Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: Y7j9bclEzV+lCEOTMZ8jWj6SLBX10LU5jtcNr6HSOOY=
Subject key identifier: AF:17:D7:0F:35:90:0E:4D:6E:D2:95:AB:F9:AF:85:19:74:5C:36:03
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 019D3909A456F8CEC46DE24C25DBE67720E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 0C0E
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: +/fF499rohpwbhmF5T633eNCpctyx+ErRzSPCV7fOmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a4:56:f8:ce:c4:6d:e2:4c:25:db:e6:77:20:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=af17d70f35900e4d6ed295abf9af8519745c3603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:3a:2c:ad:38:05:d4:5f:6c:e7:2d:23:75:
45:6e:e6:fa:aa:4b:46:3b:9a:9c:b7:00:dd:7d:13:
ff:4b:87:19:22:7a:b1:3d:7b:33:3e:dd:84:98:74:
fa:c2:13:14:14:be:7d:20:16:51:84:ae:ad:e3:88:
8b:f2:ac:68:6e:90:68:51:65:41:5e:dd:90:8f:cd:
f4:3f:7b:49:84:9c:9a:d2:a2:f9:49:14:2e:88:98:
03:73:de:6d:62:b1:7a:0f:88:c8:71:98:94:92:4b:
88:57:5f:05:c0:d2:00:9f:9b:31:b3:58:91:2a:25:
d3:98:0c:24:9b:e5:07:e0:97:68:05:99:ba:94:51:
cc:1f:58:18:2a:ed:a4:1e:92:4f:95:2a:74:7f:d2:
3e:2d:9a:7a:4f:09:4a:eb:9d:14:4a:a6:11:5f:ce:
64:cc:12:a8:10:e9:fc:d5:22:15:c1:8f:fd:82:31:
e4:50:97:04:25:61:f9:23:0f:9a:1c:c2:96:9a:91:
6f:c7:37:c5:22:b2:b5:2c:61:f3:54:29:ca:88:ec:
d5:8f:18:ec:04:f8:b2:ee:7f:b0:bd:cb:c6:56:1b:
4e:7b:f7:49:49:29:43:b7:8b:80:2c:f2:a5:a5:7c:
df:64:79:1a:7e:1f:a8:c1:64:13:d9:b4:03:5e:49:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:17:D7:0F:35:90:0E:4D:6E:D2:95:AB:F9:AF:85:19:74:5C:36:03
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:1a:ef:ba:1e:14:e4:22:92:13:90:ba:c6:6d:d0:dd:9d:
7f:e1:81:01:de:4a:18:9f:88:b1:f6:f0:89:74:ea:99:27:f3:
84:fb:8b:3e:b1:d3:dc:b3:46:19:15:26:7f:64:db:b5:87:4b:
d7:ad:ee:30:45:b5:bc:f0:28:69:ac:48:4a:60:9d:58:7d:50:
ec:62:5c:a9:33:5a:13:03:fc:91:93:09:86:2d:00:2b:22:96:
f3:4b:90:9e:fc:89:75:14:e3:b1:af:bb:be:a2:f6:c5:c0:39:
6c:88:24:9d:62:47:8b:a4:55:13:23:30:5b:82:51:f6:5a:b1:
7e:8c:96:c8:02:b8:6e:51:22:6c:79:30:59:9f:97:38:71:06:
5e:65:fc:7f:7e:e3:04:da:9d:e9:41:27:95:27:f9:22:9d:d5:
51:3a:72:1c:b7:e7:b9:4f:36:49:67:fd:62:4b:c1:5f:44:d6:
35:c7:d4:68:aa:1f:ef:fc:db:d7:46:14:c3:a2:b4:f2:a8:b7:
f2:66:49:59:13:dc:f5:ee:85:d0:5a:c1:8e:4a:ae:3c:85:e7:
a7:80:4f:ce:f6:46:3d:27:26:dc:c1:40:5e:6c:65:9d:b9:96:
cd:e8:35:e4:5d:ed:60:2b:95:13:73:db:5a:94:27:23:0f:4b:
0b:bb:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:27 2026 by rpki-client