Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier: rHsEGXBwcpDTnByK4+Ge1qfDsNsuXH86voYEnNZhFbA=
Subject key identifier: 35:E5:B1:E4:E5:1A:92:73:16:11:B5:60:36:46:08:AB:87:9B:08:39
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial: 019D3866963897FA0DF44B5A583C3D080A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number: 1256
Signing time: Sun 29 Mar 2026 07:02:20 +0000
Manifest this update: Sun 29 Mar 2026 07:02:20 +0000
Manifest next update: Mon 30 Mar 2026 07:02:20 +0000
Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: 7UI1f3umjltiXRj7agVDMNwWqPN19yS/TEnzkTLMcMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:96:38:97:fa:0d:f4:4b:5a:58:3c:3d:08:0a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Validity
Not Before: Mar 29 07:02:20 2026 GMT
Not After : Mar 30 07:02:20 2026 GMT
Subject: CN=35e5b1e4e51a92731611b560364608ab879b0839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:89:16:8f:23:2a:7a:84:a3:83:3b:29:98:
89:43:51:72:a2:e8:28:99:4d:25:5d:bd:ce:4a:ed:
a0:d2:54:8f:33:43:1a:dc:e4:8e:5e:23:44:90:41:
c0:db:88:a7:ba:8d:79:91:4f:e6:b6:d6:3c:d9:45:
0c:a2:29:89:e4:67:e0:58:2f:7a:4a:5c:99:4e:4a:
1e:ff:28:cb:fb:a3:d4:6f:0f:95:9f:d4:c1:aa:69:
be:c8:1e:41:11:ad:0e:d6:71:b6:a4:1f:65:a6:de:
3a:54:01:32:c3:e2:3a:a5:ae:e6:31:6a:20:52:e3:
04:ea:96:ae:62:8a:cc:9a:ae:f1:3a:f9:59:78:91:
84:8b:ce:15:47:ab:94:e9:5c:50:d8:fa:9e:cc:11:
1e:75:45:5b:be:3d:4f:9b:54:2f:31:ee:a6:5a:23:
5a:97:60:d5:f6:ad:0f:fa:db:43:b8:8c:72:01:6d:
b8:d5:a3:72:48:03:ec:27:bf:a3:b3:b4:da:c0:db:
cb:e6:71:10:05:21:b4:55:9c:f4:c0:62:bc:9f:3e:
fd:2e:72:30:0f:65:f7:5c:c0:18:eb:0e:87:c9:17:
21:9c:38:2e:0a:a0:fb:a2:8c:82:a9:2b:79:31:d1:
56:8b:8f:fc:4b:43:21:2d:fb:67:98:6b:0f:cd:de:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:B1:E4:E5:1A:92:73:16:11:B5:60:36:46:08:AB:87:9B:08:39
X509v3 Authority Key Identifier:
keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2f:e6:e5:34:8f:40:3f:ce:6a:1f:ed:ab:ae:42:27:3b:26:
df:43:26:a4:66:9a:73:aa:75:9c:f0:f6:48:ea:c9:a4:1e:50:
dc:6a:ac:c4:45:34:84:7d:de:50:78:3a:cd:39:ef:26:a2:13:
7b:28:30:40:62:5c:41:dd:3a:38:c7:9c:4b:af:e7:d7:da:b9:
77:14:92:03:83:5c:8e:d5:1e:93:0e:29:b5:cb:d0:54:92:2d:
bd:62:fa:2c:da:48:85:6f:e7:f8:04:fa:06:0f:a8:9b:d8:32:
3b:18:94:c7:32:6b:8b:ad:48:d6:ac:d7:02:c5:7b:4b:e2:97:
b2:e7:2d:76:de:61:97:2e:a7:ad:c0:92:d5:99:12:b9:d8:85:
d9:0d:aa:ee:d5:fe:a0:70:6f:22:9b:93:86:00:98:e2:ef:29:
7a:5e:b5:39:d3:b3:0d:f3:e9:83:77:46:44:06:44:32:d4:5c:
ff:c5:43:ee:27:84:89:de:1c:1a:e8:14:9f:8a:4c:b1:8f:86:
27:f3:0b:45:2a:72:3e:d7:9e:cf:4d:67:0a:c9:b4:68:fd:a9:
18:b6:a6:d2:c0:07:69:45:30:28:fb:42:61:a7:5c:db:0f:38:
1b:ee:cb:3d:e9:04:d8:d9:e9:b9:a3:49:7e:0d:f2:e0:a3:28:
c8:52:37:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:15 2026 by rpki-client