Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File: e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier: 5fHM7SFcm/IFUBI+TaECwTfpu2ELTqQ3QHP8qNacCTU=
Subject key identifier: 24:C3:A0:16:BA:63:39:75:56:8C:89:88:79:89:DD:0B:34:3A:BB:8F
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer: /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial: 019D371BF5F40609E4822E2A126FFBA205AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number: 0866
Signing time: Sun 29 Mar 2026 01:01:12 +0000
Manifest this update: Sun 29 Mar 2026 01:01:12 +0000
Manifest next update: Mon 30 Mar 2026 01:01:12 +0000
Files and hashes: 1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: aIELRCTRSsUK6HHPmsbf305BjVlhoeiXkvlrlpwnQY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f5:f4:06:09:e4:82:2e:2a:12:6f:fb:a2:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Validity
Not Before: Mar 29 01:01:12 2026 GMT
Not After : Mar 30 01:01:12 2026 GMT
Subject: CN=24c3a016ba633975568c89887989dd0b343abb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ce:2c:9a:c4:2f:67:98:a3:59:cf:9c:4f:00:
a4:6f:8a:d4:d3:44:bd:81:84:46:fd:7b:84:72:c7:
54:c3:43:03:3a:7e:c4:b3:df:72:fa:ed:d3:0a:27:
3a:e1:4d:72:b1:89:7a:e9:2a:de:3d:5a:d0:1b:66:
5f:c9:57:c3:d0:1f:70:58:54:22:c5:57:c8:47:76:
80:df:00:df:01:e3:27:39:86:cd:9e:b3:3d:00:23:
92:5c:60:c1:43:06:61:cd:44:2f:54:99:ef:ba:b9:
fe:e2:a3:04:a4:f3:39:82:fc:d1:6d:a7:8b:56:3d:
1e:12:41:bc:45:7a:e1:cd:ad:fd:76:fa:51:d5:ee:
37:be:47:d4:8c:99:74:9c:2d:62:1d:28:72:1e:67:
62:72:73:b7:95:1e:f4:57:7c:9a:1e:95:e2:d7:30:
42:a7:f1:55:c0:01:4d:9f:7f:bc:d8:a3:dd:b9:97:
cd:da:a0:c0:b1:7d:c5:fd:b0:f7:3d:35:fe:d6:9d:
6d:3f:86:38:6c:31:2f:49:d8:b5:ec:2b:58:a2:4a:
0b:ba:1c:d1:d5:21:9f:db:53:0f:4a:80:01:f6:52:
ea:13:5b:9a:bb:88:5f:a9:42:57:49:b2:f8:19:c1:
13:0f:f4:10:8b:6f:2b:5c:a9:b3:87:70:51:62:70:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C3:A0:16:BA:63:39:75:56:8C:89:88:79:89:DD:0B:34:3A:BB:8F
X509v3 Authority Key Identifier:
keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:af:88:22:f1:99:32:be:2e:46:de:1d:5b:95:c6:5e:78:c3:
40:d4:69:88:24:90:a4:8c:83:5d:82:60:1f:af:26:4a:25:d5:
51:6d:7b:42:1f:a9:95:e1:d5:50:a3:73:e7:b3:9c:f0:57:47:
62:32:67:e2:a5:27:f8:8b:90:9d:19:9d:16:94:e8:12:68:a4:
83:de:60:4b:6d:bd:25:b6:b9:59:84:03:de:6d:53:f2:fb:fe:
ff:7d:c1:8e:5a:8a:83:16:79:86:b0:4f:80:e7:72:8d:d8:95:
e5:c9:e1:3d:ac:70:40:1a:bd:18:a7:97:a7:74:4d:48:55:1b:
f2:a8:93:98:33:a0:02:fc:ae:12:a8:c6:3a:77:60:a6:e0:f5:
b7:ca:9e:13:60:6a:75:13:a6:c1:94:3d:a8:d0:e3:3f:74:ea:
51:83:8b:33:9c:c1:08:a9:66:6e:99:3e:9a:b0:c3:ba:92:03:
69:b2:a9:1a:67:ba:17:fb:ee:3b:e8:62:e2:cc:f1:e3:61:d6:
76:97:a5:35:43:6d:65:4e:32:c4:d8:f7:6d:f3:72:8c:90:9b:
af:9f:63:be:b0:52:97:7e:ee:ec:7e:2e:5f:fe:88:9e:7c:6a:
40:08:83:5a:4b:72:9a:f5:2c:42:33:eb:b0:f6:aa:e1:a4:2a:
d8:d5:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:18 2026 by rpki-client