Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
File: CteC3XOwPU5NdCHikNY6rfdcFyg.mft (raw, json)
Hash identifier: MGVSSgdLIEPDOH5VmAg4w5as8kqehT6Za3s9wnk9V4I=
Subject key identifier: 6D:4E:EC:16:7D:35:26:06:F9:66:11:DD:B9:ED:B7:A9:F9:E3:6E:55
Authority key identifier: 0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
Certificate issuer: /CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Certificate serial: 019D371BF0CAEE12A0F2EC31536D62E0E262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
Manifest number: 0203
Signing time: Sun 29 Mar 2026 01:01:11 +0000
Manifest this update: Sun 29 Mar 2026 01:01:11 +0000
Manifest next update: Mon 30 Mar 2026 01:01:11 +0000
Files and hashes: 1: CteC3XOwPU5NdCHikNY6rfdcFyg.crl (hash: Wi9l3oN9IMoSqt9Dol5380CRKPmfDtWR+W9zEp8CTZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f0:ca:ee:12:a0:f2:ec:31:53:6d:62:e0:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Validity
Not Before: Mar 29 01:01:11 2026 GMT
Not After : Mar 30 01:01:11 2026 GMT
Subject: CN=6d4eec167d352606f96611ddb9edb7a9f9e36e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:f7:e8:0c:70:18:38:b6:8c:62:40:59:f0:
d6:07:63:3c:58:dc:a4:54:f1:54:8e:dd:a7:49:e2:
d8:40:39:4e:f3:2d:fe:4c:b4:be:77:23:6a:db:38:
b6:85:c1:62:71:1f:c8:48:56:b3:43:bf:3a:07:ce:
7f:cd:fa:78:0c:e7:38:47:98:36:28:dc:b0:7a:88:
40:d3:51:38:f5:76:a8:64:8e:c3:5c:32:79:ce:94:
b9:2b:4d:4e:48:81:a1:ff:fc:40:7d:8b:ba:57:e3:
a5:3b:42:55:26:ed:a9:14:c2:b0:44:95:26:a1:5a:
bd:52:3d:37:5b:c9:34:44:cd:09:8e:36:5f:48:21:
5a:3c:39:4d:66:6e:26:4a:56:0e:b8:4c:38:7a:01:
64:7d:db:72:40:82:e4:0a:7c:d8:43:f8:dd:d1:6b:
2c:74:aa:48:0c:f8:f3:e1:5b:0b:76:28:dc:54:61:
38:dc:c8:a4:8e:10:1f:84:26:7c:03:13:2e:96:01:
8c:51:91:a9:53:fa:3a:98:50:25:66:36:85:3b:11:
86:ef:87:54:4f:3d:5e:08:07:32:f2:d9:a4:5d:16:
80:1f:5c:79:72:b1:6f:5d:f4:f6:a7:a1:28:90:b7:
3a:ba:cc:77:4b:1a:a2:9e:58:fc:b5:64:62:d4:2c:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:EC:16:7D:35:26:06:F9:66:11:DD:B9:ED:B7:A9:F9:E3:6E:55
X509v3 Authority Key Identifier:
keyid:0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:00:90:aa:bc:bf:cc:80:fb:2d:f7:e4:49:51:a9:4a:fb:ae:
61:a8:64:c1:24:bf:bd:51:77:b5:f1:6e:89:70:a8:5f:40:67:
5a:5c:85:a1:60:78:b2:66:0d:f8:32:11:b4:ad:2e:d9:a7:14:
ab:94:8d:0a:a6:62:96:0c:e8:fd:d4:7f:31:c2:a2:74:a2:7e:
82:6a:39:e4:b5:65:bc:58:ed:9c:a3:2c:4e:8f:84:5c:3a:c5:
96:5b:f3:a7:46:b2:70:68:69:cb:e6:23:6d:3d:01:07:dd:5a:
00:a8:d0:06:c6:1e:46:60:7e:21:b4:c0:4a:70:9f:a9:7c:be:
5c:02:7e:ce:84:f0:34:d1:74:39:cb:8c:33:62:29:3e:12:ef:
08:bc:40:8b:4a:2a:66:09:21:e6:c7:12:c9:ba:a1:89:5f:c8:
f6:16:23:83:42:32:67:56:86:35:5b:98:42:84:fc:80:5f:02:
2c:53:67:c8:a4:9b:3e:49:03:8c:91:95:7b:f2:6b:f9:b9:55:
53:8f:4f:02:88:93:06:55:23:b3:00:36:96:5f:43:f1:c5:4d:
f7:c5:e7:61:85:d8:51:08:6c:6f:ea:ea:6d:6f:7e:a5:ac:cb:
95:f3:0e:56:86:83:7a:f5:99:9c:7c:92:4b:53:70:b4:e1:84:
33:4c:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:52 2026 by rpki-client