Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File: RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier: 79SJM5nrJSVUxVc1CIpbLYbAI714MCp5g16H+VR19AM=
Subject key identifier: 63:CB:23:45:F7:DD:F8:08:77:F3:86:91:F6:8C:61:E7:D6:F3:22:31
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer: /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial: 019D39E5AC23DAF1505D791FF65DC0185A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number: 0767
Signing time: Sun 29 Mar 2026 14:00:46 +0000
Manifest this update: Sun 29 Mar 2026 14:00:46 +0000
Manifest next update: Mon 30 Mar 2026 14:00:46 +0000
Files and hashes: 1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: K9gm6i/3v9LU1IuE95cZt7ccnwd4bs4792pmU8y7ea0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ac:23:da:f1:50:5d:79:1f:f6:5d:c0:18:5a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Validity
Not Before: Mar 29 14:00:46 2026 GMT
Not After : Mar 30 14:00:46 2026 GMT
Subject: CN=63cb2345f7ddf80877f38691f68c61e7d6f32231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:33:37:8f:b6:6b:ec:bb:04:72:4d:63:13:
01:ee:46:24:6e:a8:c8:df:6a:b2:7c:df:91:f6:ec:
2e:8a:7b:90:51:e0:6a:9a:cb:59:da:1d:bb:88:e9:
95:de:82:0d:a8:1f:72:30:f1:dd:92:dd:e3:38:81:
70:5a:b2:92:44:c0:68:90:35:eb:b0:af:e9:7b:c4:
c9:e5:47:e2:33:fd:b0:73:26:f3:a7:11:5a:38:4d:
09:5b:d4:3f:cd:1c:16:a6:79:64:7c:f9:4f:56:e2:
da:5d:77:08:77:99:c1:6a:6f:e4:71:c3:77:12:d8:
0c:84:3b:09:84:15:27:a4:d4:8e:88:c3:be:e4:92:
8e:7a:e8:e7:14:ec:d9:e9:00:f9:ad:d3:09:07:08:
da:5c:b9:15:61:c9:bd:c1:cc:d7:b9:1a:0c:49:b0:
14:b0:31:11:13:99:f5:bd:cf:39:a9:69:4f:72:5f:
f7:43:17:78:f6:fa:de:e3:65:a0:e5:29:18:cd:29:
ed:2f:17:2b:6a:aa:9a:30:62:d6:4c:7f:4f:8e:91:
dc:64:9f:a8:3c:d4:ea:9d:08:6b:90:1a:de:1c:a0:
78:25:2b:0e:ea:76:d9:15:6d:47:0a:26:ee:d7:8b:
ac:f9:fe:23:93:6c:12:01:46:2e:b1:32:2c:8d:c4:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CB:23:45:F7:DD:F8:08:77:F3:86:91:F6:8C:61:E7:D6:F3:22:31
X509v3 Authority Key Identifier:
keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:03:84:ce:4a:89:65:7a:75:ba:f5:df:5f:c4:d3:ac:09:
6a:c4:a3:06:0a:3b:61:f8:4e:de:8c:b9:d4:10:dc:89:48:80:
5e:2a:49:c7:d0:f1:9d:e1:19:6e:14:c7:ea:aa:80:ea:16:d4:
67:a5:35:0f:85:24:8f:50:98:0c:d3:da:a3:02:3b:cb:74:96:
8e:f3:76:d5:7e:4f:04:e1:ca:5b:fc:20:96:e5:e3:de:c0:17:
e3:2a:33:35:5b:e0:b6:19:74:e5:a1:e4:11:47:41:ee:3f:3d:
95:9e:79:b8:d9:af:54:ca:ed:a4:37:aa:80:24:4e:67:67:a5:
63:35:63:8c:02:e9:b2:36:91:81:38:13:a7:35:dd:e1:85:4d:
c8:3a:59:27:d4:ab:bf:e7:dc:26:de:c1:d8:0e:c6:23:cb:1f:
a5:b9:28:4b:16:c5:d2:60:04:db:b6:68:5f:c1:b5:af:7a:de:
1d:cc:33:aa:c5:33:6c:75:75:09:cc:f5:eb:99:53:65:e1:7b:
c5:e0:0d:e0:6b:1f:07:71:b3:33:7e:d9:3a:6f:57:47:8b:a5:
ea:e9:81:59:80:4d:5e:4e:e0:06:26:ca:f9:db:b1:7a:c5:d9:
6e:cd:13:1d:e1:07:b1:2e:cb:11:5f:1a:92:eb:4c:e4:6d:38:
73:a7:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:57 2026 by rpki-client