:f9:b9:b1:97:49:
4b:7e:e2:f5:2e:8f:c8:cc:66:b1:49:f3:ec:dc:ac:
0d:f3:97:f8:3a:7f:36:0d:ea:7f:b8:03:30:45:6f:
d3:d2:a2:dc:a9:a0:d6:61:b6:f1:72:92:41:89:71:
35:02:06:c4:61:50:59:73:41:4b:2d:0f:a1:04:09:
95:d3:bb:97:ab:bf:85:bf:ed:17:ca:13:a3:e0:32:
c7:b5:0b:88:03:7c:99:01:d8:49:7a:ff:ba:c4:69:
2e:8d:51:fc:1b:76:e8:a5:ac:05:c5:14:8d:4d:01:
79:e7:86:c2:80:95:5a:54:41:27:38:46:20:98:f8:
b0:32:ea:11:93:06:8f:45:76:15:ca:df:64:c2:a2:
56:2d:8b:a5:e2:52:bc:21:18:90:6d:76:39:7b:36:
f6:ce:2e:b3:82:46:2b:d9:9a:c3:fd:07:7b:19:97:
dc:a0:8f:63:49:e4:93:07:f1:98:52:2a:85:d0:a1:
0b:bc:6f:d9:4f:c8:36:0c:af:23:c6:5a:a2:18:a4:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:77:AF:D7:53:37:48:3D:93:85:24:E2:47:5C:43:C7:45:26:5A:4E
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:70:97:fd:11:81:42:7d:43:04:2b:85:11:51:56:97:91:4d:
45:24:3c:5a:ee:41:75:bf:e7:b7:2b:1d:8e:3f:43:0e:c1:fb:
be:ed:f2:be:c9:82:ea:67:57:e9:a2:d3:61:76:18:de:69:64:
2a:5f:b7:49:ad:38:08:8e:a5:bb:49:02:46:cf:6c:a5:cf:41:
f7:5f:73:3e:94:ee:89:46:6e:0c:7e:5a:0e:00:3f:d2:bd:75:
d9:0d:1d:57:85:c3:93:42:dc:ad:b8:2b:f1:d1:42:bf:5b:f7:
96:53:d6:88:93:3e:43:96:b1:36:4d:e8:7a:13:31:68:c1:9b:
66:0c:b8:38:70:3b:98:00:06:c9:10:88:db:9f:b2:f5:cb:f5:
0b:a9:34:10:65:53:e1:12:0c:b4:9f:18:c7:e2:70:62:18:3c:
0c:ec:e8:51:91:5d:7c:72:db:bc:3b:a0:26:18:70:fe:cd:7b:
82:9c:fe:4e:bf:9b:8f:9f:f1:10:00:da:6b:04:52:7c:3e:aa:
2e:53:95:d8:7c:f0:b6:eb:ba:bf:ff:3f:57:6c:3e:9e:a0:10:
99:84:b3:f0:63:47:29:67:60:64:b8:24:c4:55:35:74:4b:ca:
9e:e0:3c:32:3a:8b:ab:98:99:d6:7c:81:1a:1e:d3:23:a6:a4:
2b:f3:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:40 2026 by rpki-client