Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier: SNLIJb8LTK8WmLzdpuW5mAVUh+u5dvLymRxYutl7zRo=
Subject key identifier: 28:9F:E6:BA:2D:F2:6C:97:AD:72:99:B5:A0:A7:0A:B8:2A:69:59:96
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial: 019D386569E843C43FA2B580177B8C006DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number: 0C57
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: 2erqTY76pazbAYXOu3ZTYemn+A6hhodg4Fl3Yo1yh4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:69:e8:43:c4:3f:a2:b5:80:17:7b:8c:00:6d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983ea291971990dc486f93812783fadd87ade863
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=289fe6ba2df26c97ad7299b5a0a70ab82a695996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:81:d4:bc:d7:3c:d7:12:94:ef:24:b1:63:
60:3f:c6:d0:68:e9:c3:e8:84:ef:95:ab:83:8c:95:
d1:82:81:62:17:a1:8f:65:da:56:8d:a5:b4:00:31:
3b:2d:34:43:25:71:08:be:f1:60:45:62:15:1b:c7:
f8:45:b9:8a:28:85:cb:27:4c:79:c0:72:8a:6a:dd:
47:45:b3:a3:d3:a3:42:d8:e9:f2:b9:17:d3:f2:d5:
ff:2f:88:1b:2b:a1:7e:3e:d9:35:96:1a:9a:9b:29:
8c:58:22:9d:06:f9:c5:80:6c:b3:d2:4c:d0:5e:fe:
9f:c0:b2:aa:46:af:ae:be:d4:ed:67:47:e9:33:fd:
79:77:45:94:25:23:d1:4e:42:2d:d4:37:b3:6b:3b:
f3:16:22:ad:7f:4e:f8:6d:8d:8b:5c:24:8d:38:da:
55:4d:3a:63:0d:47:18:0c:94:e1:f4:ab:12:31:25:
9a:fd:a5:dd:a5:b8:24:3d:7b:7d:06:2c:b4:27:2f:
26:99:fb:e6:47:b3:92:9e:68:42:9f:4e:c0:29:d3:
0d:e0:ae:10:98:95:47:5f:5d:2b:49:2f:c1:a3:20:
97:5d:55:a2:6f:e6:1e:b6:04:96:6c:4d:ca:05:cf:
6c:df:fd:d9:7e:c3:2f:bb:d6:df:7c:3f:a4:c1:7b:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9F:E6:BA:2D:F2:6C:97:AD:72:99:B5:A0:A7:0A:B8:2A:69:59:96
X509v3 Authority Key Identifier:
keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:79:9b:28:26:7b:f8:20:61:e4:9b:ef:23:f7:38:0e:cc:65:
0a:34:a0:ea:3e:9b:c8:09:2c:0d:96:90:34:52:6a:74:b9:7b:
48:dc:89:8f:99:a5:31:9d:bc:42:aa:db:f7:e8:7b:a9:28:17:
4d:4c:29:31:7e:a8:84:bc:5f:30:fc:c2:23:24:27:7f:14:1b:
83:86:22:2f:1f:f2:9c:16:cf:85:6b:a9:2e:f7:5a:be:a3:c2:
06:be:45:43:1f:70:85:3a:ea:5d:24:08:bc:34:78:7a:a5:8c:
f3:25:27:4f:20:6a:ec:71:08:1a:6d:21:cb:af:4c:f6:1c:a1:
73:91:8f:70:a9:46:67:d5:1f:17:e5:8d:22:86:f1:ec:5d:c5:
8c:6d:7b:60:77:e2:b2:00:fb:d0:f2:35:37:48:6b:10:1c:40:
6e:69:35:fb:2a:59:5c:ff:9b:3e:41:13:a8:54:19:57:01:c1:
c4:c4:5d:67:bf:df:e4:52:25:bd:a6:29:50:c5:df:22:ec:9c:
7e:f4:f5:43:8e:66:4c:47:9e:57:b0:ef:d0:43:27:7e:76:37:
9c:2f:17:8f:7e:5d:96:fa:8b:85:29:51:d3:10:78:ff:c9:e9:
de:3f:66:21:a0:18:bb:bc:d7:c2:5b:fd:9e:7a:5c:5e:e4:de:
b4:12:3c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:50 2026 by rpki-client