Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File: _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier: hbbIwN6goA5DPkxlOZl7Na+AqOjcsT6rWppJnniuNCI=
Subject key identifier: 43:81:86:9D:FA:D7:1A:EE:01:40:7E:71:3F:74:C6:D8:D9:CE:5B:2E
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer: /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial: 019D3866222D87F2D60246D1744546D076C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number: 158F
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: 4knBLgfJCV482vfJKVndINTC4ZwVZTvyPXrNuuo31A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:22:2d:87:f2:d6:02:46:d1:74:45:46:d0:76:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=4381869dfad71aee01407e713f74c6d8d9ce5b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:a4:aa:29:b0:4f:17:4b:75:06:7e:f1:18:
31:d9:21:1e:a2:c5:6f:8c:0b:85:0c:7a:07:57:d0:
91:ee:b1:83:b5:49:3f:dc:a1:82:f7:cd:d3:33:39:
61:39:de:f9:97:82:bb:0c:0d:7f:f1:4e:a9:51:57:
39:09:be:40:f6:1f:f3:a4:fa:4f:c8:e0:a3:be:f8:
ce:e0:00:5c:71:81:23:c1:cd:52:8e:23:ad:14:19:
63:bf:b5:af:80:79:78:c7:a0:2c:e8:68:5a:a2:7d:
01:45:7e:5f:bc:00:db:77:38:04:c3:94:3c:f4:fa:
cc:11:e1:5d:d4:5f:08:ac:4d:d7:48:e9:ca:48:c4:
9b:17:ac:9a:1e:b2:7d:0b:cf:59:a7:c5:80:75:ce:
2d:0f:2d:5a:c9:df:08:97:27:b5:f7:14:2c:b2:a5:
ec:77:ce:b7:16:fc:71:fb:5f:c2:07:07:fb:e3:37:
72:07:dd:58:87:89:b0:13:eb:bc:7d:f5:ad:96:bf:
3e:ca:ba:72:d0:f8:5c:a2:48:c3:33:04:5d:ac:70:
f3:e4:40:14:2f:c3:c8:4c:60:c8:a2:89:86:b8:1e:
76:32:f4:c1:a6:30:4c:be:33:08:a3:0a:27:e2:63:
9c:71:90:04:32:eb:14:62:67:f8:d0:b1:ca:ca:f9:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:86:9D:FA:D7:1A:EE:01:40:7E:71:3F:74:C6:D8:D9:CE:5B:2E
X509v3 Authority Key Identifier:
keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d7:7c:18:d8:fe:c0:49:4e:71:f5:c7:a6:a4:6c:21:c9:90:
23:ea:16:80:56:e8:2e:10:0d:8b:a0:30:48:60:ab:bf:4a:d1:
45:26:31:19:f2:bd:17:4b:9a:a0:2f:1f:a3:f8:2c:f7:2c:f9:
3e:fc:8d:3d:e8:ea:a7:26:4a:8b:5d:a8:df:7b:5f:51:10:68:
98:13:68:e7:78:70:09:f8:cb:f7:85:9a:b0:c5:99:67:55:44:
c5:c9:46:31:0e:46:33:d8:a3:78:a9:bb:f0:44:f4:ca:f1:a3:
a6:03:06:31:43:25:a4:10:19:7e:6a:4f:8e:aa:2f:77:44:da:
d1:f3:3b:ff:40:66:06:4e:d9:f7:40:d2:ad:3a:a6:6b:79:93:
9c:b4:71:36:74:dc:e2:82:35:1c:60:25:cf:eb:b1:8b:a6:92:
76:45:ae:8d:5f:f1:b7:07:93:99:f9:ac:d5:1d:db:34:65:b9:
d2:e8:6f:7d:97:50:f3:55:d0:f1:c4:a7:c9:d7:95:55:fc:2f:
c0:c5:7d:99:41:32:6a:ed:d9:65:b7:51:fb:9e:8a:53:12:52:
5c:9d:df:eb:61:64:7b:83:e3:cb:d2:43:92:a1:29:5c:3a:31:
56:80:f2:88:c6:cf:f6:4c:db:3e:63:cb:ff:4d:fc:cf:a5:b7:
ea:82:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:32 2026 by rpki-client