Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
File: _hEX6Xaz4zlTuTYbtLseui9Ane0.mft (raw, json)
Hash identifier: zirW5hzDWBN+XBg0p5ziAGbiGKV5fYRSyzv8RMgSHno=
Subject key identifier: C2:C8:7E:39:14:32:AC:31:10:F1:79:DB:24:55:63:B7:6A:02:FD:3B
Authority key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
Certificate issuer: /CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Certificate serial: 019D3940BC952668E8C12874578F6F51422D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
Manifest number: 09AC
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: _hEX6Xaz4zlTuTYbtLseui9Ane0.crl (hash: SPiCV3zDr42ktztR4ZT4m5vR0fDDRJ16H5iCulvs9gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bc:95:26:68:e8:c1:28:74:57:8f:6f:51:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=c2c87e391432ac3110f179db245563b76a02fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:87:84:c5:67:f2:8a:0c:40:0d:d8:55:5d:
d4:f8:3c:ed:cc:65:b0:2f:96:0b:ed:25:73:65:f9:
e6:ba:21:05:8b:d5:4a:79:80:ba:79:fe:79:cf:b1:
bf:0e:2f:1e:15:ae:10:e0:d6:e4:4a:da:ca:b6:49:
22:5f:de:79:43:bf:6f:fa:cb:70:1a:33:75:42:5a:
33:7e:ea:f7:1c:1c:e3:dd:24:70:e0:b1:d0:2c:ec:
d4:94:02:ce:72:06:4b:72:f8:ee:c8:60:94:73:9c:
e1:a0:4e:ab:01:fd:44:1d:a0:2e:89:3a:0a:41:57:
c6:b9:ad:0d:39:29:a3:10:ae:61:00:ac:ae:5e:a8:
46:c8:f5:59:95:fc:30:29:4e:14:d2:1d:70:22:c5:
26:eb:8e:1f:66:28:c0:85:aa:3b:d8:e5:bf:a8:14:
27:0c:f6:a4:9e:54:11:b4:fc:66:c8:6b:06:c2:c5:
6b:0e:9a:68:68:d4:0c:38:cb:f1:e7:a5:2d:59:b3:
4b:7e:33:d1:d8:7a:36:20:84:2f:ce:b5:91:ff:43:
ef:a2:d7:b9:c6:b4:32:67:f7:d1:22:55:bd:d8:57:
24:d2:c8:38:fb:d0:09:39:a6:61:7a:d5:bb:90:95:
a4:4a:d9:ac:8c:d4:0b:09:d9:0e:df:8f:67:af:ef:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:7E:39:14:32:AC:31:10:F1:79:DB:24:55:63:B7:6A:02:FD:3B
X509v3 Authority Key Identifier:
keyid:FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:92:f0:a5:a1:59:8c:41:ad:31:c6:1b:5e:fe:10:46:3d:f7:
ba:f1:dc:49:48:a2:c8:13:ca:9e:2d:a0:9b:01:c6:9d:30:48:
a9:f4:78:c0:ac:e4:74:48:94:4e:92:9a:31:59:e9:3a:b6:95:
9d:e3:63:d4:21:c4:de:b5:16:44:5c:ad:f7:a7:5f:45:72:98:
b3:93:1a:38:f8:cf:63:76:c3:a3:e3:ff:c0:66:34:0f:61:73:
08:8f:61:08:8b:ab:46:e8:f1:a8:85:f7:bb:0b:a9:3b:05:6f:
d1:c3:0b:49:89:16:1e:b1:8e:17:1b:f5:36:19:be:b3:48:b8:
e5:2a:6b:96:14:54:5e:a6:e4:51:8a:7e:ec:a2:c7:d9:60:78:
d1:bb:70:7a:40:5d:87:b0:99:d0:55:12:25:2e:d5:2a:40:0d:
2d:16:10:63:d8:08:eb:ac:fd:e5:f1:61:e4:10:e3:94:08:3a:
3c:02:af:80:7a:f3:bb:5b:f5:d7:e2:da:9e:cd:0b:4a:4b:f7:
68:df:5c:7c:41:c2:ce:96:64:3d:19:bb:d4:50:4c:43:8f:07:
99:2b:07:08:6d:86:0a:5a:4a:13:34:91:ac:dd:1d:ae:82:f9:
43:bf:12:f8:4c:1b:e5:5c:29:0c:b4:27:8a:ea:c6:23:ab:09:
60:81:27:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:15 2026 by rpki-client