Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
File: RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft (raw, json)
Hash identifier: 16aGt2uBWFJ8+lrCBq5ZEdUbxhai2jBbYmQalfKfYic=
Subject key identifier: 7B:B1:62:3A:61:15:69:3E:15:0A:51:83:B8:9E:73:DB:36:88:DA:1E
Authority key identifier: 44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
Certificate issuer: /CN=440586c54614b96edb84709524a334b31c9999fd
Certificate serial: 019D38655FAF75DDF0CBB5AE35CA3EAE0F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
Manifest number: 0B97
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl (hash: bjx1yW1ZMjGLB3K8rDF3uqWlhfU2Lsz6ignKIHyBO0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5f:af:75:dd:f0:cb:b5:ae:35:ca:3e:ae:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440586c54614b96edb84709524a334b31c9999fd
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=7bb1623a6115693e150a5183b89e73db3688da1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:e1:e0:6a:62:09:47:47:11:ae:e5:04:75:
df:ee:ba:d0:e6:ff:45:93:1c:bc:5a:97:e0:f7:f7:
c2:0a:22:61:ff:ab:d0:d5:c2:db:40:fb:6b:8c:4c:
6c:51:9d:8d:88:5c:45:5c:f0:a1:81:54:75:82:65:
4a:68:90:bf:eb:a3:5b:33:1d:5b:3f:8d:9e:5e:4e:
23:c0:2b:21:87:ba:fa:c1:0f:37:e8:0c:8c:d5:ed:
7e:23:6a:73:4d:cb:a9:04:0f:58:52:19:d5:d5:2f:
02:ad:3f:b5:f1:f4:cd:4e:09:f5:6f:2a:3d:b0:fc:
d8:7c:9c:4d:0f:62:50:28:43:d2:90:e0:0b:79:eb:
ec:26:f4:31:19:f3:f0:a4:73:74:07:2a:f1:02:f6:
5a:70:8c:e9:7f:fd:e0:b2:c1:11:c4:19:3e:e0:ae:
81:82:e0:ca:45:bc:fc:cb:12:13:be:e5:33:9a:70:
b9:7d:a8:15:38:96:21:da:ec:66:fd:6f:86:f5:f6:
30:d8:36:52:3d:19:22:3b:d4:c7:9b:ae:73:24:f4:
66:34:fb:ab:57:dc:09:97:54:3d:e2:df:ec:7e:c0:
c1:23:a2:5d:71:7b:70:df:d5:86:a7:0f:7d:96:3c:
52:a2:10:9b:33:32:08:ee:eb:f0:0b:17:db:c9:a7:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:62:3A:61:15:69:3E:15:0A:51:83:B8:9E:73:DB:36:88:DA:1E
X509v3 Authority Key Identifier:
keyid:44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e5:f6:45:88:0d:69:3a:a7:b9:f4:16:51:c9:21:f5:73:2c:
93:94:5c:5c:67:94:34:b0:81:31:ac:b5:12:ee:c1:ce:d6:81:
38:d4:b0:5f:e3:f8:97:10:e6:84:8f:f5:a3:88:c1:2c:22:d3:
d5:c1:99:41:0f:74:e7:f6:25:8e:7b:9d:ca:71:95:9c:5d:c8:
89:00:86:a5:ef:8a:ad:56:8c:41:61:d4:05:d8:ab:d5:b4:a7:
bb:a5:54:39:a2:5e:c3:b3:10:b6:a9:46:ea:64:cc:8b:0f:4a:
78:3b:2a:89:a2:3a:ed:f1:20:92:76:4c:f9:60:f5:08:80:17:
66:cf:4c:74:4d:28:13:dc:9b:ac:bd:55:e6:d1:14:c6:56:32:
ca:03:46:ab:89:69:b7:b7:9f:c7:d6:36:6a:c0:a2:01:a9:03:
c2:9e:ca:35:f8:b1:da:e0:7b:9b:21:aa:1e:40:24:48:71:e7:
d0:74:20:ad:80:8b:d9:11:9b:d9:6f:e8:5c:9a:37:98:40:74:
ae:bc:0a:c2:a2:e1:d3:8a:38:41:dc:fe:ea:e7:2e:f7:e7:11:
76:b8:74:7b:63:6e:28:df:8d:7d:21:3b:4a:43:a7:cc:b7:fe:
82:ca:5f:5e:dc:c4:0b:5e:10:93:bd:98:36:a9:97:fd:57:6a:
f8:65:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:33 2026 by rpki-client