
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: ACKx7BanKAFmJ1ST+1UgMzCmV46FxCjgOQIPD9VawIY=
Subject key identifier: E0:39:68:65:81:EF:C9:3F:02:58:A5:3C:D2:79:B3:94:7D:1D:25:EF
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 019D39411CE9DC25B153E5BDC7D994AFC402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: w7Rgb17jSp1J6wiwhv+y6BjsMSGIpDpZ2dsLAgYaTAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1c:e9:dc:25:b1:53:e5:bd:c7:d9:94:af:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=e039686581efc93f0258a53cd279b3947d1d25ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:8c:b0:dd:e9:e1:f0:78:85:3c:e1:4f:f0:
ab:2c:53:9a:67:14:66:b1:28:8a:0c:e1:a2:83:40:
28:be:cf:16:c0:e7:80:34:f7:d1:45:1f:1a:54:39:
ef:4d:80:cd:33:a0:5d:4c:9d:6b:8e:1d:df:2c:7c:
4c:3a:71:84:3e:f7:2d:78:8c:45:96:7b:20:df:3d:
59:ed:ff:29:37:f4:c0:f9:1a:b2:cd:79:ff:17:01:
73:1d:7b:78:27:73:dd:64:39:43:54:98:40:89:9c:
c5:1d:2c:e4:de:a0:08:fe:01:ce:fc:f0:24:a9:47:
a2:e0:5b:ee:52:ce:bc:b8:9c:76:8c:cf:76:a3:c3:
80:1e:c6:8a:9d:29:4e:89:8c:fc:d0:4b:e0:97:56:
fd:b0:9e:ab:c3:88:35:e2:78:09:74:be:41:d9:a5:
82:bf:d2:69:72:46:30:e2:07:36:22:53:4e:a2:ef:
31:66:78:ca:d9:bc:fa:47:e7:05:df:5c:59:a9:bf:
5d:89:ec:a8:96:b6:05:d5:db:ff:5a:24:f6:82:52:
38:72:68:d8:55:b3:00:18:96:0d:e1:51:f2:ea:d9:
ef:9c:92:07:30:9e:fb:00:6b:6a:b7:8c:2b:61:22:
93:ad:c6:9f:6e:60:6b:fe:cb:e8:ad:d6:91:b7:7b:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:39:68:65:81:EF:C9:3F:02:58:A5:3C:D2:79:B3:94:7D:1D:25:EF
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:91:03:0f:d8:3c:b7:89:15:97:f6:21:3a:1c:35:1f:69:51:
16:4a:aa:b0:fe:73:52:e4:f4:8b:67:00:93:a9:8d:2d:b4:a2:
0a:bc:9b:c7:50:b5:7d:ad:39:13:4e:ac:d1:59:59:31:b8:b6:
a4:a9:a4:7a:b4:bb:59:6e:d3:0e:62:35:ae:f2:11:fc:60:d1:
5e:87:83:d4:38:dd:89:9f:da:7d:1a:4d:f0:29:64:d0:91:fc:
cd:d3:17:45:e8:88:28:2a:50:fa:be:c9:6e:3a:21:c2:e8:00:
d4:63:ae:6e:5d:61:23:4d:4c:e3:7b:88:3d:37:34:34:d5:11:
d5:78:b9:0e:b4:f5:7e:b7:02:59:a7:d0:94:ae:07:3e:aa:51:
fb:b2:18:36:dc:d1:bf:83:7f:f2:24:b4:f7:56:26:6d:ae:9b:
29:96:ee:41:48:63:8a:e0:38:8e:d1:21:f1:00:28:a2:fa:35:
d0:ee:6e:92:8e:45:b7:87:6b:a2:20:a4:d6:8b:4b:01:d4:bf:
b1:ea:c8:50:2b:ec:d2:0e:1c:4a:64:c4:ae:b8:07:03:42:e2:
a4:fe:eb:f1:ef:9b:1a:97:e2:94:f9:4d:5c:c0:48:53:84:18:
02:8a:54:d4:c9:65:95:2b:70:52:34:c1:aa:cc:f6:ab:3e:07:
48:27:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:13 2026 by rpki-client