Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier: NsnxU8kGM93x0HIsFSpM5fRntA9U/NRPUDga/aBz+qM=
Subject key identifier: 7C:77:30:3F:E9:E8:70:61:BF:FA:73:97:5B:52:D6:97:11:65:F1:DD
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial: 019D386662E2C5731220FACFD07591445DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: sgip7kFOMpU51wELGMloPhPPPtmakIiY/DGTrFwaPB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:62:e2:c5:73:12:20:fa:cf:d0:75:91:44:5d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=7c77303fe9e87061bffa73975b52d6971165f1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:2a:03:7c:b5:1f:1d:60:07:19:e1:bc:1e:
ea:36:d1:94:d6:18:7d:f4:28:df:66:66:d8:7c:40:
5f:6a:c1:be:67:61:59:d3:13:6f:96:eb:aa:c8:f9:
79:b7:6c:93:71:9e:72:b5:a5:6a:16:38:90:4f:a9:
74:db:6a:30:52:38:1b:61:5f:ae:a9:d7:35:f5:70:
eb:26:b0:38:91:62:4a:8f:2e:f4:f3:c9:a5:ab:3b:
82:c6:93:62:aa:75:0a:39:da:05:d9:01:ee:f7:2a:
30:27:51:48:6a:9b:77:c6:77:ba:48:0f:79:dc:27:
54:48:f6:3e:b7:66:36:e7:bc:0d:88:56:a1:8e:6c:
2f:57:be:51:55:bf:3c:e1:1f:25:52:c1:12:0b:65:
30:9b:4b:60:6b:83:dc:ac:31:ea:13:09:69:c5:f7:
26:38:7b:60:b8:ea:0f:15:b8:7d:c9:18:e7:58:ff:
e8:93:88:3c:90:2d:ff:bc:b6:69:0d:e4:fb:3b:13:
f5:77:ad:ea:7c:55:94:94:bf:7a:26:40:b3:8c:e7:
57:61:29:1d:dc:59:cd:e0:42:dd:49:68:31:59:d9:
07:fa:fe:ea:e0:d0:4b:5b:5e:bb:8b:59:71:e6:0a:
ef:69:72:b7:e7:cf:08:f7:a1:c7:9a:92:ed:65:7f:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:77:30:3F:E9:E8:70:61:BF:FA:73:97:5B:52:D6:97:11:65:F1:DD
X509v3 Authority Key Identifier:
keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0a:db:91:6b:e5:b0:c5:a8:be:48:53:f6:eb:97:90:97:33:
bd:bf:f3:68:e3:d1:d6:50:29:27:90:be:0e:76:eb:38:1e:42:
30:45:e9:85:cc:78:d0:81:12:b9:60:d5:40:4c:fb:62:1f:cd:
31:de:6c:ad:95:c7:a7:44:e1:31:15:92:87:a5:79:6d:25:a7:
b7:4f:9c:0c:24:f6:05:b0:ac:f8:69:0d:f8:80:01:1f:63:08:
09:8b:18:37:49:58:df:b4:46:a2:aa:81:cf:43:0b:d3:c4:bd:
30:05:34:e7:11:0a:7a:e7:66:7a:01:df:a5:e6:fd:cb:1f:07:
91:77:50:47:cf:82:b4:8f:90:94:f6:e2:04:6d:99:2e:70:a2:
e1:78:02:c1:08:da:2b:5a:b3:be:9a:f3:f0:d8:1c:d2:60:27:
f0:59:ce:e6:f7:3a:40:73:29:6c:80:95:ba:e3:e1:3f:3f:b4:
a3:18:53:01:76:7d:eb:41:b0:fb:06:a7:e1:14:2f:4a:44:86:
ac:96:da:98:9a:27:54:30:bc:42:e3:dc:1a:15:7e:f1:05:eb:
d3:38:33:90:1e:1e:04:58:5d:06:41:1b:c5:41:3d:23:bb:8b:
ef:71:63:fb:95:14:5a:d1:d5:c5:cd:3b:ea:aa:a3:49:2f:f6:
af:c6:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:38 2026 by rpki-client