Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: GRsNYYVTzijUjssEYCzmZc1VI0OAj09o3L+T/hI39Uo=
Subject key identifier: 50:54:1F:76:E9:66:E6:4C:7A:D3:3C:69:96:7A:0A:31:5A:57:AE:DA
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 019D3866BF1D1CD7112C8857C2ABF2ED4D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:30 +0000
Manifest this update: Sun 29 Mar 2026 07:02:30 +0000
Manifest next update: Mon 30 Mar 2026 07:02:30 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: BoAjnfknkt5alGQulmPnVsjx5MH8kQRHteKVP57j2EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:bf:1d:1c:d7:11:2c:88:57:c2:ab:f2:ed:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Mar 29 07:02:30 2026 GMT
Not After : Mar 30 07:02:30 2026 GMT
Subject: CN=50541f76e966e64c7ad33c69967a0a315a57aeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:84:f0:6d:c6:d1:ac:7e:75:e3:96:3d:12:
14:2f:b9:07:a2:db:71:50:5b:e8:ba:8e:09:a1:9b:
50:9d:69:72:66:db:5a:83:f5:6e:04:14:73:b7:86:
81:e6:8b:a3:80:1b:db:01:e7:01:d6:b3:fb:4d:97:
0e:e7:b6:11:9c:0c:35:4d:79:48:11:e0:86:a3:a8:
26:14:90:21:e3:89:c4:f7:6a:a3:59:70:5a:23:e2:
0f:67:6e:ec:fd:38:80:06:8c:a0:38:c4:6e:60:8a:
df:46:68:bf:98:4b:b8:27:ed:11:8c:57:dc:c1:cd:
06:e8:2c:31:f1:50:6c:a6:e1:0e:6e:39:bb:4e:7f:
f7:05:27:fe:c8:c8:1e:28:ae:e0:9a:d6:d0:e6:ad:
25:f6:26:32:f1:e0:28:3e:24:ec:4b:cf:de:91:f1:
d7:e7:57:38:b6:83:81:2e:97:fe:ab:33:13:93:2d:
8b:ca:2d:cc:fb:d9:bb:8b:33:92:98:03:5e:34:bc:
f9:94:39:04:f0:c0:c2:d7:fa:84:93:38:94:e1:91:
c7:8d:31:6a:2d:49:4a:fc:4b:c8:fa:6e:1d:60:5b:
ac:6e:9b:e7:a8:14:7f:c6:81:ec:44:f2:3c:ee:84:
3d:fd:fc:fd:c0:da:a3:54:86:e3:67:d3:d7:be:3a:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:54:1F:76:E9:66:E6:4C:7A:D3:3C:69:96:7A:0A:31:5A:57:AE:DA
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:79:8c:bd:37:27:72:54:41:b0:47:0c:9e:a9:8e:53:46:ef:
af:84:aa:f7:17:ff:58:bb:08:3e:16:0a:8e:99:a3:2d:5c:0b:
f3:c6:37:eb:5c:bb:b9:0c:00:c8:f1:fb:ac:63:d8:74:d0:8f:
00:1b:56:0f:65:c5:fb:3e:f4:2f:92:f5:7d:17:98:85:21:d5:
b0:b3:c8:dc:03:e2:0a:e7:66:58:4e:88:05:34:93:e6:13:ed:
2e:44:b7:02:2d:fd:26:76:a8:10:6c:81:78:d3:58:88:97:68:
64:5e:16:e1:43:d1:80:15:5d:1c:c1:ab:69:57:06:f4:fc:e3:
ef:2c:46:f6:86:a1:f8:ba:af:b1:5a:d1:22:a0:eb:e5:f4:90:
c0:43:a3:b5:b4:67:a5:b2:6e:31:c6:02:55:e4:2e:a1:5d:8d:
82:0b:8d:c7:c6:0c:05:eb:7d:45:75:ff:8f:21:95:11:f4:dd:
d1:80:99:6c:f2:3a:8b:6b:93:c9:8a:bb:8b:54:93:9c:57:34:
9f:27:f1:71:1a:68:f8:06:7f:d3:b8:0c:78:a1:df:00:27:1d:
a0:80:be:de:f2:2c:16:6e:95:2a:9d:16:d8:12:c0:ce:d1:73:
d9:83:50:59:f6:2d:a1:c7:67:4e:94:4a:ea:47:b5:72:5d:08:
be:22:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:51 2026 by rpki-client