Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier: hv9C18EvTVvxGl5GSTxotQxiil7os7Ok1UGh4CRByg4=
Subject key identifier: BF:EC:F8:92:FB:28:B4:54:FC:E7:01:F3:9E:CB:D4:65:6A:A0:5F:A2
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial: 019D38658DC32C6FB2044FEC0087288C0813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number: 0E0F
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: QLRhGVHpF1Vh1ze+p/gU7Kr0hAeAc6d1mPJZE7z241E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8d:c3:2c:6f:b2:04:4f:ec:00:87:28:8c:08:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=bfecf892fb28b454fce701f39ecbd4656aa05fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:79:4e:43:f4:63:2a:37:7a:ac:09:44:4b:
03:38:d6:b5:0e:4e:25:ca:c3:fe:52:29:60:f2:9b:
bb:39:96:bd:06:e9:db:ed:72:b9:a5:df:a7:57:3d:
72:24:3a:28:ee:8b:6a:ed:b2:76:7f:88:23:ec:56:
76:93:95:b1:3a:8a:de:1d:03:ac:b0:ef:97:ba:bb:
57:79:29:53:9f:7a:0e:4d:9d:8d:85:a8:9b:f4:59:
2d:66:3a:ed:0e:e1:db:02:21:4e:ec:6d:8b:12:bf:
34:eb:fd:a0:bd:ce:b3:53:b6:90:2a:15:f4:d2:87:
c3:38:f4:e6:1f:dc:37:a9:1e:8a:99:01:d9:32:cd:
64:92:f8:d1:4d:21:f8:e1:ce:15:e0:d4:69:f0:23:
b0:81:7b:ab:4e:5c:e3:70:27:11:76:85:5a:9c:9d:
61:75:4b:3a:82:d3:dd:21:89:52:ef:25:c1:49:35:
eb:c6:fb:50:4d:ec:a4:80:9e:85:4d:3d:54:7c:1b:
27:c3:25:62:69:be:4e:61:e0:e8:d7:74:6f:05:0a:
c0:f8:12:e9:8f:a9:22:46:52:cf:cd:ff:cc:11:f5:
e0:5e:72:4a:cb:ed:01:0f:98:7d:35:6f:c2:ff:0f:
16:ed:1f:13:de:d6:c1:a7:81:06:1e:5d:42:b0:da:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EC:F8:92:FB:28:B4:54:FC:E7:01:F3:9E:CB:D4:65:6A:A0:5F:A2
X509v3 Authority Key Identifier:
keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:80:01:0c:1a:91:5b:ff:90:0b:08:00:18:dc:ea:51:3d:ea:
8e:1c:48:78:b0:ed:d6:77:8f:a5:e6:11:d8:5c:35:af:54:94:
45:e8:26:f8:ff:e9:18:2e:a9:0a:a7:e9:7e:24:eb:19:bd:92:
ea:67:97:36:05:62:37:23:f0:3c:a6:e2:f1:a6:f7:8f:be:ed:
28:df:fd:f1:07:36:76:82:8f:05:1d:6a:ab:cc:83:47:20:79:
9f:7b:f2:d9:65:7d:e0:29:9c:bd:39:a5:c7:eb:77:f5:65:9e:
a5:af:94:8d:ac:65:9d:f5:96:eb:07:f6:6f:2f:bc:3c:ff:e7:
4f:00:42:13:55:05:17:82:a4:0d:d9:a0:d0:5e:80:89:af:f2:
f5:ba:67:ff:f3:33:52:5d:97:bf:53:84:f1:7a:31:bf:7d:e8:
91:ed:5a:97:45:8c:e0:09:94:c6:12:78:cd:d6:a8:14:f5:62:
8a:a4:63:e4:94:17:ed:56:40:e9:7e:05:ad:17:db:28:30:f2:
c1:70:80:5f:77:78:79:0b:8d:7c:ae:41:cc:3e:cb:03:ee:f3:
d7:99:d7:c3:0d:75:d7:5a:a1:b0:73:b3:bf:44:dd:84:96:15:
8a:2d:19:f6:7e:b9:e2:bf:83:b6:77:f6:b0:c1:0d:c9:ff:a8:
fe:85:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:27 2026 by rpki-client