Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
File: cn4hijGD9RKCflrG2eVCXivw7gM.mft (raw, json)
Hash identifier: 3F+/exOpHzO7waP2V1wfuoJn9fXYpcNRyrE8STxaD/A=
Subject key identifier: DB:C4:C1:61:20:CA:51:05:90:A9:0A:D6:36:A9:4B:AF:8D:7B:AD:50
Authority key identifier: 72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
Certificate issuer: /CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Certificate serial: 019D3A53AC23DBED63E68F03228F664A2332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
Manifest number: 034E
Signing time: Sun 29 Mar 2026 16:00:54 +0000
Manifest this update: Sun 29 Mar 2026 16:00:54 +0000
Manifest next update: Mon 30 Mar 2026 16:00:54 +0000
Files and hashes: 1: cn4hijGD9RKCflrG2eVCXivw7gM.crl (hash: xcRY8YS5SMWbSkKFwoK5wjvgh7qavSkWaMqediILskA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:ac:23:db:ed:63:e6:8f:03:22:8f:66:4a:23:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Validity
Not Before: Mar 29 16:00:54 2026 GMT
Not After : Mar 30 16:00:54 2026 GMT
Subject: CN=dbc4c16120ca510590a90ad636a94baf8d7bad50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:16:1c:a3:09:b9:df:88:35:bf:f6:18:ff:
21:19:37:2e:71:28:94:18:83:e4:ba:cc:8b:2c:3a:
ee:72:ac:8b:d9:8c:07:71:d9:15:02:ec:2f:1b:a7:
fe:22:da:2b:30:7f:f4:80:20:81:5c:67:60:24:32:
50:fd:81:3e:f5:35:07:ab:2d:2a:d1:b0:bc:34:d2:
e6:d2:24:4d:e4:02:e3:95:8c:61:2e:b4:ca:81:ce:
56:7c:b3:38:e2:70:b0:a4:45:35:1b:d0:c7:32:56:
4c:bf:9c:56:73:a4:5a:57:48:3b:dc:f7:de:f3:53:
ad:75:c9:9a:80:38:1a:46:98:eb:71:f5:c3:74:c6:
24:fd:d1:24:c2:ef:57:62:d1:8f:23:07:09:9a:a4:
a4:11:41:48:a9:57:5c:85:bb:fa:80:c3:c6:3f:e2:
ca:82:3d:4a:3c:fd:78:0f:64:99:a2:87:dc:5a:e9:
06:44:7d:b1:62:50:ba:e7:31:16:37:39:87:e2:7e:
fa:24:ad:a8:aa:25:ca:44:6b:94:11:dd:27:4d:ed:
3f:35:6c:09:1b:de:ac:83:e7:f1:e4:fd:19:9b:4b:
b0:94:91:c8:a2:60:6b:3c:67:8c:73:6d:f7:23:25:
fc:db:f3:aa:77:5d:5f:a2:96:8e:f5:17:84:86:56:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C4:C1:61:20:CA:51:05:90:A9:0A:D6:36:A9:4B:AF:8D:7B:AD:50
X509v3 Authority Key Identifier:
keyid:72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:9c:b3:bc:88:53:50:60:ea:bb:07:66:24:1a:5d:97:0f:
14:33:d6:ba:14:e8:68:5e:25:eb:8e:61:d4:e3:0f:75:4b:16:
f4:50:ad:95:ac:e0:30:c7:3a:ec:a2:f6:7f:6c:a9:2d:b9:0f:
b9:73:24:35:e2:a8:6c:6b:dd:9e:29:65:b1:f7:09:2c:c9:93:
63:08:7a:1c:56:05:fd:6e:e0:43:12:3b:fa:0a:2d:d7:ac:c3:
03:30:9e:22:6f:7c:4b:a7:c4:fb:36:32:75:2c:c1:7f:01:37:
44:83:99:a4:c4:09:45:13:eb:dd:32:b1:36:21:3c:5d:29:ae:
89:ae:54:d2:44:fd:87:47:55:47:e7:b1:7e:0a:6d:3c:2a:2a:
1a:2b:c5:30:37:fa:87:32:33:aa:52:37:3e:6a:dc:a2:64:b4:
73:66:fb:05:25:b9:f6:d5:62:2d:af:69:35:79:63:f2:72:d1:
3e:8f:0a:9d:b8:a1:e7:ac:e5:70:77:e0:c0:29:95:6c:f2:b8:
17:ff:2d:40:6d:75:69:bb:93:a8:c0:04:17:84:64:18:66:ff:
80:ef:5e:53:d5:02:e3:9b:0b:d6:9c:96:4c:fc:f6:2f:74:1f:
04:8a:eb:3b:a0:f3:a1:6b:c6:29:25:4c:09:e5:89:e1:b8:82:
9f:56:f9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:48 2026 by rpki-client