Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: P+xSU/TnMFN2B3qHYvNH5eQlLEi7+benaL+ZK6MVKM0=
Subject key identifier: 6C:5E:91:0D:E8:19:B5:F8:48:B7:45:8E:3A:D2:87:0D:E7:8D:F5:1A
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 019CF3BAD9DC1246D0A1F3C0E4CA4F95AFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 1031
Signing time: Sun 15 Mar 2026 23:00:34 +0000
Manifest this update: Sun 15 Mar 2026 23:00:34 +0000
Manifest next update: Mon 16 Mar 2026 23:00:34 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: /tBBjJtngptBaFdjTbEqIzitNLa5QTkvkb9XZmE+DN0=)
2: SlpF7r7mXCWXhPzZBmODYnXQ2AQ.roa (hash: jMJC3ZxPYgXKuHU+fXZq1zQnba0EbcW6rqUVC+m4QQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:ba:d9:dc:12:46:d0:a1:f3:c0:e4:ca:4f:95:af:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Mar 15 23:00:34 2026 GMT
Not After : Mar 16 23:00:34 2026 GMT
Subject: CN=6c5e910de819b5f848b7458e3ad2870de78df51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:ff:05:b6:1e:67:c9:8b:60:52:0b:c4:45:
af:8d:f0:ac:33:aa:01:ca:af:57:8c:a8:1b:c9:e0:
34:00:3f:ae:c9:0c:eb:42:ae:05:88:4a:85:91:47:
e6:48:a4:42:5a:b1:2a:1f:27:a7:fa:f6:93:52:1e:
e3:3f:fd:49:db:6d:47:0d:7b:0e:2b:07:6c:9c:db:
e2:08:90:63:4a:89:29:f5:b7:0e:56:5b:f4:68:02:
fd:16:09:b3:56:07:00:24:f6:43:50:4c:af:4e:c0:
cc:4b:60:dc:66:af:81:b2:c2:09:5e:4d:3f:49:07:
65:c3:aa:10:e2:8c:f3:fa:a5:6f:41:fe:e0:74:6b:
68:d5:fc:b8:19:3b:2e:41:d7:1f:c4:c6:09:25:b1:
87:96:c7:9d:5d:06:a5:b5:24:d5:39:8b:c2:29:bc:
c6:97:b5:f7:4d:8e:14:28:b3:0c:23:eb:66:f7:c7:
42:19:e9:b7:6b:d3:44:85:23:8b:e9:06:f5:b4:08:
76:a7:6e:17:b9:2f:be:d4:15:4b:7e:5c:e7:07:09:
1b:cb:a3:4a:b2:73:bc:e4:84:1b:da:5c:6f:22:bf:
dd:79:ff:86:b2:45:47:ab:52:22:12:0a:70:7b:7e:
e3:be:a7:b1:42:31:18:84:20:2f:fc:f2:de:f3:9b:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:91:0D:E8:19:B5:F8:48:B7:45:8E:3A:D2:87:0D:E7:8D:F5:1A
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:53:2a:16:2d:16:30:09:89:e4:bf:3e:a3:a4:1e:69:6e:de:
4a:91:8d:eb:9c:89:3e:ac:c7:83:b9:59:05:e5:60:db:69:12:
e4:5d:df:06:21:03:24:54:be:20:85:58:ae:08:0e:4d:d9:6f:
0a:75:6f:71:e9:ee:8b:55:97:79:05:99:cf:20:8d:0b:cd:99:
3e:35:1e:4b:77:39:50:29:d0:ee:81:d9:5a:95:d6:13:dc:c3:
f5:24:ae:2c:0a:32:90:8e:d2:8b:44:0d:d4:40:47:e0:d7:b3:
49:24:1c:71:7d:2f:b1:dd:52:e7:8e:68:c5:e0:93:0c:54:9c:
a8:b9:51:00:f4:e1:29:2b:72:40:f6:a2:68:07:0d:96:25:38:
7b:91:1a:d8:92:c2:89:c1:38:c8:36:e0:b8:d9:e5:7e:df:ba:
59:c0:35:38:74:89:5f:91:a9:c2:a4:03:94:87:5b:ce:94:36:
f3:42:35:fa:32:b2:de:36:a9:33:a9:11:ce:1d:b9:cc:dc:33:
a1:19:9d:49:e1:25:af:f3:5b:12:b5:26:c8:90:c8:c1:38:dd:
cb:b7:c4:4b:b2:73:45:94:27:31:9a:1a:d1:2d:a2:c3:c8:11:
07:86:df:df:b9:37:0b:ea:9e:09:ca:c9:92:57:79:5b:cc:4e:
17:1a:f3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:17 2026 by rpki-client