Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier: AGFSkzlwi4rmbxMD7Ci6/z6G0Ptf8yPLpTGSd+Y77NM=
Subject key identifier: 67:7C:43:7F:25:51:85:8A:D0:AF:A1:4B:12:01:66:98:97:2A:00:73
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial: 019D3865F433D6AA623370890D93CE068B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:38 +0000
Manifest this update: Sun 29 Mar 2026 07:01:38 +0000
Manifest next update: Mon 30 Mar 2026 07:01:38 +0000
Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: WO/zmOoTzCkp1EqMvMXknbYT7KR6ZZsHCi4fFgr2GxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f4:33:d6:aa:62:33:70:89:0d:93:ce:06:8b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
Validity
Not Before: Mar 29 07:01:38 2026 GMT
Not After : Mar 30 07:01:38 2026 GMT
Subject: CN=677c437f2551858ad0afa14b12016698972a0073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:2b:25:c5:46:95:96:30:a0:d9:57:90:c8:
c0:ae:91:12:45:5e:ab:31:27:ab:db:84:dd:32:10:
c0:65:1d:2e:4d:7a:a0:3c:a4:b8:ac:39:f5:a8:99:
16:4b:23:92:3a:9f:e5:7e:e0:52:e4:1f:7c:c5:cf:
1e:ca:92:3f:99:3d:be:aa:d9:ca:88:0a:87:db:9c:
36:9c:a0:ef:6c:34:da:04:a9:b1:7d:2e:77:54:b8:
ff:9b:a5:e5:bf:a0:cf:c9:ef:bb:1b:96:6d:42:57:
44:e9:9d:50:d2:03:0b:cc:c4:c6:06:1b:9c:02:28:
12:28:a0:15:10:d2:b2:ee:fd:72:f1:68:e8:57:9a:
34:d9:4f:6b:c0:3c:3e:09:80:d2:4c:08:e9:4d:fd:
a8:1f:f2:e9:92:47:b5:d4:5f:08:0c:2f:04:55:0f:
6e:2f:cb:6c:c2:ea:70:67:3d:9e:38:78:cd:94:31:
1a:97:b4:34:67:48:24:db:c9:cc:38:70:70:29:25:
c0:c3:ab:9d:a7:ee:c3:92:37:3d:cb:67:db:a4:6e:
c2:00:fa:c1:84:f6:4f:be:5d:27:e8:ce:aa:0c:92:
0d:95:8f:8e:4e:83:5a:e1:0f:cf:e1:a7:18:c2:28:
98:38:57:d3:af:96:82:22:9f:af:1a:7e:fc:05:b6:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7C:43:7F:25:51:85:8A:D0:AF:A1:4B:12:01:66:98:97:2A:00:73
X509v3 Authority Key Identifier:
keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6c:14:76:35:0e:da:a6:36:7d:fc:c2:ca:03:5e:f9:a2:67:
9c:40:7f:f2:c7:67:a5:5a:d9:f1:a6:c8:a5:f1:eb:9b:f2:bb:
15:0e:36:74:81:33:ff:c5:fe:a8:1d:55:06:35:9b:61:53:aa:
6c:02:12:c0:6e:ef:ed:01:e8:5a:69:8e:4c:0c:a4:c1:45:c9:
bb:1c:28:d1:45:b8:8f:d2:e2:2f:f5:13:38:1d:ed:bd:ea:9a:
cf:81:8d:06:1a:0d:c4:33:d6:8f:8d:73:b5:bf:26:63:dd:a6:
b6:4b:c5:47:82:1f:65:17:04:a0:18:ac:2f:36:22:ea:84:c7:
f3:e1:75:27:47:1e:b1:ee:91:27:87:00:6f:46:61:5c:23:da:
a6:5c:f6:19:e3:97:59:ac:c2:da:e2:20:ea:f4:c4:56:1b:b9:
da:3b:8b:95:7f:18:69:5d:19:08:1c:8f:fb:73:b6:b0:6d:7a:
03:a5:0d:e1:df:a0:5a:4d:7c:88:30:59:c9:b5:96:94:11:24:
70:2d:03:37:87:3e:7a:d4:6f:fe:85:ae:96:4d:4f:03:6d:71:
17:82:86:a2:53:65:7b:38:81:13:e7:44:b7:3c:82:b6:73:ae:
27:26:bc:6f:c4:01:e1:17:f1:04:29:ba:6f:a2:3f:76:20:e4:
0a:25:62:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:36 2026 by rpki-client