Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File: enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier: uaC9JR6wECgwaUW3mrVLog2J0tzzOSlH3x8AE/aR+ac=
Subject key identifier: 10:0A:7F:2E:33:50:ED:3F:BA:BB:9D:A3:14:7F:68:6B:65:E6:5E:AD
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer: /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial: 019D38D2F0B15C46BCDD136D99C459BE6D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: K1PiHiZ7t8L3Y56gv2n6jjCjo5dZwjXioLr1Z6i6sEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f0:b1:5c:46:bc:dd:13:6d:99:c4:59:be:6d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=100a7f2e3350ed3fbabb9da3147f686b65e65ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:76:ef:41:87:69:10:18:37:2b:79:a7:a9:
23:13:f9:6e:cf:05:0d:f1:59:35:e3:cf:4d:ff:8c:
0d:60:d8:c3:47:8f:5c:b5:84:b3:7f:5d:ca:33:59:
d8:01:3b:02:df:2d:8a:f8:a4:a0:26:d3:27:69:3e:
94:3c:90:15:28:37:77:c3:c9:aa:8b:2c:a7:e5:2e:
bb:80:6d:8a:53:36:05:20:be:b8:44:11:af:40:b5:
72:43:0b:b4:ab:ae:b5:b3:89:50:27:66:a6:62:5a:
0f:2b:fe:8a:f9:d3:a9:23:6d:c5:e0:65:18:98:61:
26:27:c7:a3:da:02:f0:0d:5b:6b:ff:c5:6a:87:84:
ce:b7:02:73:7b:9b:4e:bf:a1:44:be:d0:c6:04:e6:
b6:ee:b8:2f:b1:7f:c7:cd:9f:74:69:52:aa:8a:43:
52:e4:e1:2d:e3:69:93:39:64:4a:f7:18:f0:b2:ca:
f8:43:14:36:99:89:7a:e0:cb:e0:2d:82:7e:67:2e:
2e:63:1e:40:e0:6f:ca:19:76:30:c4:8c:9e:14:b6:
6c:4a:82:fd:e9:6f:ed:e3:83:9d:33:19:b7:77:c2:
6c:74:dc:95:9d:b8:84:c1:57:30:69:60:2d:9c:39:
1a:00:61:bc:81:b5:f9:93:d8:6a:fc:9d:00:5f:e8:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:7F:2E:33:50:ED:3F:BA:BB:9D:A3:14:7F:68:6B:65:E6:5E:AD
X509v3 Authority Key Identifier:
keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b8:4e:69:a1:e9:e4:ae:50:0a:42:f2:e5:d0:68:f4:20:b8:
6c:7e:16:bd:bf:b1:8e:31:98:77:19:fb:22:21:21:89:c8:d8:
51:1d:10:df:f2:60:d0:88:5f:2d:8b:5c:42:8c:8a:0a:56:38:
39:eb:0f:02:b5:59:3d:50:3f:aa:b3:ce:fa:01:fb:97:e2:f7:
f1:c5:9c:40:ac:0e:1e:13:23:24:5b:0b:33:93:61:d0:0e:f7:
4a:87:8b:3e:64:f1:52:ec:62:27:64:0f:8e:0f:ee:49:9d:fa:
08:be:b6:72:96:34:33:87:13:12:6f:f0:b2:fe:e6:98:81:4c:
b5:7d:f1:f9:3c:20:52:02:03:13:7a:ec:20:e2:68:3c:d6:dc:
a5:af:3c:62:b3:ab:1e:39:6e:d6:66:d8:7a:41:30:f8:04:2b:
61:84:8d:34:33:38:0f:88:42:62:c6:4a:f2:ea:55:98:bf:0f:
d2:1c:1c:65:90:a1:34:f0:a1:b2:05:d1:53:fe:d4:b9:f5:33:
cd:d0:80:4c:f8:3a:e3:87:90:fd:d7:63:d3:da:a1:bc:de:29:
2f:0a:06:a8:53:12:5f:14:e7:f1:8d:e5:59:eb:bd:56:28:cc:
35:61:d8:85:ba:0e:33:0d:7b:e0:ab:da:7e:b4:67:8b:b3:91:
0f:3f:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:06 2026 by rpki-client