Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
File: R34OvwADKaAhrl6PHYHEBfuNCzw.mft (raw, json)
Hash identifier: 1udpMX3cRotsEUVwEVsn+IO8LWMyOwpHKascEe9UD8k=
Subject key identifier: EB:92:FF:B1:C6:5E:AA:F3:23:DD:33:19:43:EF:87:11:3C:A1:A5:FB
Authority key identifier: 47:7E:0E:BF:00:03:29:A0:21:AE:5E:8F:1D:81:C4:05:FB:8D:0B:3C
Certificate issuer: /CN=477e0ebf000329a021ae5e8f1d81c405fb8d0b3c
Certificate serial: 019D39098D652B726A3F1D782308D7188A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
Manifest number: 01BC
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: R34OvwADKaAhrl6PHYHEBfuNCzw.crl (hash: fFcxQhQPgBE4GPF7SbRokdzdmv2jwkFcRQ3oLmORtJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8d:65:2b:72:6a:3f:1d:78:23:08:d7:18:8a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477e0ebf000329a021ae5e8f1d81c405fb8d0b3c
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=eb92ffb1c65eaaf323dd331943ef87113ca1a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:ac:6b:1b:1c:0f:ef:40:92:af:cf:2d:14:
ad:0c:a2:ca:7b:8a:9e:f8:d1:8c:46:1d:a9:97:25:
dc:da:27:84:2f:a9:8e:95:08:f5:c4:d2:ac:f4:ac:
ac:15:27:21:d8:8e:2c:96:e5:2f:40:dc:39:49:be:
37:04:93:aa:95:5c:98:da:d9:03:cf:ed:b7:aa:93:
9a:ab:d2:55:16:de:10:d0:10:d1:8f:9a:39:06:09:
7b:51:bc:61:f0:b4:df:aa:c2:90:a0:7a:a4:e8:54:
06:5a:cf:35:2f:11:1f:ae:ba:27:e4:73:c5:ea:b4:
3b:b7:e7:23:f0:7e:02:86:8d:e4:2f:28:86:96:6e:
d8:c4:97:2e:84:bd:fe:0f:16:6d:76:0b:35:09:83:
14:e8:8e:0e:68:18:44:f5:41:8c:55:11:eb:93:b6:
36:5c:4b:73:6a:c6:bf:1b:c1:b0:8e:14:b7:67:5d:
cd:ac:88:67:a9:8a:1b:ba:40:bd:31:4d:21:2a:50:
61:93:ed:f6:ae:da:2a:32:a4:3b:fe:01:0e:c8:9d:
3b:47:c3:9b:eb:07:41:28:36:fa:c5:46:bd:ae:a2:
98:9c:69:d1:f6:b8:5c:5c:0f:0c:9a:25:0b:52:dd:
4a:71:3b:b7:9f:0e:e9:3f:d9:65:3a:1e:79:20:d2:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:FF:B1:C6:5E:AA:F3:23:DD:33:19:43:EF:87:11:3C:A1:A5:FB
X509v3 Authority Key Identifier:
keyid:47:7E:0E:BF:00:03:29:A0:21:AE:5E:8F:1D:81:C4:05:FB:8D:0B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1a:39:19:f1:c9:62:fe:52:09:7a:c5:b4:ea:bd:63:85:61:
5d:ad:44:cc:a5:e2:25:ab:3e:8f:9b:f1:8b:db:ea:51:2f:57:
67:a4:18:2c:fa:19:0d:d9:82:ca:73:68:58:9f:04:de:b9:88:
1f:b2:ed:2e:7b:aa:64:fd:d1:6a:90:fd:13:f2:9a:36:5b:dd:
00:2e:d1:d6:8a:76:d0:0e:89:19:89:7c:61:16:20:2c:bd:04:
63:cc:08:83:27:7d:87:59:98:f3:2a:08:55:0e:e2:0e:fb:a4:
28:46:97:41:4f:a9:69:5f:fc:04:c8:50:0d:ba:a1:32:9a:26:
c9:2b:52:31:d8:0a:c4:35:e2:45:99:4d:d0:aa:bc:23:11:b9:
67:5f:61:73:68:91:8a:d2:0b:4c:d8:0b:8b:80:87:25:09:2e:
c1:c9:e9:f2:ea:bd:b5:f8:dc:f7:74:36:75:b5:e7:97:6c:0c:
23:5f:5e:c2:44:49:c3:f7:88:c5:22:79:83:42:82:f9:10:f2:
98:13:98:f0:92:60:a9:32:cd:84:4f:b9:53:c7:fa:35:57:0e:
5c:9b:d0:6c:56:3b:7d:96:32:9d:ac:af:67:50:e3:26:ab:c3:
dc:5c:70:ee:4d:cf:b3:58:22:c1:c9:74:db:07:1c:a3:9e:91:
19:1e:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:35 2026 by rpki-client