Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: rPdg6AevKXP/1kMD7UICmWJxpjOroVi7CYo9ca6fnjY=
Subject key identifier: 20:3C:40:B5:BB:70:E0:58:57:AA:32:9F:DC:AA:82:83:32:68:A1:F7
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 019D38D3274D3C68CDE35D5B1AE66BDAF2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 06B4
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: RA0oi/qirB9v9RPgtebQBxQAILqxqhKh0G22BNEye6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:27:4d:3c:68:cd:e3:5d:5b:1a:e6:6b:da:f2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=203c40b5bb70e05857aa329fdcaa82833268a1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:2d:da:7f:db:67:06:db:d4:0d:ab:85:a1:
65:c4:a0:25:8f:c0:49:47:df:64:b7:d4:a4:07:69:
b5:99:db:38:4f:22:ed:41:92:45:78:31:df:bd:e4:
12:e5:12:b5:5d:d6:39:d6:c0:7c:49:1e:db:68:d4:
8f:1c:91:ad:c6:f5:b4:28:26:5a:5b:f8:8d:ac:fb:
a2:00:c0:1a:53:dd:57:63:51:ee:22:6d:fa:63:ab:
53:c5:2c:33:cd:ec:ab:18:8a:e4:e1:eb:81:43:31:
69:f8:57:dd:1e:51:b3:75:cc:e2:52:93:d6:6d:2a:
e1:75:f3:7d:9d:8b:ff:ca:63:92:f6:22:8e:3e:e0:
61:c9:f6:a9:6e:57:21:50:88:f3:dc:79:b0:64:4b:
88:9f:b2:b3:d4:60:2a:94:c5:a9:bd:59:b9:e5:e7:
d2:29:cc:70:60:1b:51:0d:83:8c:12:6d:e5:06:ce:
65:0c:a6:8d:57:68:0a:3b:f7:ac:9a:77:65:80:4f:
8d:64:7c:04:74:12:12:97:e7:2e:78:b0:79:d8:e2:
9c:35:3e:24:8c:b1:73:30:18:78:c8:2f:81:d7:7c:
44:98:8f:6f:b4:30:9f:f5:f5:f9:a8:1d:a3:e4:8e:
bf:42:ce:3d:ec:9a:36:69:93:94:69:a8:18:a9:60:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3C:40:B5:BB:70:E0:58:57:AA:32:9F:DC:AA:82:83:32:68:A1:F7
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:08:9c:9c:d3:0b:87:85:b8:65:14:3e:e7:d8:85:c3:91:d1:
3a:97:53:07:d3:b3:10:62:4d:27:87:67:c6:ec:48:cc:63:58:
6b:76:03:01:d4:da:8f:cf:4d:3b:87:d8:e9:90:dc:0b:f5:7d:
4a:c1:c2:4d:b0:63:8a:1f:84:14:12:c5:fd:4e:03:1c:ff:62:
b3:ea:3b:0b:0d:ef:d5:0f:75:46:d5:40:21:b3:9d:df:53:da:
20:a4:e1:c1:59:bc:a9:c1:28:2b:96:5f:50:78:31:21:a6:27:
91:f0:8b:c4:98:2c:c6:5d:1a:7d:55:93:6e:3e:5d:fd:dc:7a:
45:69:6a:e3:2d:0b:55:c0:43:61:a4:93:52:a0:17:32:39:84:
ba:f4:2f:29:b2:a7:48:5f:53:de:94:9f:ae:a9:a2:93:aa:75:
7d:4a:1a:78:3d:c7:fb:47:9b:3d:bf:8f:fb:c2:51:63:6d:62:
0a:de:93:d1:81:9a:c3:97:f6:d8:de:db:84:80:9e:76:3d:52:
ae:ba:ce:74:f3:17:02:06:e3:f2:65:78:a5:ef:2c:e0:05:b0:
9e:1c:d4:de:e5:82:6d:4e:28:b6:d4:e3:eb:e5:fb:b6:41:85:
02:00:7f:27:90:19:d2:42:d7:5f:8f:ac:a8:8b:ea:a7:4a:85:
3b:dd:4f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:19:14 2026 by rpki-client