Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
File: c0YEYfnEnrkXwZEVgLoORDLBJVc.mft (raw, json)
Hash identifier: YvdMUMHmz8O7KLgoSDulGJP6FLcr5WsmweUim9UkRgQ=
Subject key identifier: 62:E6:57:FE:C3:88:7D:B3:0D:71:25:05:78:2A:D8:AE:A2:6E:74:11
Authority key identifier: 73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
Certificate issuer: /CN=73460461f9c49eb917c1911580ba0e4432c12557
Certificate serial: 019D3866228E39C0C5B0B1D743AC3CBC4105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
Manifest number: 092D
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: c0YEYfnEnrkXwZEVgLoORDLBJVc.crl (hash: 5pwJ/6NNfic+dvo1yk6Ui32nIT3e9wZogNwceMiV324=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:22:8e:39:c0:c5:b0:b1:d7:43:ac:3c:bc:41:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73460461f9c49eb917c1911580ba0e4432c12557
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=62e657fec3887db30d712505782ad8aea26e7411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:3b:72:cf:76:ec:8e:a4:7c:89:09:72:2b:
98:e6:35:f1:dd:a3:a8:88:23:22:95:5f:71:3c:b5:
0b:0b:dd:30:f9:62:e3:96:85:12:a5:5e:dc:6d:37:
50:ba:dc:24:09:4b:2a:69:49:b0:e1:fc:32:28:7a:
f2:b0:89:58:2d:e5:89:1e:45:46:a7:72:f4:4e:ce:
2a:dc:73:8a:95:34:16:dd:a4:57:f1:6c:37:ec:dc:
fc:29:bd:46:4b:04:9c:7e:06:37:8a:ba:12:f5:ce:
2c:1b:b1:a2:61:ae:80:da:77:b8:a1:e1:60:16:3a:
58:e3:bc:75:55:62:c1:a8:37:02:a5:17:d2:c2:21:
c7:f5:4e:39:52:12:87:b4:0d:8d:be:d3:e1:c2:a9:
89:7b:ed:40:73:b8:e0:e8:74:d0:08:cc:97:aa:e1:
d5:3b:d6:d5:a4:40:ca:da:1e:be:8f:11:1b:5a:48:
b9:74:84:35:e7:44:75:08:40:f8:76:4c:4d:81:87:
c8:83:06:32:24:3c:e2:ce:df:c1:cf:c7:d9:ec:f9:
ea:30:8a:44:78:45:4b:f0:4d:44:f7:51:99:61:7f:
b0:0c:f0:88:c9:de:3e:8b:31:8c:41:72:f0:89:c1:
42:8c:5a:4d:c3:90:a8:d9:b9:7f:48:a8:c0:51:b6:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E6:57:FE:C3:88:7D:B3:0D:71:25:05:78:2A:D8:AE:A2:6E:74:11
X509v3 Authority Key Identifier:
keyid:73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6e:3f:96:66:ad:1b:f2:35:83:a4:fe:a3:0d:74:d0:69:d7:
7e:94:1a:2f:e3:20:30:aa:0d:45:be:ab:95:7f:7d:f0:b5:59:
91:74:b7:d4:f7:ca:fa:ee:89:1f:0b:5d:fb:51:26:b9:cc:93:
64:f3:7b:62:9f:e0:47:9f:66:16:15:49:9b:8a:23:6c:b1:ad:
fe:31:d0:d3:37:80:7f:d5:0c:42:2e:ec:d6:ac:49:24:d6:5f:
fa:3d:2a:40:d5:80:c5:6a:31:df:f0:a4:58:aa:d0:5c:ca:47:
d1:45:9d:d4:90:9a:37:a9:af:c5:ea:2e:19:73:e3:37:ca:4d:
e7:28:08:c7:03:6d:fd:80:1d:c8:43:57:ed:fe:3e:e1:57:1f:
11:ae:99:bf:97:bd:5f:13:ab:ab:fa:82:0e:de:57:b3:5d:e7:
d9:36:17:2e:b7:34:cd:16:1d:8a:7c:83:2e:d7:e0:3d:a2:37:
66:21:94:15:32:28:9c:b8:3f:18:c0:36:b3:7d:37:82:d0:d9:
bb:27:2c:d8:ff:88:f8:04:65:21:5e:ff:7e:99:7e:46:41:11:
58:d4:17:d2:dd:b1:d8:28:04:33:8a:03:e8:46:38:0a:b2:4b:
7f:28:cb:44:90:8f:3d:3a:01:fe:d1:64:7d:fc:3f:9d:ce:e4:
75:7d:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:56 2026 by rpki-client