Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: 8TPvgqtk4k8x/V8Go0Nbyd79lxqbMZ9o1DX1l3hJxkM=
Subject key identifier: E1:16:36:C9:4A:19:B0:4C:FD:FB:32:33:AB:40:76:41:06:70:35:C1
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 019D3865A3C6635274AE30082EA228008560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 123E
Signing time: Sun 29 Mar 2026 07:01:18 +0000
Manifest this update: Sun 29 Mar 2026 07:01:18 +0000
Manifest next update: Mon 30 Mar 2026 07:01:18 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: XAErAx61sLDU17kfn+bsS/vVO9b3tg100YDh30s0UBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a3:c6:63:52:74:ae:30:08:2e:a2:28:00:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Mar 29 07:01:18 2026 GMT
Not After : Mar 30 07:01:18 2026 GMT
Subject: CN=e11636c94a19b04cfdfb3233ab407641067035c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:79:2e:38:4d:2a:ac:87:c3:83:a0:b3:c6:
0d:b6:0b:4a:16:9c:df:57:fe:2c:e6:5f:3c:89:d8:
bc:5f:88:94:c5:28:8a:dc:4b:43:79:65:94:0b:8c:
c3:c6:db:20:ac:69:06:db:38:f4:b9:b4:2c:4a:3a:
e0:22:eb:32:99:ac:13:5a:9c:fe:30:51:20:fa:7c:
87:9b:3d:1d:de:15:a3:98:33:91:f8:a3:70:b8:ce:
44:9d:8c:4b:35:5f:4e:cf:94:0c:3d:fb:5e:15:4e:
18:e7:f6:c0:95:fd:85:8b:bb:56:39:f0:84:b8:2c:
23:ea:dd:60:fd:1f:1f:51:00:65:ab:b7:19:d5:23:
12:94:c2:c4:03:67:35:0f:fb:b3:3e:b3:f0:06:90:
4c:ba:43:df:b8:23:85:e0:ef:f0:61:6d:be:24:52:
34:d0:d0:49:ca:69:8d:57:a5:c6:27:84:27:ae:22:
28:14:b7:c3:7d:57:82:32:87:a1:97:b5:75:e2:c9:
fc:43:4d:3b:ef:4d:c2:2a:e8:65:07:81:16:ce:a7:
19:19:57:d5:a4:a7:e4:b6:e9:46:25:c8:c7:e4:09:
2d:19:7f:2a:72:f9:a6:51:ed:50:dd:8a:f5:90:19:
02:c6:6a:98:45:8b:9c:54:03:05:b8:18:54:76:7b:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:16:36:C9:4A:19:B0:4C:FD:FB:32:33:AB:40:76:41:06:70:35:C1
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:68:f4:1b:01:ff:37:15:5d:53:ea:d8:1c:50:76:ff:ed:da:
d8:3c:d3:7c:19:a7:52:cd:65:20:cd:7a:99:5f:5d:c8:5d:2d:
48:8e:91:c5:fc:67:5e:65:15:7a:b2:27:2b:db:6b:3f:c2:8b:
d6:ba:82:5a:43:3e:d6:b0:d9:57:13:54:5f:9b:f1:37:0f:0f:
0c:d1:ea:be:9d:e7:a2:72:87:a6:a9:ef:3d:6d:56:ba:ff:c5:
4f:57:9a:b5:21:6d:82:57:9e:4b:bb:98:73:86:9e:ba:30:d9:
17:0a:62:35:01:e6:12:80:61:0e:8a:c1:56:22:ee:0f:f8:92:
71:69:dc:88:bc:35:98:25:4b:43:fe:e1:ec:03:5e:b2:7d:4a:
07:09:09:4d:b1:94:01:e9:cc:b2:f5:43:e1:b7:71:db:28:2a:
c7:ee:a7:a8:9a:47:60:aa:66:7c:ce:6a:45:58:74:28:93:14:
ac:cb:42:5e:85:e3:e6:42:b2:b3:3a:61:d3:74:b6:36:73:58:
05:21:3d:fd:68:40:08:d1:e0:3e:8f:8b:05:8c:29:43:51:af:
38:53:73:8d:17:d7:d9:ad:59:ff:92:94:5d:5f:35:fb:67:02:
14:f2:9b:b2:f9:33:07:69:ad:28:3d:c2:54:07:a1:7b:72:20:
b1:db:91:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:14 2026 by rpki-client