Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
File: rPB-8xBznj1eeVAcrOqJp8qy_ic.mft (raw, json)
Hash identifier: Xgd7VflHdSx8whG2yvIkAf2ZoSzzOVIL+dfF3/g9vwE=
Subject key identifier: 63:3C:B8:06:AE:63:D4:E9:FA:F5:CA:64:96:6B:16:32:9C:98:B9:CA
Authority key identifier: AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
Certificate issuer: /CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Certificate serial: 019D371B5A59E4B1C8D21CC0961B905B4FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
Manifest number: 35
Signing time: Sun 29 Mar 2026 01:00:32 +0000
Manifest this update: Sun 29 Mar 2026 01:00:32 +0000
Manifest next update: Mon 30 Mar 2026 01:00:32 +0000
Files and hashes: 1: rPB-8xBznj1eeVAcrOqJp8qy_ic.crl (hash: 3lKkdSROLBJwOL2evS5vUICHNorWW/6g6lltf4yio2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:5a:59:e4:b1:c8:d2:1c:c0:96:1b:90:5b:4f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf07ef310739e3d5e79501cacea89a7cab2fe27
Validity
Not Before: Mar 29 01:00:32 2026 GMT
Not After : Mar 30 01:00:32 2026 GMT
Subject: CN=633cb806ae63d4e9faf5ca64966b16329c98b9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:51:94:e4:6a:df:13:ad:bc:89:55:69:87:
3e:18:8d:9c:1f:b5:f7:6d:67:14:ba:32:9a:d7:ca:
a7:06:b8:fa:eb:09:d9:6f:c6:a0:7b:70:71:56:15:
c1:ac:d3:fd:d4:5a:5b:a1:4a:64:58:3a:64:34:b6:
89:88:ce:85:e1:87:23:6d:f7:8b:30:65:f0:85:8e:
40:24:fc:b3:22:0c:e7:96:29:89:4b:73:5a:46:38:
1c:24:87:6b:82:d6:dc:e1:b4:1b:8e:17:bf:af:be:
1b:2d:e9:65:9b:8a:c4:e6:95:2b:83:86:1f:e5:f9:
5d:3e:10:38:2e:1c:0d:2e:0c:4f:0e:86:22:6f:c9:
4c:d2:9c:d2:e6:4e:4f:6f:d5:00:43:78:0a:91:7b:
92:00:68:94:c7:b2:36:f8:0b:ac:3b:ae:27:c1:36:
3b:fd:79:35:a5:ab:2b:e2:c9:4a:67:2b:5d:33:ab:
61:e9:4b:ee:83:0f:12:b0:28:e5:c1:e2:48:38:f8:
a9:f2:da:1a:fb:0a:1b:d5:4d:ed:bd:ec:94:13:2e:
d4:79:4b:d1:c3:ea:a0:92:59:f1:10:86:a7:4f:2d:
3c:e3:47:0e:a8:af:8d:90:db:4a:b2:d6:c5:19:8a:
87:1b:4a:17:4f:6a:2d:b3:a6:d4:4e:f7:9a:2a:0a:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3C:B8:06:AE:63:D4:E9:FA:F5:CA:64:96:6B:16:32:9C:98:B9:CA
X509v3 Authority Key Identifier:
keyid:AC:F0:7E:F3:10:73:9E:3D:5E:79:50:1C:AC:EA:89:A7:CA:B2:FE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPB-8xBznj1eeVAcrOqJp8qy_ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4840a9-0405-47cf-83b5-08767dda349f/1/rPB-8xBznj1eeVAcrOqJp8qy_ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:71:a9:7a:1b:b6:ff:fe:68:d4:a0:e5:c9:91:0c:a0:cd:a7:
41:f3:9a:18:13:36:32:25:d8:4e:2f:89:1c:b0:3e:89:88:03:
37:95:2c:5a:aa:89:42:c5:be:5b:fb:cb:c7:e1:d2:6b:bc:8e:
37:25:50:b5:62:cd:b6:d1:d8:88:48:d1:9c:5f:e8:c7:f1:dd:
79:a6:fc:2a:90:9e:8c:40:6c:8e:42:97:6d:4d:30:a6:8a:a5:
00:3c:ae:30:bc:08:50:a1:62:7d:26:ab:6b:7c:ef:06:c4:54:
8e:91:5a:35:30:1e:e1:bb:fb:07:06:2c:2c:15:35:dd:51:17:
9b:6d:85:4f:0d:86:04:69:e5:72:94:c1:4c:0a:73:15:bf:61:
52:2c:3b:80:70:b6:14:a8:89:30:57:f6:d0:8f:48:cd:6e:79:
f2:8b:58:0c:ca:67:32:59:3f:f9:41:d1:d4:03:6b:76:78:c6:
8d:62:bf:85:fd:31:c1:f5:b0:10:c7:33:ae:29:4b:cc:7d:f6:
41:a9:04:4b:7d:1b:a8:6e:15:d0:67:e6:e5:ba:1f:68:d3:63:
b1:7a:e0:79:14:31:6d:e5:77:bd:34:da:30:60:3c:44:6e:57:
79:4c:97:14:7d:a7:e9:e3:f9:1a:d4:17:62:07:d8:ac:9a:26:
79:09:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:15 2026 by rpki-client