Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: 2vXJTopBlnHww3FhqP697VVSAgSBqw2KxpBBqDVZIoI=
Subject key identifier: AD:FD:DE:95:BE:B3:DC:09:D2:47:5A:61:0B:6E:A3:29:82:22:A1:63
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 019D3A54934294385E74CA2D59A2FF2958ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 0BEC
Signing time: Sun 29 Mar 2026 16:01:54 +0000
Manifest this update: Sun 29 Mar 2026 16:01:54 +0000
Manifest next update: Mon 30 Mar 2026 16:01:54 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: Q1ILsMcVCVdPE6vpid7pOJpj/X4KTBr5v/PX03UiB3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:93:42:94:38:5e:74:ca:2d:59:a2:ff:29:58:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Mar 29 16:01:54 2026 GMT
Not After : Mar 30 16:01:54 2026 GMT
Subject: CN=adfdde95beb3dc09d2475a610b6ea3298222a163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:43:3d:bf:10:84:94:79:72:57:7c:9b:50:
7b:b3:04:11:d6:f0:07:23:19:50:00:18:95:eb:31:
c2:ef:34:88:2e:b1:b9:8d:da:f9:0c:f8:9e:be:19:
48:fa:52:45:21:0c:c3:d4:4d:5c:d5:29:25:69:6b:
5a:65:45:31:e1:f5:07:b5:f7:be:72:b7:2b:ce:db:
1a:18:12:44:02:6f:2f:41:6b:68:d4:44:7e:74:07:
54:c0:59:87:28:9a:9c:73:ba:55:85:17:ce:60:a8:
58:d0:9e:66:34:52:08:8d:35:10:13:e6:f3:88:04:
49:15:4d:c3:5f:3a:9d:11:60:04:c1:50:dd:c3:4d:
09:8c:61:d7:be:2f:4e:f0:ac:cc:5d:9b:2b:39:04:
e2:73:8c:78:bb:f7:06:17:e4:69:10:8d:a5:b9:7d:
ed:ad:86:43:e8:df:9d:30:20:bc:5d:d9:37:10:7e:
d5:f2:3b:72:1b:ca:78:2d:a7:08:7e:f1:03:ef:57:
e5:3a:90:48:c7:1e:63:ef:96:eb:65:12:1f:b3:29:
5a:e8:cd:b8:fc:78:74:c7:32:0c:0a:f1:5d:92:a4:
99:aa:9e:48:14:34:ea:84:a0:0a:2f:98:2b:6b:f1:
e3:08:c0:51:c2:1d:95:45:60:f0:05:38:f4:0a:d2:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FD:DE:95:BE:B3:DC:09:D2:47:5A:61:0B:6E:A3:29:82:22:A1:63
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a2:f0:84:13:2f:7a:16:7e:6f:56:f2:8e:fe:5b:cd:45:32:
3e:aa:c7:f2:44:cb:08:9d:15:2e:e5:b4:7f:3b:95:8f:93:08:
f3:4f:c1:fe:ce:bb:c1:b9:59:02:84:2d:d9:a2:ad:3a:55:24:
5d:ed:30:b5:e2:53:ea:3a:4e:f6:ea:44:67:0c:e7:18:49:53:
b7:8a:e7:97:b6:aa:32:88:60:1e:11:a0:f4:55:29:0f:e8:f7:
26:71:64:53:98:d3:cc:cd:9a:5b:5e:ab:ad:f3:5d:b0:a0:c1:
85:a7:45:a0:e6:10:e9:fe:95:fb:5b:f1:c7:99:1e:0c:55:ab:
db:85:04:cd:b5:f4:a3:3e:33:98:0c:ca:2a:ea:74:bc:68:ca:
17:2b:43:51:f7:ee:ab:45:cf:2e:37:11:32:76:8a:9b:ca:6b:
73:0d:3d:ff:61:9a:9f:d3:7c:14:6d:3f:10:32:97:13:c8:ea:
8d:6f:b8:94:75:42:3c:21:fe:e4:21:b1:23:98:e3:2c:04:4c:
4f:f5:e8:14:c1:58:58:4e:28:55:60:c1:62:13:ca:a8:41:5d:
e7:d3:e3:a9:82:55:1e:57:5e:67:50:36:d5:03:23:26:a2:63:
a7:31:20:fb:c7:1b:e9:b7:22:12:cf:0a:b6:2b:2b:8f:e3:9e:
ef:d3:c4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:23 2026 by rpki-client