Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: qy3c9OHMRoHG1UZ2yaFBro0gr0R/nc0+X8KbgExyltE=
Subject key identifier: C1:15:39:8F:0D:D7:13:BC:6C:2A:69:12:DB:32:F4:30:A4:77:9F:72
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019D38662E9A14505C3E724335FFF283025A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0BEB
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: kgfoOSNGVLB/igutN+Q/GlSjKaJAuSJjUr4x23cHlsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2e:9a:14:50:5c:3e:72:43:35:ff:f2:83:02:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=c115398f0dd713bc6c2a6912db32f430a4779f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:d5:21:4a:b5:bd:42:5d:61:bd:85:22:11:
b2:eb:2f:78:7c:4d:2c:42:81:c5:07:c9:0e:24:ec:
42:3e:1b:8b:53:b4:e9:d0:51:cb:ab:07:26:22:5e:
83:72:67:8c:fa:85:6b:23:78:f9:b4:03:06:15:4d:
13:e0:ab:32:67:ea:26:69:d4:a0:9d:a7:49:e7:bd:
d9:8b:28:e4:e6:44:eb:a0:e5:92:f8:65:04:ff:ff:
be:58:25:76:45:88:cf:f8:6b:98:43:1a:33:66:0e:
fc:f8:28:d1:b8:4a:65:3d:4b:65:37:bb:38:9b:ed:
c0:b2:56:d6:ac:22:2f:20:5c:ad:3e:8b:35:a6:33:
36:74:54:27:d4:42:56:da:c8:c4:70:93:be:f3:da:
ad:d9:e4:8a:8b:b8:f2:81:71:c0:50:ae:fd:cb:31:
ad:9a:76:05:42:ac:e9:91:c8:b9:f0:61:6b:15:cc:
e8:cf:e8:5b:f2:14:23:1a:d5:ad:ac:ae:a0:ed:5b:
17:5b:27:77:7e:2c:ee:05:71:c5:b2:8a:ee:3d:c7:
b0:df:6c:d3:ed:93:ef:76:a6:29:c2:48:07:87:cc:
55:c7:1c:bf:ba:f4:ca:81:7c:7a:51:7c:55:5c:23:
4a:0c:10:d7:1e:71:2f:89:5c:19:3c:ae:d6:10:b7:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:15:39:8F:0D:D7:13:BC:6C:2A:69:12:DB:32:F4:30:A4:77:9F:72
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ba:3e:96:cc:9e:de:89:95:5d:0c:83:25:13:a4:50:10:2c:
02:6d:93:e4:7c:f6:79:1c:d0:a2:95:98:03:23:5d:60:65:4d:
12:c3:f0:75:9c:f0:fa:fb:34:49:12:d1:06:07:b9:a0:9b:46:
e4:90:e3:2f:04:53:ea:0f:a1:b3:da:f7:3a:ca:e1:98:cb:8d:
d9:fd:4e:ec:57:f6:8a:75:11:f0:2b:e2:80:9c:ad:01:c8:cb:
29:89:33:ad:1f:13:80:67:9d:e9:f6:d9:c4:69:06:c0:c0:2e:
ff:9b:5f:27:af:8b:ee:f7:06:c1:f0:aa:3a:6f:6e:c6:3e:4a:
3f:39:a1:50:a8:b0:e8:57:9c:9b:2a:2c:00:80:5b:d9:ba:6d:
13:ac:f8:b6:72:4a:41:db:8b:0f:39:09:32:2a:a7:51:95:7b:
9f:c4:21:ef:4e:db:81:dd:fc:b1:61:38:c3:af:1c:cb:ff:8e:
a1:40:06:b3:55:43:24:e2:1f:8d:f1:0d:63:2c:6b:c7:c9:88:
c4:77:35:91:92:1a:39:2c:fc:9a:8c:cd:ad:76:df:f7:89:69:
fa:c3:b2:97:d4:a2:ab:bc:c5:b8:c7:2c:44:ef:2a:5f:bb:0e:
7f:00:95:4a:d0:aa:8f:c2:2d:86:30:c6:79:10:aa:de:68:4e:
b4:ea:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:30 2026 by rpki-client