Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: hYomRLtmMiGYfh5hURYVAlHqlMOgLS9VJ2Ua7FH8ilg=
Subject key identifier: 23:DE:3F:8A:96:35:BA:54:69:0A:1C:EC:A1:35:C6:83:F1:DA:EE:FF
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 019D390A297D099C6BE5C698BD3E89B6E014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 0781
Signing time: Sun 29 Mar 2026 10:01:00 +0000
Manifest this update: Sun 29 Mar 2026 10:01:00 +0000
Manifest next update: Mon 30 Mar 2026 10:01:00 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: 0Sm0xBlbMi/uf+H8kC7AkX6quk0RmVHvSlVoxFHWMDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:29:7d:09:9c:6b:e5:c6:98:bd:3e:89:b6:e0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Mar 29 10:01:00 2026 GMT
Not After : Mar 30 10:01:00 2026 GMT
Subject: CN=23de3f8a9635ba54690a1ceca135c683f1daeeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:a3:55:0f:37:87:33:31:e0:8d:b9:8c:71:
ce:3a:6c:e7:16:95:97:cc:36:5d:2f:4b:ab:c6:a9:
f0:96:ca:1f:37:e6:60:57:30:e1:5b:40:12:4e:e5:
84:23:9c:82:49:d8:ec:f8:32:38:72:c7:47:cb:e1:
3d:e0:c4:01:2a:cd:52:8c:dc:87:5a:df:3f:b1:44:
b8:ef:ee:fc:3b:4c:78:88:60:0d:2c:8c:4e:4d:04:
6f:66:9e:b7:d4:b1:96:e9:26:c5:d1:ef:f7:b8:bb:
91:15:be:24:26:f5:56:73:d5:00:e9:fc:33:b5:11:
87:51:b1:dd:c6:89:53:68:95:47:29:a7:f1:3f:2d:
56:f9:9e:4b:7f:4b:82:de:79:3f:e8:eb:21:40:e9:
f9:1a:66:41:5b:34:33:6e:70:9b:44:2e:14:bd:e2:
69:3d:e8:f3:80:e6:7e:76:79:a5:0c:11:28:41:d4:
eb:d8:01:72:29:51:c9:dd:24:dd:26:a4:26:fb:78:
23:d7:49:41:51:a2:07:de:1b:f0:31:81:9c:07:65:
50:e7:c8:5b:cf:5b:58:17:ec:bb:bd:51:fc:5b:a3:
63:30:10:e3:3f:a9:06:57:9b:d0:3b:68:85:94:e2:
77:55:a4:5b:89:14:db:af:81:f5:0e:b3:16:93:3c:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DE:3F:8A:96:35:BA:54:69:0A:1C:EC:A1:35:C6:83:F1:DA:EE:FF
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a8:9c:00:37:a4:ef:9f:f6:68:d9:bf:6b:11:7f:ef:be:50:
77:cf:16:9c:4d:05:75:d8:11:f4:4a:89:54:a6:55:c2:36:c7:
59:67:ce:3e:37:12:a1:e4:2c:00:76:f1:09:d5:ee:8f:b1:99:
a8:83:c5:84:7e:ee:8f:f7:a9:84:3f:d5:02:70:e2:69:25:a1:
d9:da:47:97:b7:81:97:00:d3:c4:bd:7f:a5:a1:97:6c:75:ad:
57:f9:ab:e5:d0:5b:59:ab:f8:2d:a8:4c:fa:15:41:83:e8:ef:
71:f7:ed:7a:fc:1e:84:50:34:94:6e:d2:b7:7e:88:3d:9e:65:
f3:46:5f:69:f3:66:23:8e:4b:09:2a:de:57:31:f9:8d:7b:b7:
25:11:1c:55:b4:10:ec:78:cb:6d:47:df:74:7b:73:69:5e:f1:
6b:43:95:fc:0b:7a:64:a8:db:aa:4b:de:61:53:00:e5:33:04:
50:dc:47:67:2c:55:27:09:d8:d8:73:0f:0a:a9:32:ea:48:07:
13:7b:59:3f:2e:c7:a9:eb:0d:2c:15:77:41:02:a5:33:9c:06:
2e:b1:c6:5c:32:ce:6e:16:79:c1:53:24:91:14:c4:bf:5f:60:
db:8a:6b:a8:69:a1:ef:4d:84:45:25:d9:1d:43:fe:b6:9d:29:
ce:00:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:30 2026 by rpki-client