Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: o3rPq0ZFMMB/G9fXt7GRihUhnPps+dZBy+wkNUNBylY=
Subject key identifier: 91:DE:26:9A:E8:CB:6B:C7:D0:A8:8D:B3:F6:35:23:94:76:35:51:04
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 019D38D3B398A113CD4A5411EE08A0145C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 0BCC
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: p7+F2GtObELHjD2p04phDiqmmA/5jx5qJf5a2brn568=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b3:98:a1:13:cd:4a:54:11:ee:08:a0:14:5c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=91de269ae8cb6bc7d0a88db3f635239476355104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:e0:6d:a8:f1:c7:9c:88:d0:26:23:04:17:
5d:61:d3:90:9e:79:88:2e:df:26:e4:86:36:2f:f0:
c9:ac:13:b1:c5:cf:ac:4f:f5:38:51:72:20:c7:36:
a8:92:b3:ec:11:51:ef:9b:b4:b1:b8:74:b2:79:60:
23:e2:ab:9a:1f:62:cc:c0:18:f4:69:48:1b:f9:75:
2e:13:7a:03:2f:0a:2a:b7:4a:ab:f8:80:f5:54:4a:
ad:77:9b:24:cf:d1:18:35:a8:a3:4c:69:86:59:3a:
01:69:2f:8d:d3:99:f5:4d:e8:4a:e4:06:5d:b6:a0:
32:ca:89:5a:c1:ae:98:14:3d:b8:48:48:d2:36:52:
d5:02:95:e7:4a:f3:49:9e:05:d4:62:a7:67:47:c8:
47:cb:1d:4a:fc:7f:25:09:81:2a:5e:93:c5:22:a8:
f4:67:cc:ca:ab:e9:a0:87:88:a8:58:7a:0e:d8:c5:
92:00:7f:3d:3d:2b:aa:dc:76:e4:81:27:cd:eb:69:
c0:e5:aa:4c:c4:5f:27:68:e3:5a:a7:6f:a6:7e:2e:
3e:d4:0b:a6:a6:09:f3:cf:d2:d8:fb:c0:70:c8:30:
4b:25:64:85:2d:b6:c1:0d:ce:79:b5:fb:e1:84:eb:
3e:07:cc:c5:fb:dd:4e:0b:9a:dd:b7:05:8b:58:e4:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:26:9A:E8:CB:6B:C7:D0:A8:8D:B3:F6:35:23:94:76:35:51:04
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a1:38:65:f4:75:fd:0f:3e:eb:f3:43:b8:bc:81:4a:61:cb:
69:3a:29:65:ba:7c:e5:01:07:b3:a4:31:aa:60:e4:c0:ce:1e:
b1:ae:df:15:99:e5:0a:e1:38:f9:2e:5f:37:6b:00:37:b9:98:
30:3f:8e:b7:99:94:3b:c8:0b:75:12:83:67:a9:3b:7c:5e:8e:
68:2d:a0:29:6b:2e:65:b1:ff:ef:68:b6:02:ba:2d:72:21:8c:
77:a3:8f:65:76:15:8d:05:a4:a1:44:f6:4f:20:cc:a6:dd:e7:
99:92:61:b8:4f:53:26:f8:4e:ab:03:b7:5c:c2:7c:50:54:fd:
40:e3:f9:38:43:32:4b:f0:0a:a3:9a:c5:df:d6:8b:c4:c9:89:
1e:bf:43:6a:e6:49:d4:78:e6:4d:b7:44:9a:42:e9:cd:20:da:
58:5e:9c:83:60:f0:ba:f1:cf:0a:12:19:99:2c:bc:6d:46:4a:
26:3f:ff:0d:c9:9d:5e:42:5b:32:c5:cc:20:cd:3a:5b:de:38:
03:c4:5b:ba:c8:29:6f:f3:02:67:06:b8:e9:85:37:87:e3:99:
91:94:56:fe:0f:e7:64:a3:88:07:0d:14:b5:7a:be:eb:d0:99:
23:05:80:73:3c:4e:c4:bf:f1:05:0e:c7:4e:5a:4b:26:b9:46:
3b:f0:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:00 2026 by rpki-client