Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
File: eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft (raw, json)
Hash identifier: dB6mH4LhGd41mTPja57sD6V1K9+mHlX+m6M7fKVPYb4=
Subject key identifier: 18:B6:D5:DB:6D:A2:97:1E:81:89:4A:CE:AA:0F:1F:7B:36:24:96:79
Authority key identifier: 79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
Certificate issuer: /CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Certificate serial: 019D38D3338EFD3FBD33200A99345AFF2944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
Manifest number: 0278
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl (hash: gxW9QeAOsyaPYxbhXLNIjSiK1XGTj66+4nhce5Rmngs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:33:8e:fd:3f:bd:33:20:0a:99:34:5a:ff:29:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=18b6d5db6da2971e81894aceaa0f1f7b36249679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:0c:ac:b3:1d:0e:1e:17:6b:b9:0d:20:6f:
7a:b3:72:0a:c1:2e:6d:2e:15:f4:0a:b5:21:aa:8c:
d9:4a:e9:d9:52:1e:27:1a:37:0f:c7:16:21:07:d4:
c9:e8:73:ef:be:f7:10:ec:56:57:3a:fc:14:30:8d:
e9:9b:25:48:b6:8e:99:4b:3a:45:89:70:01:69:6a:
d2:17:53:83:20:68:08:b2:98:70:2c:31:71:9f:b6:
01:50:f9:b2:2b:a4:f6:00:df:92:06:ea:69:8a:86:
a3:ca:da:72:84:c5:50:33:a4:81:c3:67:83:3a:c9:
13:06:a2:46:00:91:a4:79:f3:37:2c:ca:01:f5:ec:
5b:de:1e:01:41:94:1a:e7:3d:64:c6:40:dc:e6:81:
07:c0:0b:e9:4c:02:f9:07:95:7d:d4:1f:e2:a0:1a:
04:fa:f0:f2:3c:01:da:ff:4b:90:50:0e:90:ce:17:
39:7a:2d:ad:c2:16:55:9b:bc:5b:9b:c3:35:8e:b3:
4d:3e:11:42:52:09:b8:63:00:90:c4:b8:63:ee:6c:
e6:7f:04:50:22:bd:f7:8b:e4:24:b4:8a:fa:fd:f9:
26:12:09:0e:8c:2c:fe:97:3c:51:a6:c6:4e:47:e3:
c5:72:25:a3:b6:1f:c8:f1:8d:3f:80:79:82:20:a2:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B6:D5:DB:6D:A2:97:1E:81:89:4A:CE:AA:0F:1F:7B:36:24:96:79
X509v3 Authority Key Identifier:
keyid:79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8c:b2:bd:89:4d:e0:2b:d5:88:05:25:f2:79:8c:e6:d0:65:
7e:22:b8:3e:f7:a1:f7:72:04:29:34:9d:a2:f1:27:57:f0:53:
cb:2e:7b:ce:33:02:40:80:99:c7:eb:20:21:66:ac:56:b2:55:
1f:f0:f8:dd:f8:57:8d:8a:2b:26:b3:73:a3:a4:93:fe:3a:3a:
d6:b6:51:d0:75:c0:00:6a:9c:8b:59:d6:79:c3:61:d3:fe:a4:
40:e8:d4:e8:06:a7:ac:bd:bc:12:ad:55:3f:4f:74:92:7b:c4:
c6:fd:bb:65:2a:0c:2a:3e:9b:e0:17:e2:cf:4c:86:51:eb:5b:
72:ed:59:7f:d3:a9:18:9e:f6:78:5e:43:bc:b5:a6:fd:e3:30:
61:cd:bd:e5:29:de:54:7f:e7:75:89:d4:8a:4f:e4:07:ec:3b:
2d:9e:ff:d0:67:a3:d3:ef:28:07:7a:44:49:b1:ca:97:24:b8:
c3:12:eb:4c:0b:9f:a8:5b:74:20:df:ae:21:1b:20:05:6e:40:
f5:78:8f:4a:90:c9:0c:19:c3:51:8d:1a:aa:88:ea:ae:18:36:
da:aa:2c:f6:82:b5:87:eb:88:6f:c2:82:32:4d:11:16:77:85:
89:f4:6e:43:12:21:fa:e6:c4:d5:55:17:16:49:40:87:42:98:
1e:c8:86:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:33 2026 by rpki-client