Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft
File: cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft (raw, json)
Hash identifier: 327LlkgG8zyH3aey7o2O9ptd1hXUfYYGFsSekxdSnnM=
Subject key identifier: 27:CF:24:21:67:CB:B5:71:8D:9B:64:E2:CC:37:B1:F8:F8:11:8F:2E
Authority key identifier: 70:B1:B1:AA:11:CA:4A:A4:A3:76:E5:C7:2A:92:1A:F4:C2:77:78:39
Certificate issuer: /CN=70b1b1aa11ca4aa4a376e5c72a921af4c2777839
Certificate serial: 019D390997254B2980959A9E951B8023F0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGxqhHKSqSjduXHKpIa9MJ3eDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft
Manifest number: 9E
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: cLGxqhHKSqSjduXHKpIa9MJ3eDk.crl (hash: 4/DkQSxpcvPuxIIv6F19pjv6dFSveBr3bS61AvLtTYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGxqhHKSqSjduXHKpIa9MJ3eDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:97:25:4b:29:80:95:9a:9e:95:1b:80:23:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b1b1aa11ca4aa4a376e5c72a921af4c2777839
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=27cf242167cbb5718d9b64e2cc37b1f8f8118f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:fe:8b:b5:fc:82:2d:d0:46:4c:11:b1:69:
49:2e:c1:7c:01:e7:e0:a9:65:ec:cc:56:77:fd:ee:
82:73:8b:50:93:a0:42:73:bd:1b:bd:95:16:fe:50:
af:bc:43:e8:ad:9b:d2:d9:e4:f7:00:b0:1a:cd:37:
b2:2e:4b:f5:52:6c:14:09:f4:e7:a6:9c:89:dc:35:
fa:d2:e0:ff:59:36:e0:00:d3:36:3d:96:46:19:2a:
04:88:f5:a2:20:dd:62:22:0b:46:19:76:af:45:a6:
97:b3:2b:a9:e9:22:b6:09:24:3b:d0:b6:79:bf:db:
8c:fd:31:97:45:11:e8:72:84:85:bf:bd:94:ca:a0:
db:0b:50:32:e7:71:c1:a3:74:99:78:aa:4b:8d:ee:
4c:34:ec:7e:ec:9c:31:35:7e:86:f0:85:c5:08:b4:
87:0d:a2:0b:b8:42:4a:ec:07:c4:32:4e:9a:f2:80:
a1:43:22:d1:e2:c5:20:d7:f3:0e:8e:31:31:e4:0a:
75:53:d0:42:e7:c5:19:8b:b8:d5:5a:f6:86:9f:d0:
9d:39:98:07:a3:f3:cf:65:21:63:72:16:7c:b4:34:
b9:69:8a:db:47:88:be:bb:ae:2c:8e:6b:99:65:0e:
8e:71:8e:31:a2:b3:51:e8:3e:b5:58:5f:e5:e3:40:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:24:21:67:CB:B5:71:8D:9B:64:E2:CC:37:B1:F8:F8:11:8F:2E
X509v3 Authority Key Identifier:
keyid:70:B1:B1:AA:11:CA:4A:A4:A3:76:E5:C7:2A:92:1A:F4:C2:77:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGxqhHKSqSjduXHKpIa9MJ3eDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:88:2b:c7:ab:f4:d7:40:fa:a6:73:d6:04:80:71:e4:4d:52:
8f:1f:d9:11:ea:79:a4:3d:21:10:e0:cb:23:f4:eb:93:2f:49:
f2:ad:4a:cb:fc:4f:1f:de:52:43:21:f4:28:44:aa:23:e6:ed:
c1:95:26:a9:e7:e5:ab:5c:63:ec:70:68:57:25:93:c3:25:32:
c6:ae:86:24:87:a4:e2:91:5e:03:c5:2f:8f:4e:94:cc:a3:44:
c0:10:71:22:2b:20:49:67:6b:01:e6:8b:9e:c1:bc:b5:3f:c0:
69:a8:ff:98:62:f0:92:68:02:9b:6e:a7:49:9f:a8:49:83:f8:
e8:be:fc:32:3a:e7:4c:39:da:80:91:c5:fe:77:b5:32:da:bb:
cc:30:04:30:9a:ae:bd:be:10:ac:42:03:87:a8:38:c6:e2:17:
36:10:e0:cf:df:41:62:66:3b:ec:7e:ca:fd:06:2a:82:4b:cb:
66:ff:7a:1a:15:66:a4:59:fe:96:14:a8:19:34:1d:6e:e6:8d:
b9:d8:3c:20:33:7c:2a:e0:85:06:67:1e:b0:0c:9d:c9:42:e2:
af:13:fe:08:db:fa:62:12:60:a3:ce:f4:2f:32:de:8b:ee:61:
36:44:d4:0f:74:95:ea:0b:3e:cf:d5:24:bd:8b:6b:5d:58:d0:
60:c4:c6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:53 2026 by rpki-client