Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
File: C27I7Y_JP3IzT3qXSka8J9EQKSM.mft (raw, json)
Hash identifier: Y4EBrlBRjs8SkPkSFcXcmGYMdAGvTUcd5egLvHeyfiE=
Subject key identifier: D7:96:EF:F5:A6:B7:35:48:D0:65:8C:9F:10:0F:D1:32:A3:D1:30:C5
Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
Certificate issuer: /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Certificate serial: 019D389C54572CB77B49AECA98844EE508C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
Manifest number: 012C
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: C27I7Y_JP3IzT3qXSka8J9EQKSM.crl (hash: oB1dlQGKNlwpHOLm7ft1JcMl7UvkUOMHdAmF4m7zG38=)
2: DKgUlR5pbKENT44IWjYvShteIMA.asa (hash: cjw0dcwU+VRciQW/zDHQdmfkPqgl6w46zUMqg73c0pw=)
3: b84BPERKuOU7XfEOPsJAZAHPSDU.roa (hash: O1yboufDOcbfnri6uWC9z7NwLPBbQ/YoUC4nJjBq2XA=)
4: wE8ISYtrI1jkz3hkFW01WhiNM5Y.asa (hash: iAmHSKDocjQmKtaNN1bnl1pex9KoDtpWCgQVRogFg3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:54:57:2c:b7:7b:49:ae:ca:98:84:4e:e5:08:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=d796eff5a6b73548d0658c9f100fd132a3d130c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:b5:9a:e9:58:31:5c:57:41:61:19:18:bd:
60:e4:7a:e8:aa:87:36:f4:37:d0:33:8f:ac:33:4c:
75:ea:d4:cd:1d:2c:ad:69:d0:57:92:f3:2d:8d:80:
92:48:f2:af:ad:c0:9e:a1:d5:4a:76:9d:8e:83:7e:
df:1c:d0:01:a0:bb:c4:e2:a9:a0:e2:96:fe:1d:68:
b3:c7:1c:dc:f4:9e:cf:37:e0:c6:9e:fc:df:82:97:
9d:e3:50:3b:02:ff:0a:87:24:6e:ec:bd:16:92:dc:
b6:1b:d4:26:a5:6f:2a:a6:3e:2d:cd:8f:0e:8e:bf:
d5:6f:01:98:fd:67:2a:e6:44:12:b6:9f:be:cc:90:
b1:5f:aa:19:3b:82:3c:7d:56:0e:a0:da:a8:c5:20:
a3:ce:e9:70:1c:0b:55:a2:16:a5:dd:9c:1f:0e:f7:
17:0b:9f:a4:8e:da:28:ab:00:ed:6b:e0:c7:70:2e:
51:b9:31:44:8b:ef:a7:4a:43:ec:b5:8a:d5:22:9e:
e8:61:47:96:ee:51:94:9a:51:49:0a:8f:db:4f:33:
78:e0:1d:59:07:83:28:02:4d:76:f2:29:59:d3:d4:
46:bb:9f:76:97:e0:f1:c7:24:fa:54:0a:4c:52:ea:
9d:81:5c:b8:05:93:89:dc:52:be:04:30:4a:df:7e:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:EF:F5:A6:B7:35:48:D0:65:8C:9F:10:0F:D1:32:A3:D1:30:C5
X509v3 Authority Key Identifier:
keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c1:d2:ff:24:70:69:f2:51:73:1d:f9:9a:af:9d:0d:b4:1b:
9f:3d:e7:f1:c2:db:54:ff:c8:1e:a9:2a:db:ad:98:4d:b0:a3:
0e:a5:93:0e:e0:70:7c:74:b2:b6:c9:93:d5:a8:aa:99:8d:20:
20:c7:04:71:96:a8:78:cf:11:64:61:dc:3c:c3:dd:87:25:11:
ba:fb:f3:8d:63:d8:9e:de:18:2c:2f:1b:36:a8:80:15:f9:e4:
e8:d3:e9:73:41:84:c3:22:33:a1:3a:96:e1:07:1b:08:ce:1d:
0e:9c:dd:08:52:f2:89:e3:db:f7:f4:ec:b1:15:db:93:64:a7:
c6:59:76:3e:d7:b5:67:1b:02:a5:7a:c7:aa:06:58:34:2a:10:
32:83:c7:ad:7e:5f:32:c7:6b:51:95:3e:bc:6f:81:a1:7d:c6:
bd:19:92:b0:49:77:06:f5:ef:e5:57:4b:0c:fc:05:1d:e2:6f:
e0:75:fb:4d:42:aa:a3:7e:81:9d:c7:40:47:a8:33:07:af:bc:
62:6a:74:11:fe:fc:71:cf:ca:c1:e6:33:ae:d4:03:8f:a2:98:
6b:60:32:31:ba:d5:87:82:7b:2d:a6:ed:7e:d8:e8:a7:d7:73:
16:34:f0:4a:8e:ed:c2:4a:ad:cb:85:a6:b5:e9:e4:10:9f:5d:
3b:69:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:49 2026 by rpki-client