Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier: x17CckUg4lrrJOugUVTEu74nv0ZFG3Ck8rsj2ODcAtc=
Subject key identifier: A3:7E:C8:C9:C1:69:C6:D0:87:59:DC:64:D0:2D:D8:C0:11:E5:89:28
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 019D37521C61F0CA8523DC3F46B572B34048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number: 0DDB
Signing time: Sun 29 Mar 2026 02:00:21 +0000
Manifest this update: Sun 29 Mar 2026 02:00:21 +0000
Manifest next update: Mon 30 Mar 2026 02:00:21 +0000
Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: QFh1aCYVqG1AkVHV7H39A53qRPNVm+kM4OtR3xA5cNA=)
2: pk7GnCKoxkqkPmBMLQvy0zcaqM8.roa (hash: 3tcXLqvph/hx58R2cNUaqQx5GKRZxyDjikkRZceH7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:1c:61:f0:ca:85:23:dc:3f:46:b5:72:b3:40:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Mar 29 02:00:21 2026 GMT
Not After : Mar 30 02:00:21 2026 GMT
Subject: CN=a37ec8c9c169c6d08759dc64d02dd8c011e58928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:13:ba:5c:e7:c2:ed:72:1e:7e:c6:58:40:
76:95:0b:3f:5b:da:04:90:d7:b8:aa:f2:0b:a9:fc:
60:f3:8f:74:71:5b:8a:a7:79:10:51:4c:1b:1b:2b:
a4:14:e3:95:47:77:f0:0f:a5:a7:0f:b1:b7:00:91:
21:9e:9c:23:94:11:bc:e7:24:6d:93:c7:93:57:c9:
5f:2e:dd:0d:44:f9:8d:11:c3:36:03:fc:33:de:71:
25:bb:4a:18:96:db:a0:7d:94:0b:c9:4d:ce:ca:a0:
35:83:2e:75:76:93:19:9e:cc:92:03:70:25:18:de:
9d:46:b5:16:79:d1:14:e7:e7:68:47:7f:4c:17:9d:
14:04:c1:75:1b:3b:1c:22:48:f6:a3:f2:ce:ab:30:
66:76:44:f6:1b:2d:b8:7e:51:36:0c:d8:e4:d5:d1:
49:22:27:2f:f6:89:47:18:6d:13:41:49:d5:d1:e8:
14:b9:00:68:fa:59:f9:7e:6a:93:60:17:df:26:ac:
71:17:d0:53:ca:b8:00:4f:03:e8:2a:67:25:f3:36:
5c:6b:4f:37:4f:f2:d6:e4:14:43:8a:7a:22:67:f3:
e5:09:5a:8d:c7:4e:9e:88:30:94:6b:fc:43:83:c5:
85:14:bb:e9:e5:0f:82:d2:bb:5a:6a:62:5a:80:80:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7E:C8:C9:C1:69:C6:D0:87:59:DC:64:D0:2D:D8:C0:11:E5:89:28
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7c:99:31:e8:04:f6:11:9a:b3:00:c3:22:23:04:39:49:5b:
2b:a7:82:ec:ed:e8:77:b4:00:b2:d8:49:0e:53:d9:95:6f:a6:
9a:2f:74:38:6c:57:60:7f:6c:6b:29:f7:e2:87:0b:ce:0e:6f:
f4:f2:c8:89:00:02:75:92:f5:d2:dd:64:48:7c:46:f7:b9:f0:
cb:a2:a9:60:22:63:c5:aa:43:f7:54:88:a1:74:da:77:df:d6:
ed:f3:d6:42:bf:83:12:a6:e9:d0:5c:f7:8d:33:1c:7f:a8:87:
3c:0e:9d:80:80:36:3c:88:1a:4e:d0:00:21:50:d6:9a:ee:fe:
db:9a:94:0f:4d:ff:88:86:7c:fc:cd:ae:52:b6:ef:34:15:c9:
af:b8:2a:1c:ba:19:5b:6b:c9:1e:99:f1:8b:62:76:7d:2a:76:
44:fc:5a:b2:ac:02:10:8b:c4:33:92:73:86:b1:65:9b:59:3a:
8d:49:76:b3:cd:d4:35:e9:fa:af:31:50:87:bd:1a:45:cc:46:
22:77:42:a8:f3:bf:04:2f:e4:d2:c4:cb:4d:5d:e9:f0:12:8d:
6c:58:0e:50:af:9e:56:1a:56:b5:3a:7a:2b:7f:21:cb:97:b3:
5b:da:03:c5:b1:00:02:dc:ca:3c:84:63:c2:82:5e:6e:b8:7a:
56:a5:0e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:40 2026 by rpki-client