Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: OxYRSKKboxaygK4koTjT6vpfPjUCeTHgr7HQjYc7fVI=
Subject key identifier: FD:BD:4D:78:4C:90:39:7C:ED:E8:82:FF:33:92:2D:65:96:D6:72:98
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 019D37C107DAA25DD58C16E2618DA9F59BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 1363
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: tORXdMXJ/8GWfvLGjf2fbpblsdN+D+0rE1Q1qaAarFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:07:da:a2:5d:d5:8c:16:e2:61:8d:a9:f5:9b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=fdbd4d784c90397cede882ff33922d6596d67298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:b8:b3:f3:d0:87:af:db:17:8f:86:88:78:
f9:d5:5f:88:2f:ea:45:cd:c6:57:a5:ae:ac:9a:25:
0f:5f:a8:c2:5a:19:1f:47:c3:0e:3a:41:3a:eb:c5:
58:f2:34:cf:76:1a:89:be:9f:70:8a:59:9f:a3:3e:
52:1e:bc:a7:9a:85:99:6c:2f:2a:6a:28:6e:5c:62:
e3:df:57:a5:56:92:ea:bf:ba:e0:1b:d7:03:df:37:
a7:73:17:67:ea:76:dc:9c:3f:c0:62:0f:c1:18:98:
d3:c9:d6:2e:96:f1:d2:e9:a3:62:13:0e:dc:01:f5:
6c:a6:74:06:11:7c:a5:ca:56:74:3b:1f:7c:46:0a:
08:4d:77:6c:53:31:78:a4:7f:39:9f:16:0f:ae:8b:
71:63:58:38:80:8b:ca:52:cd:6f:a7:e2:1d:b9:81:
70:ad:8d:d0:37:69:fe:02:43:ea:8f:58:dd:0a:f0:
77:3e:a8:c4:02:3e:a3:a5:4d:71:01:c1:2d:c1:b5:
7d:07:53:41:4f:94:5c:ec:51:85:90:dd:b1:9b:bf:
93:ff:51:6a:a2:09:ef:3a:4f:94:77:69:7f:a6:c1:
b7:39:3f:90:92:67:9c:a3:c8:c5:3f:01:58:c7:ca:
ce:37:a6:10:fb:dd:e8:9a:22:e7:98:21:cf:ed:d9:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:4D:78:4C:90:39:7C:ED:E8:82:FF:33:92:2D:65:96:D6:72:98
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f1:91:22:21:c5:c1:ae:51:6a:26:a5:98:19:42:9e:71:a8:
14:8a:55:1b:37:2a:39:f4:37:a8:f5:89:73:45:09:6f:7c:12:
d9:cc:07:98:ea:9c:c8:00:01:2c:04:64:b2:83:75:06:ef:90:
38:9b:b3:2b:45:4b:6d:e3:51:25:84:4a:8a:0c:94:95:67:10:
ef:44:2e:9f:50:50:94:40:e6:ac:d3:b4:d3:f4:9a:cd:e3:84:
7a:ae:8f:62:50:c0:3f:5d:29:53:9b:53:0a:dd:dd:38:a5:fc:
ad:4f:8e:1a:ae:44:a9:87:76:e6:b3:71:44:bb:86:1e:15:00:
6b:d8:57:a0:c4:be:54:c4:f7:ad:7e:ae:de:12:fb:7a:ba:39:
a5:95:f3:0d:90:ae:ed:90:90:61:24:53:40:33:3a:e4:c5:11:
61:a3:ca:0e:24:0c:92:81:d5:90:bb:c4:3f:83:76:9c:39:94:
01:92:69:be:de:71:1a:ed:fa:df:e2:a8:50:73:51:5e:1a:75:
2d:21:32:b2:4f:5a:ed:79:cc:06:74:3c:33:e6:31:c6:c4:53:
68:f3:06:8c:d5:41:20:e9:5c:5f:03:57:d6:85:8f:7c:7e:c6:
44:9d:97:d4:a2:89:31:b3:2a:2d:ed:84:b5:bd:41:07:ac:22:
8b:5c:d5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:14 2026 by rpki-client