Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
File: cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json)
Hash identifier: iSDp7l+9qeK3dpDL69W0lFqM14Be08225G0dU7QbUTA=
Subject key identifier: 8F:8A:6E:06:D3:B5:B5:74:84:91:5F:59:2B:35:FA:58:86:D0:9E:41
Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
Certificate issuer: /CN=71561ab9c5f392922da7cae180c3307365f02386
Certificate serial: 019D38657E49573162FA805E8BE1559EF015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
Manifest number: 11C0
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: 8Q6YZr5194mS8EQMaojSYkkzoo50ong9rFkz1QGFrDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7e:49:57:31:62:fa:80:5e:8b:e1:55:9e:f0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=8f8a6e06d3b5b57484915f592b35fa5886d09e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:eb:e1:1d:c9:e2:f4:4a:b1:b0:3f:51:be:
90:f9:7d:2d:40:ec:9e:7a:79:a4:bf:b9:c5:67:99:
ac:f7:77:79:8b:51:a0:f5:67:7b:2a:6b:b9:e5:4c:
3e:49:d0:e6:58:ca:4b:9f:58:6a:a4:de:1e:f4:f9:
d1:49:be:4f:9a:83:bc:a7:b9:67:66:bd:34:62:95:
a9:52:86:d4:76:6a:a5:2f:df:01:f9:90:7f:17:9a:
89:40:93:17:fe:5c:59:f1:0b:3a:13:4f:d4:4b:54:
c2:a0:ff:7e:82:2c:b6:98:ca:e0:00:29:04:fa:f9:
2a:a4:78:38:ed:a2:3d:70:d3:3e:de:ee:38:4b:2f:
6f:70:46:a4:38:83:a5:64:96:67:61:8d:89:4d:9f:
b8:b1:e2:76:10:8a:95:b9:bc:8e:28:13:0c:49:54:
eb:86:b7:9f:da:74:43:e7:16:1d:c2:32:a0:e6:bc:
e7:6c:09:b1:58:ce:6a:11:2a:ce:97:b6:78:7f:ff:
2e:93:ea:f4:9f:0e:c3:27:6f:13:55:be:c1:a4:06:
2a:0b:84:ba:76:82:4c:07:d2:60:0e:33:51:17:5c:
bd:a6:6a:2c:ff:c0:c1:74:a6:42:f1:b7:0f:d6:3f:
d2:1a:d8:61:83:65:9e:cc:57:31:aa:68:2a:45:f9:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:6E:06:D3:B5:B5:74:84:91:5F:59:2B:35:FA:58:86:D0:9E:41
X509v3 Authority Key Identifier:
keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1b:d5:23:8d:08:c4:7a:6a:43:c7:48:d5:d1:29:f3:a1:51:
c7:34:1b:e7:7a:5a:5e:ba:f1:20:f8:6f:70:db:4d:5a:a6:23:
5a:ba:41:de:6a:34:a4:07:62:80:a1:6a:2c:d3:96:f2:c2:02:
c8:d5:ab:3b:bb:43:a3:ed:ef:f8:f0:18:33:74:33:bf:de:b2:
24:b5:7b:70:65:82:4c:2f:9e:f5:71:5b:c9:81:a6:e6:7f:a4:
bf:a6:5b:80:20:8c:04:d8:21:e4:8d:48:21:b4:86:0e:a4:ec:
4a:65:65:cb:50:6e:21:b9:76:98:91:0a:87:07:64:84:c6:4e:
f0:2c:86:80:e3:6b:87:dd:a0:f6:9a:3f:d9:9a:0a:5c:f9:15:
d0:98:12:85:5e:9a:16:f2:be:e7:10:b7:62:54:3c:8b:46:1a:
de:36:63:2f:c8:a0:f0:c5:4e:e2:f2:c1:da:de:56:09:84:93:
b0:aa:97:e6:d1:23:27:ba:b2:8c:76:ce:f5:df:e7:24:5f:95:
5e:28:f1:9d:93:22:d0:a0:89:47:c9:23:32:02:f2:b9:55:2f:
22:57:a7:fd:f6:37:1f:93:79:f3:4a:93:7b:fe:15:15:0a:70:
31:61:11:df:c3:7e:41:95:10:fa:f5:1f:30:13:96:e8:dd:0c:
d0:74:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:11 2026 by rpki-client