Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: 1X0iM/ckIXceB78RXM45KnOTIpC6ZMiiGcjTDaAYrGI=
Subject key identifier: 6E:C1:03:0E:EC:26:AD:38:6A:57:69:AB:8D:3F:63:F4:A0:E7:B2:49
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 019D3909D7D38AC2AFE9B907027F18A7B75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 0C00
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: ceRthFUQjKgjowdUvws78/Yo5Vx0x5P1kbQRDtD9otg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d7:d3:8a:c2:af:e9:b9:07:02:7f:18:a7:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=6ec1030eec26ad386a5769ab8d3f63f4a0e7b249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ec:5d:f1:60:a9:e7:38:ea:65:e0:aa:99:8a:
e6:43:e6:40:31:58:37:9e:b1:d9:c1:f0:21:eb:93:
54:f7:58:77:6a:c9:bc:51:54:23:92:64:ad:86:db:
56:fc:cd:d0:0a:1b:50:31:13:57:0e:b2:22:af:95:
b2:0b:c4:b0:44:b9:80:1a:a8:ba:6e:21:38:e3:12:
30:e5:7b:ef:72:8d:3c:ca:c8:72:81:3d:80:20:f7:
e8:51:f3:13:95:db:a2:3c:df:65:8b:09:35:26:b5:
92:07:6d:9e:2c:05:49:3e:db:15:ed:cd:34:fa:07:
3e:19:3a:3e:1b:ce:da:bf:28:2f:1e:52:f0:ec:c7:
06:d1:4f:85:d1:22:be:51:5f:e4:54:cf:08:39:17:
ae:3e:e9:9f:75:96:8b:5a:bb:32:65:cf:34:6e:39:
6b:83:ae:9b:ae:ac:bd:ec:fc:42:74:f5:f3:e4:60:
82:5b:9b:87:24:64:09:81:56:0b:ae:43:8b:94:3d:
e4:3c:9d:c5:08:80:a6:75:92:d8:ce:13:c8:0a:d2:
59:0c:57:e6:52:42:4b:a1:53:60:e3:85:47:44:ef:
9e:66:a3:76:e0:8e:46:8f:46:7c:5e:b9:c8:65:76:
f4:d7:1c:57:d0:04:4d:4c:64:0a:82:b3:08:d3:ae:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:03:0E:EC:26:AD:38:6A:57:69:AB:8D:3F:63:F4:A0:E7:B2:49
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:77:9c:59:09:b1:c3:41:e5:72:96:3b:30:0f:41:07:8c:80:
f5:e8:80:80:e7:e7:c2:4c:5a:1a:d4:24:44:17:c3:b7:41:0e:
ba:1a:6b:78:03:6f:b8:92:67:16:34:a0:59:99:ae:10:aa:d1:
06:1c:c6:be:d6:c2:aa:75:3a:02:c7:07:c4:e4:44:ec:cb:82:
13:ae:fb:03:fe:6f:69:57:f1:89:9f:b1:29:6e:8f:5a:14:31:
a1:0f:0f:39:44:92:c0:e4:0b:06:de:25:dc:1f:a4:8c:60:dd:
23:90:13:75:1d:e0:47:1a:a5:83:7e:ec:0f:d2:91:94:5a:56:
ff:e0:43:de:bd:57:d7:8e:2e:3c:23:69:aa:10:d3:44:ed:32:
7e:e4:bd:3e:5d:f9:79:2a:f5:01:49:35:58:ba:60:c8:00:d5:
89:0a:df:e3:f6:ce:44:33:e1:80:ad:e4:c1:b8:44:ab:6c:80:
df:57:41:11:98:5c:73:9e:c7:de:95:5f:31:2a:f7:c3:8a:ed:
6c:ab:21:dd:7c:57:75:32:45:7e:ab:dd:70:59:d4:7b:c8:3a:
04:61:df:b6:27:f5:48:be:34:11:ee:01:db:b6:75:76:5b:3e:
78:d7:a6:70:c7:ad:2f:d2:0f:9a:55:13:56:51:6a:32:67:a7:
f6:98:75:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:10 2026 by rpki-client