Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: mq3GND1K0umn0gLhe0Gui4WOIvQFxPpP8QE86w9/kvA=
Subject key identifier: 1D:DA:F0:CF:8A:F3:10:87:69:DF:2B:F3:FF:92:EA:D6:20:12:60:34
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 019D3789CFC1D1D078CF54A28C017F8ECC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 06EA
Signing time: Sun 29 Mar 2026 03:01:11 +0000
Manifest this update: Sun 29 Mar 2026 03:01:11 +0000
Manifest next update: Mon 30 Mar 2026 03:01:11 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: RbNwmz326dgOMX+iU6HLMNR8CSsJnurwOutCQV0XlMs=)
2: NTOHIqYNPSkewapNwW2GQ_eQp9Q.roa (hash: JLUP7PxQRVwd14LjjaQL3EnNrNdoYyGJTVHvFQwAfgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:cf:c1:d1:d0:78:cf:54:a2:8c:01:7f:8e:cc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Mar 29 03:01:11 2026 GMT
Not After : Mar 30 03:01:11 2026 GMT
Subject: CN=1ddaf0cf8af3108769df2bf3ff92ead620126034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:60:54:b7:8c:84:2a:c7:2e:97:46:03:9b:
4c:ea:9d:6c:a8:61:94:93:2c:59:a6:4e:c2:8f:b3:
e2:6b:c3:15:83:5d:ad:45:65:01:37:2f:95:40:12:
91:0f:de:8e:f1:9b:87:4b:58:d6:4a:51:1f:d6:4a:
db:2e:87:8c:a8:71:5d:b7:46:fc:4a:db:8c:c2:4e:
40:df:2c:3d:f0:2e:59:b1:9a:f5:44:12:ee:87:6e:
44:ea:d2:b2:f5:46:43:dc:2f:05:d4:ad:bc:66:43:
95:23:b9:ac:fc:20:e7:bd:6b:60:12:5a:4b:ea:53:
71:00:5c:7b:27:9a:4b:f0:fc:e7:ae:13:e2:3b:dd:
13:56:39:d8:90:9e:ba:75:13:f7:3d:0f:9b:d8:02:
69:e6:92:97:7f:09:53:e8:78:21:e4:91:66:98:77:
ee:35:1b:5a:8f:8e:a3:8c:05:30:f3:96:86:15:cd:
6c:7d:98:00:76:17:43:a2:81:f7:39:cd:4f:c3:04:
2a:27:43:76:94:83:b9:df:c4:45:39:9e:e1:c1:58:
19:4a:b7:2f:08:06:7f:3d:34:2e:dc:93:73:12:88:
56:20:55:d0:f1:3d:ea:8c:c4:b6:66:62:3a:76:d1:
cb:25:a4:d4:4d:08:80:7d:87:90:35:af:7b:ce:2e:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DA:F0:CF:8A:F3:10:87:69:DF:2B:F3:FF:92:EA:D6:20:12:60:34
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:99:e3:28:69:94:55:43:56:7c:ca:49:28:f8:5d:4e:15:bf:
1e:52:a6:27:1c:24:41:e6:f3:61:60:40:58:01:15:e1:c5:8b:
bc:5d:ff:64:33:a9:26:7e:d9:ea:5d:29:bb:20:d3:5a:ad:10:
5c:e6:a3:b7:5a:9c:00:08:cf:42:8e:ed:ba:6f:08:ca:fa:62:
92:ef:6f:28:44:08:3d:c0:46:56:79:1d:74:c1:af:ac:5a:d7:
79:e2:a6:12:2f:70:cb:61:4d:e2:b3:3a:3b:77:25:5f:7f:28:
c6:f0:4d:18:7f:e7:9b:ed:74:e1:1b:ba:47:38:a1:1e:6e:05:
09:7b:4b:ac:a5:3d:ed:2d:5c:02:d7:95:a8:83:45:ac:cb:dd:
c5:e3:95:5e:bc:53:a5:97:cf:e2:ce:2b:74:6a:fd:5c:c7:d4:
37:fe:14:af:d0:06:55:8f:2e:9c:50:11:81:1c:2e:07:be:78:
2d:02:24:84:01:e9:65:6f:1a:2a:69:a1:3d:0f:06:27:08:ad:
ed:26:02:94:73:4c:3c:e5:e9:a9:2d:f1:ad:fb:40:5f:c9:65:
a9:a2:46:9e:eb:50:fc:8b:07:40:d4:bd:03:40:68:57:71:de:
31:9f:ed:16:1f:3f:bc:7d:4f:ae:21:a2:d9:69:09:45:94:c6:
88:e2:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:22 2026 by rpki-client