Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: wUTbV6cfU13Y+k2K3kL5ArxEy5cT6r8An2XGgP39nCc=
Subject key identifier: DA:C7:29:65:D5:15:0D:78:E8:35:F2:CD:D3:8A:E7:8D:B7:55:A9:8E
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 019D382E17C2BF22C4CE6176FB1D667F4564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 0C90
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: Y5LOAHaITIhzD8tP5PE4iqNyG7AsGZdx2tAAYVNDsGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:17:c2:bf:22:c4:ce:61:76:fb:1d:66:7f:45:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=dac72965d5150d78e835f2cdd38ae78db755a98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:d0:db:c7:7a:0b:64:ce:b4:62:48:81:85:
34:2c:a9:b5:fb:1b:8a:4b:a2:c1:ae:8d:07:57:48:
18:a6:37:43:d5:34:99:61:d6:f8:b3:de:4f:d7:39:
96:37:0f:eb:ed:3a:2f:4e:84:e3:51:34:d7:0f:d7:
fd:bf:9e:4c:69:fe:c8:5d:06:20:8e:b4:5e:bc:cc:
b2:98:06:c1:39:d6:78:81:bd:50:41:5e:2b:90:3a:
22:19:ae:5b:e9:9f:3b:a6:84:1b:83:91:a1:b1:0d:
3f:3b:66:3a:74:9c:52:3a:3e:56:4d:21:00:ba:f7:
30:28:cd:23:e2:1d:48:11:47:1c:2a:4a:29:2d:03:
32:c5:31:96:e6:0b:94:62:d0:f8:bf:b5:89:1c:58:
ea:c9:c3:32:af:96:e2:ac:ab:14:f1:69:80:cc:25:
d5:af:7b:d4:06:e4:2a:27:ce:35:7b:38:c4:8f:2d:
64:1a:fb:c1:0f:c5:50:c6:95:40:28:e2:84:7c:d9:
e7:85:ce:a5:b5:32:55:f9:af:60:26:04:65:91:e0:
54:f6:81:13:e6:d9:bd:6d:57:a3:b9:50:5e:b1:b5:
43:d8:fa:a7:33:37:29:ac:91:c9:c9:49:06:8e:8a:
50:cb:8c:1c:fa:97:58:72:e6:30:b3:a8:2f:c9:2b:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C7:29:65:D5:15:0D:78:E8:35:F2:CD:D3:8A:E7:8D:B7:55:A9:8E
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:d3:e3:45:5f:1f:40:b6:9e:2c:c4:b6:09:6a:f3:a3:2c:
40:80:7f:67:bb:ad:5d:6b:77:4a:79:65:4f:94:d9:0b:55:3f:
7b:a7:44:fe:66:fd:13:93:71:d8:7d:5d:a0:7d:6a:31:34:a8:
ba:34:60:93:ad:1e:d8:14:51:56:6e:e2:cf:e5:4c:96:d3:9c:
14:6d:9d:55:5c:bb:32:90:41:36:39:78:4e:70:d9:77:64:74:
37:98:95:03:4a:ad:47:68:45:b7:95:b7:7e:85:5a:0e:99:31:
72:bc:44:f6:65:60:32:e3:83:5a:2c:be:42:cf:0d:21:5e:44:
c3:bc:34:23:fe:ca:9c:2e:10:af:d3:ab:5c:94:5e:2b:93:da:
5a:9e:1d:8f:c0:0c:17:5c:03:b4:03:3d:27:eb:f4:ed:d3:6f:
9a:3f:72:2a:e5:6a:47:fb:ff:d8:9d:e2:b0:c5:02:f9:ef:14:
2a:65:d7:53:bc:f5:4b:9c:ad:e2:fe:6e:f5:99:57:f7:d4:b8:
ec:89:8f:a4:7d:81:84:8d:46:f6:6c:94:41:fd:06:80:6d:59:
b0:59:6b:a6:64:42:4c:ce:b2:bb:1f:42:b8:fc:fe:96:d8:94:
a4:11:fa:2e:11:d5:8a:3c:e1:3f:c3:94:69:82:cf:0c:f8:bf:
96:d5:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:19 2026 by rpki-client