Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: u5ui4K48JlJ6BfiH5AdUDMJW1rsBWr/vXjudAtmPBzY=
Subject key identifier: F7:9F:D8:8E:47:5E:C6:5C:F6:18:58:27:3F:40:8C:4A:1F:42:CA:6A
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 019D38665198156F430F860E06C1C0BEFA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 0B55
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: kszBvlgYERHMAdCluodfJj6whD61MqWy8x8NKD9A3eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:51:98:15:6f:43:0f:86:0e:06:c1:c0:be:fa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=f79fd88e475ec65cf61858273f408c4a1f42ca6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:86:ac:3c:29:e6:22:b3:d3:78:24:40:63:
b3:f0:21:d4:43:e2:fa:98:33:57:05:dc:3b:4c:87:
e1:46:d2:fd:8d:69:18:1f:70:0a:88:4c:5c:54:d8:
12:69:f5:1d:2f:19:e4:45:43:b7:16:70:35:16:b5:
a5:38:49:40:59:73:05:15:b4:4b:3a:13:7f:91:86:
23:20:6c:15:5d:98:50:22:3c:73:06:74:0b:e2:46:
63:50:8d:4b:70:7e:aa:37:a3:46:98:d4:80:39:7f:
a4:c7:ce:d3:f9:48:56:86:84:26:44:25:4a:6a:36:
cc:7f:7c:20:d8:c7:23:ef:bd:0f:a7:13:ba:9f:d1:
c5:57:4e:d0:2b:e1:15:89:b9:d0:26:76:88:3a:c2:
aa:58:b2:3f:87:5e:ee:b9:08:b5:1a:10:71:3c:7f:
09:53:dc:36:70:f6:55:5b:57:d0:56:2e:62:24:75:
d6:b4:79:b9:e8:af:05:37:c6:27:d5:3a:28:0d:79:
67:08:0e:19:5e:ca:43:87:c1:cf:d4:c0:c0:dc:85:
f0:12:b3:7c:26:eb:5a:80:24:af:b5:e8:33:d0:67:
cf:7b:4f:ea:e5:50:e5:40:9e:f4:4e:36:80:c4:3a:
06:ef:61:b4:c1:9c:6e:26:a5:af:49:1f:53:ff:1e:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:D8:8E:47:5E:C6:5C:F6:18:58:27:3F:40:8C:4A:1F:42:CA:6A
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d0:c1:3f:93:8b:98:8d:e7:32:09:79:1d:99:79:52:34:6b:
93:81:82:63:be:cb:de:65:6a:d0:df:4f:16:9a:e5:79:d0:ee:
6c:f0:20:ca:9e:82:cf:22:25:45:79:43:31:38:0d:8f:2c:c8:
2b:16:21:62:f8:ae:31:72:46:61:8f:59:8f:42:f6:17:a2:17:
59:a0:1b:a3:68:12:a1:10:d5:e9:20:3c:83:05:64:f2:27:d2:
8b:4a:a2:fc:38:ed:51:fe:0a:03:fd:c3:63:c7:ec:c4:ee:eb:
cd:88:49:c9:1c:d6:3f:98:1d:d3:d6:dd:d6:ff:01:8e:c6:0c:
ad:c0:c3:52:ca:cd:f3:fc:d5:d0:bc:25:3d:1c:86:a9:56:ea:
81:19:f9:4d:3d:e5:62:69:c2:48:41:b2:d0:f8:f4:70:8f:7d:
8d:0e:e5:60:c3:bf:45:a3:62:69:8d:82:9e:1a:f7:56:71:a6:
23:1e:71:62:f4:d4:f1:de:de:5f:a5:c9:d3:b0:de:15:c1:8b:
a5:95:a2:83:28:72:be:97:7f:49:ac:88:a9:de:6a:4a:5f:8e:
34:3e:dc:31:e6:8b:90:ca:da:e0:15:2d:08:c5:0c:3d:3d:d5:
81:ca:6a:8b:4c:ba:1a:08:52:56:09:0b:c1:d5:13:72:23:6e:
be:1e:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:43 2026 by rpki-client