Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier: P7pihvTtKepa315pPOqjo4ihv3xn0MSzqmrvLzdkV4Q=
Subject key identifier: 07:C0:74:74:31:0C:D4:3A:11:6D:49:59:D9:EF:E0:8E:9D:46:E7:80
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial: 019D38655F8CB892E2BFFAEF7E7B069B1ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number: 15C7
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: 3VGLMD3XefGa8A2lImIgRivAwDszmvO2ihsZKqPFr6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5f:8c:b8:92:e2:bf:fa:ef:7e:7b:06:9b:1e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=07c07474310cd43a116d4959d9efe08e9d46e780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:75:a3:14:7e:55:88:ab:a9:66:0c:04:9c:
a2:b3:ee:91:ec:61:5e:2c:0d:d2:b2:6d:a0:d0:90:
f6:1d:7f:ba:5d:34:76:d4:9c:9e:20:d6:c3:c3:7a:
5e:e6:c8:06:3e:21:19:52:80:ad:01:3c:a8:3e:5a:
91:06:97:45:b9:b3:6a:5f:f5:44:8e:44:c1:fd:04:
75:fd:9c:68:6b:0d:3f:59:54:1c:52:d2:7d:ff:41:
cb:e1:77:9e:03:ec:d8:b8:4c:04:a4:f9:40:fd:0f:
17:8e:39:23:34:95:96:7d:96:36:34:4b:60:a4:10:
ef:36:80:d9:d8:23:4b:9c:5b:e4:ab:3d:e3:78:b8:
79:a0:dc:96:1b:07:b2:88:b3:01:e4:b4:98:d0:2e:
d5:1a:7c:c8:fe:ac:7f:03:11:e7:ce:9b:3c:00:d0:
1e:01:84:0d:88:3f:e3:de:b1:42:1a:35:ee:5d:6a:
1c:bb:90:44:de:e7:b2:0b:d4:d6:55:60:83:38:92:
3a:8b:9a:bd:db:3c:c4:13:08:19:e9:16:1f:c5:16:
41:f3:a2:cf:45:70:f9:03:36:8c:10:28:a5:b2:3c:
bc:b1:af:60:ec:20:56:ac:4c:ba:25:bd:c3:01:e4:
9b:84:79:1c:ed:04:d1:b2:1b:a7:0d:d1:de:a6:b7:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C0:74:74:31:0C:D4:3A:11:6D:49:59:D9:EF:E0:8E:9D:46:E7:80
X509v3 Authority Key Identifier:
keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fb:8c:f1:bd:2b:07:fb:c5:11:e6:b6:f4:1b:39:29:bf:42:
60:a3:b1:fe:a2:24:b2:ca:ba:1f:44:82:0c:ac:8a:a8:92:3d:
48:d9:1b:1e:0c:94:11:48:43:ce:17:d1:28:6f:02:fb:2a:bd:
28:8d:18:0e:a4:7a:e1:45:e0:12:32:9a:6e:e0:1e:10:d0:c9:
58:b9:9b:08:1f:96:63:ed:93:d5:29:b4:ac:4b:88:f0:b2:6c:
b9:56:a7:7e:ef:be:cd:a6:ab:10:15:e8:01:2c:d0:e7:62:63:
37:f2:98:e3:82:29:da:f4:5d:7d:31:5d:0d:08:6f:bd:ba:ba:
49:7c:91:e4:7c:33:25:cc:7f:23:9b:08:60:c6:3f:8e:b3:7a:
bd:72:48:73:f1:a9:7f:df:83:95:c0:e9:41:8e:5f:ba:d2:b1:
c1:2a:a8:34:9d:78:bf:e2:3a:0a:59:4d:51:d4:4a:43:08:89:
1f:22:92:3d:14:59:5f:91:11:d3:20:d2:d7:ea:c2:ed:c5:7d:
9d:f2:16:ef:32:93:55:83:3a:44:a0:76:05:0a:60:da:4a:e0:
cc:72:87:17:ee:35:0e:8b:50:94:f7:7a:12:43:5f:68:f7:ea:
04:a6:e6:08:3b:70:75:7b:6b:2f:8a:e7:70:6f:95:f5:f3:2f:
b5:e6:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:41 2026 by rpki-client