Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/38ee36-63b8-424c-8c03-284477eb6207/1/cADGE1ebdZkkbiZcWYDH7JoXxXY.mft
File: cADGE1ebdZkkbiZcWYDH7JoXxXY.mft (raw, json)
Hash identifier: 6830aJ/g7LGoHKpFWAqn1+unxNgF5T4trlq6KldDeOo=
Subject key identifier: 8C:4D:A6:6F:94:5D:7F:06:63:E2:22:B9:7D:7B:BB:ED:66:DF:FA:4D
Authority key identifier: 70:00:C6:13:57:9B:75:99:24:6E:26:5C:59:80:C7:EC:9A:17:C5:76
Certificate issuer: /CN=7000c613579b7599246e265c5980c7ec9a17c576
Certificate serial: 019D389BA575547479E353737F045BB85F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cADGE1ebdZkkbiZcWYDH7JoXxXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/38ee36-63b8-424c-8c03-284477eb6207/1/cADGE1ebdZkkbiZcWYDH7JoXxXY.mft
Manifest number: 06
Signing time: Sun 29 Mar 2026 08:00:17 +0000
Manifest this update: Sun 29 Mar 2026 08:00:17 +0000
Manifest next update: Mon 30 Mar 2026 08:00:17 +0000
Files and hashes: 1: cADGE1ebdZkkbiZcWYDH7JoXxXY.crl (hash: vwcYWp7cx9rDyHYEdxbf7RN4ECKoae+HYK3vYelz+Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/38ee36-63b8-424c-8c03-284477eb6207/1/cADGE1ebdZkkbiZcWYDH7JoXxXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/38ee36-63b8-424c-8c03-284477eb6207/1/cADGE1ebdZkkbiZcWYDH7JoXxXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cADGE1ebdZkkbiZcWYDH7JoXxXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a5:75:54:74:79:e3:53:73:7f:04:5b:b8:5f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7000c613579b7599246e265c5980c7ec9a17c576
Validity
Not Before: Mar 29 08:00:17 2026 GMT
Not After : Mar 30 08:00:17 2026 GMT
Subject: CN=8c4da66f945d7f0663e222b97d7bbbed66dffa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:c2:ba:2f:b6:9d:90:d5:9e:e2:ae:01:8e:
70:18:79:2d:76:5d:1a:6b:2f:6a:7d:bf:5d:5e:f4:
6c:bd:e0:3e:e5:37:53:58:59:28:c9:87:9b:0b:f1:
94:98:02:f8:9d:a4:08:49:a6:58:05:ba:47:1b:24:
a7:ab:54:5f:5a:50:ff:cf:85:ab:71:b3:4f:7c:69:
78:4c:e3:b3:c3:55:5c:53:c2:04:41:fb:00:47:43:
f9:02:0f:28:83:11:52:d2:43:c5:35:7e:3c:76:57:
93:d2:8a:22:03:57:48:22:a9:38:58:9d:f2:7e:01:
f6:87:55:61:ae:f1:fe:d3:6d:9b:50:d8:9a:9b:62:
a3:62:0e:d7:2b:2a:78:2c:68:da:a6:8d:d3:5c:22:
ef:ea:23:06:c7:c9:f4:93:8c:b9:f1:3d:a0:f1:b8:
8f:01:16:bf:44:6e:c1:0a:62:8d:d8:51:2f:f2:89:
4c:b1:df:6b:19:b4:b8:38:fe:10:ba:3b:21:1d:2b:
49:c4:1c:91:59:1d:0f:d6:28:eb:e5:b6:f0:5a:fb:
6b:5b:c6:a6:64:69:67:5d:5e:cb:bb:bd:1c:b5:2a:
c5:cc:2a:87:fb:bc:da:24:8a:e7:6b:73:ad:ca:c5:
b2:eb:ca:b0:73:a5:f8:a9:a1:c5:ef:c1:e8:33:e8:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4D:A6:6F:94:5D:7F:06:63:E2:22:B9:7D:7B:BB:ED:66:DF:FA:4D
X509v3 Authority Key Identifier:
keyid:70:00:C6:13:57:9B:75:99:24:6E:26:5C:59:80:C7:EC:9A:17:C5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cADGE1ebdZkkbiZcWYDH7JoXxXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/38ee36-63b8-424c-8c03-284477eb6207/1/cADGE1ebdZkkbiZcWYDH7JoXxXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/38ee36-63b8-424c-8c03-284477eb6207/1/cADGE1ebdZkkbiZcWYDH7JoXxXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f7:78:a1:a9:f7:b0:f4:41:a8:25:37:f8:b4:9e:77:e8:8d:
e4:1b:8b:fe:1d:49:da:7d:25:e4:24:8d:78:b4:c3:27:bf:86:
da:33:f6:a5:e0:dd:8a:65:99:bb:a1:17:7f:a9:b4:e4:c6:7b:
3d:2c:b4:4d:a8:66:34:b7:12:63:6b:de:38:40:94:0a:bc:9d:
28:a5:07:52:92:4d:70:fd:75:67:d6:d4:4e:24:2a:cb:5a:4d:
b3:0c:33:ab:ca:10:51:7a:2b:6d:39:32:79:43:35:9e:16:07:
f1:c1:26:b0:61:02:70:b4:15:32:d3:55:2c:05:ac:dc:2b:23:
4d:eb:10:04:05:43:cb:2d:18:4f:aa:ef:5e:16:eb:94:4d:67:
39:df:f1:93:01:91:d1:db:76:64:0c:bc:8b:aa:b7:0e:26:1d:
d9:be:13:2f:78:f9:82:2f:fc:1b:df:29:57:ad:ec:76:17:c8:
0d:33:8e:69:e1:ca:eb:de:db:c6:a0:28:44:b3:88:cc:1e:20:
f2:62:82:6b:24:1e:1b:79:0d:76:34:d2:8a:78:3a:48:f7:49:
d7:b7:22:73:da:c8:93:93:3b:3d:b9:0c:ef:57:d1:0e:00:b9:
e3:68:ff:c5:9d:39:48:c2:8c:16:a0:18:d1:d4:3d:22:71:98:
32:6c:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:20 2026 by rpki-client