Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
File: tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json)
Hash identifier: qMWT7anas7RWLy1xYmGtK2CgYErR/MUNAhvmJhok77Y=
Subject key identifier: C2:F3:39:B0:A5:68:01:EB:92:41:87:E5:CC:BE:4E:C0:DE:CC:53:7C
Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
Certificate issuer: /CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Certificate serial: 019D3865B2F8829DEF88E3474F5606BC958D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
Manifest number: 1092
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: CYioSBjXCT2mTl+6uFk8Dga4uDa4lMT/LolLHLYPhJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b2:f8:82:9d:ef:88:e3:47:4f:56:06:bc:95:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=c2f339b0a56801eb924187e5ccbe4ec0decc537c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:e6:00:6d:da:9c:4a:7d:6f:ad:55:4e:34:
98:33:54:a6:df:d3:7b:b3:63:de:b0:de:fd:97:67:
0a:18:95:23:5d:9b:7b:26:6e:07:3c:6d:1f:89:48:
a5:d9:50:09:1c:52:c0:3b:ce:4d:e1:21:f7:c3:6c:
7f:95:66:40:55:32:08:c7:d6:04:30:c0:2a:24:04:
c3:ca:1e:0b:bf:c4:a8:88:f8:8a:3b:5c:d1:bf:f0:
30:b9:7b:f3:4d:9c:e5:8e:10:08:63:e4:c4:47:62:
ca:22:e4:33:2a:0b:10:45:29:3f:51:dd:6e:86:d8:
46:28:34:94:ef:ac:b4:0f:16:bb:0a:46:d6:cf:8f:
5d:93:bf:01:13:b4:eb:c3:70:24:da:08:b4:4e:f4:
9b:3c:47:2a:8c:e7:01:bc:e5:d7:45:e5:4e:c9:50:
ea:e0:b0:61:02:2b:4c:8a:7f:ac:84:a2:de:f6:07:
5e:91:47:db:40:11:ed:96:65:22:4f:32:95:eb:73:
54:1d:d4:77:e1:e4:3f:41:87:d6:7a:70:ef:27:0e:
18:6b:32:ce:7f:e1:bb:b1:b2:5d:65:fd:02:69:f4:
5c:f5:65:be:c3:bc:da:09:ea:7c:41:24:08:65:b9:
2f:71:40:9e:9f:a4:4d:c0:6c:d7:31:4c:f6:7b:43:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:39:B0:A5:68:01:EB:92:41:87:E5:CC:BE:4E:C0:DE:CC:53:7C
X509v3 Authority Key Identifier:
keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:78:3f:e0:c8:de:94:8d:07:e1:f4:ef:0b:46:14:b9:f9:ad:
cd:66:b5:50:97:5f:35:9e:cb:1e:1c:b8:dc:0a:bf:2c:4c:e2:
c8:26:8e:49:c9:50:2f:7c:3f:8c:d6:d4:f5:f3:0d:fb:0d:42:
57:37:fc:2c:e5:40:b8:07:7f:02:b4:3a:c2:af:8f:a8:91:d6:
0a:4f:29:99:e0:ca:0d:2e:65:05:b8:72:b4:0d:73:5f:cc:e1:
de:e5:3b:ed:43:f4:d5:cd:16:45:32:b8:f9:27:08:92:7d:1f:
ad:5d:0c:73:7e:b4:8f:55:c8:cb:f2:49:4a:1c:72:65:a1:6b:
84:8b:5c:a1:b7:81:91:72:07:f1:1f:b1:ec:65:15:ba:ae:35:
0a:df:e8:6d:4d:45:90:ae:f2:85:25:2c:bc:59:ba:73:9e:b9:
3f:5f:be:a5:47:6c:e8:cf:ab:e1:c4:72:c6:ce:66:b0:9a:5d:
67:fc:17:5a:d5:2b:73:f0:21:68:b0:6f:c7:20:9b:b2:cc:a0:
b8:5e:3c:21:64:66:7f:a5:67:32:17:3f:90:78:e1:cd:53:41:
48:d0:c9:c0:73:e4:2f:87:f8:fb:42:09:77:a1:38:55:47:e1:
7a:36:52:5d:20:56:eb:63:6a:d5:73:42:3b:18:a5:bf:2d:2d:
28:e6:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:13 2026 by rpki-client