Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File: 169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier: 7f1BL3hDi4qOEycHoFonEkVfdhan/3pIop2EgsRKWmA=
Subject key identifier: 3B:30:A8:48:1D:C2:40:6C:B5:29:03:FD:90:25:52:E2:11:51:C9:CD
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer: /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial: 019D3909C56A181A1DF2F8F8F391B3C1EA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number: 0E38
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: JX62wUQMMbQj1FljsqUuK3HEPOzVoq1K5ir/oobCW0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c5:6a:18:1a:1d:f2:f8:f8:f3:91:b3:c1:ea:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=3b30a8481dc2406cb52903fd902552e21151c9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:30:5a:c9:ef:f0:48:7c:90:77:9e:bf:a9:
ea:0c:cb:a9:54:09:b9:fe:1b:6e:69:4a:b2:fa:14:
dc:71:2e:06:bc:40:39:a8:6a:0a:06:45:24:af:e3:
22:c3:29:00:ce:e4:84:36:f1:89:5a:58:03:53:22:
cc:5c:7e:7a:dc:b9:a8:6e:01:ff:e5:9c:e9:bb:c0:
21:a9:d8:40:07:21:67:95:85:13:1e:de:f7:5d:44:
71:78:9b:8a:6d:04:c5:fe:6b:c6:ba:26:ff:87:64:
fc:6a:9d:7e:7f:4e:74:23:c5:92:ca:cf:16:88:1b:
69:6a:51:b2:10:1c:34:20:c5:88:51:1c:16:98:d7:
c6:0f:29:9f:b9:e9:1a:7e:cc:dd:c8:fb:4f:ae:89:
8f:91:49:81:b8:92:a8:4e:fe:16:47:6a:77:c7:69:
c8:67:79:21:84:2d:03:e1:e6:45:e6:32:18:2d:46:
9b:e8:8a:66:5e:fd:08:15:35:14:dc:3c:d5:c4:67:
df:53:b6:1e:c7:e6:78:8b:16:00:4e:dd:b7:0c:63:
0a:40:6a:12:c8:e9:19:2d:56:d9:41:12:e3:0e:47:
42:e2:e3:c9:f1:99:96:20:89:d1:87:b3:dc:f8:b2:
b3:d2:42:89:bb:59:9a:17:05:df:3a:6f:a5:9e:33:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:A8:48:1D:C2:40:6C:B5:29:03:FD:90:25:52:E2:11:51:C9:CD
X509v3 Authority Key Identifier:
keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:94:0e:9f:e0:ef:e1:ae:e4:0b:a7:23:2f:e7:26:01:bb:
e6:a3:05:20:73:fb:34:94:18:49:61:52:5a:2c:05:4d:94:d3:
c2:0b:5a:f3:0a:56:48:0b:94:8f:24:f9:b6:19:43:c4:bb:12:
35:3e:1c:82:5b:62:66:29:c7:6c:ae:49:3f:a9:bc:cf:93:4d:
ef:98:d1:60:83:c2:1f:59:b0:4d:31:8a:06:c2:1a:64:26:90:
4c:92:3d:ec:00:ff:32:ee:dd:f7:75:c2:c1:68:2a:24:0a:4f:
9b:68:2b:6b:cf:c4:78:02:06:fa:09:a5:2e:32:bf:7d:9f:62:
24:f0:4a:fd:ab:05:ab:97:8f:63:52:d0:02:6a:bb:76:d4:99:
cf:c5:1f:65:55:41:70:1f:4a:8d:0b:bc:f6:46:be:81:60:d6:
c5:3d:a8:53:c4:68:94:e4:c3:54:c6:cd:ad:37:f3:fc:3d:21:
c6:04:ac:b2:a4:c3:bf:e8:7a:ab:e7:6a:63:4f:5d:1a:c7:f3:
94:7d:5a:92:94:7f:f4:d4:dd:e1:b8:10:ae:a7:d6:33:8b:69:
87:72:01:3b:f8:f9:51:57:9b:6d:07:32:56:2c:67:73:b6:c6:
ee:2d:ab:f5:2e:31:cd:27:09:7a:7c:13:aa:c2:69:14:f0:17:
23:6b:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:54 2026 by rpki-client