Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier: HzYvBFDjsvv9mHjPRfyMaH2poMY8X0AeMV2IX3gvKzA=
Subject key identifier: FF:D9:87:7D:3A:07:32:A6:31:D5:4F:4E:01:99:9A:1F:24:14:A4:8F
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial: 019D3865523E925119FB692960A15495B240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: P0bvc+va2M7ZQun3xbPZEhKZbNbbQG1CJ4tQ+Iv2kU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:52:3e:92:51:19:fb:69:29:60:a1:54:95:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=ffd9877d3a0732a631d54f4e01999a1f2414a48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:b7:4c:bd:28:1b:1e:72:d9:98:ad:3e:b5:
5e:4a:71:93:14:4d:37:35:b3:a0:a5:ce:47:ec:d4:
89:c0:c4:0e:75:28:0d:02:94:1d:e8:0e:eb:18:ef:
c4:12:d8:19:db:ac:b3:34:8f:38:07:f3:81:ff:4e:
b4:19:f9:58:54:d2:33:be:13:19:56:06:5d:14:43:
8b:17:77:48:ac:69:3f:aa:4e:f4:fb:d9:7e:63:b7:
25:e2:04:48:f6:8c:e3:ea:55:3c:62:28:20:8d:52:
a8:38:96:0d:92:74:64:eb:dd:20:87:eb:e6:9e:a4:
f3:01:d6:5e:fe:cc:ec:12:79:1c:80:d5:df:0a:49:
6b:bd:bf:65:f7:ec:11:ff:27:be:d5:53:78:8a:82:
6b:6c:80:66:92:7e:8e:3b:02:98:3a:52:32:4f:6e:
23:58:ae:22:90:9d:22:45:30:6b:52:9f:17:00:94:
41:33:cb:12:6b:d3:7e:1c:08:ea:71:c0:3e:2d:9a:
c8:24:3a:31:21:60:db:b1:44:43:55:1e:2a:a9:94:
77:87:fb:5d:da:36:02:a9:01:a9:49:ff:85:d4:7e:
cc:34:48:79:61:7d:40:c6:f4:7a:4b:db:a1:6c:44:
b0:72:8e:83:6d:40:37:5d:c3:25:f8:bf:4a:22:aa:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:87:7D:3A:07:32:A6:31:D5:4F:4E:01:99:9A:1F:24:14:A4:8F
X509v3 Authority Key Identifier:
keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fe:de:7d:43:5f:89:c1:56:57:cc:4b:40:92:5b:2d:2e:bf:
1b:2e:10:1c:92:91:25:a7:83:0b:27:3b:3d:de:10:6a:91:8d:
bb:59:1d:33:15:2d:28:d9:70:a5:1e:b5:eb:27:ca:81:bd:82:
69:f8:de:21:1f:49:94:be:c7:74:45:5f:22:fb:89:8e:70:03:
ca:2d:d5:32:8b:ac:1b:1c:60:9c:81:59:2c:b5:0d:8a:b0:54:
e7:f6:5c:7f:21:6d:dd:55:63:19:b9:63:3a:0d:c2:41:48:0b:
8e:c8:65:10:e5:6e:8f:3c:88:e6:2e:37:a7:23:08:da:53:b4:
27:8e:32:05:54:55:2b:d7:c2:f7:26:11:e6:98:73:df:66:df:
97:22:74:c6:5f:f9:62:c9:b8:83:6f:2a:e4:e2:d4:6e:5b:2f:
63:8a:ae:cb:1b:50:13:f5:aa:66:82:6d:0b:d7:22:cc:2e:8d:
a5:21:9c:fe:d7:a8:61:96:ff:37:08:e1:3c:e8:20:1b:d9:dc:
a0:8c:a5:97:cc:1e:2a:86:11:47:4a:ea:63:2c:c1:4e:a6:e1:
c6:f9:b4:ab:25:f8:b8:31:3f:8b:89:ec:79:44:ee:77:97:fa:
96:a6:e6:90:ec:f2:e5:6f:6d:9a:d7:8f:d1:e8:6f:30:d8:ff:
e2:79:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:05 2026 by rpki-client