Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: O5hQQtG2p5S3LXPEq7fO/gycx+KhdbSlEQ3SzRRlyw4=
Subject key identifier: 37:E6:33:39:AA:11:95:2A:83:B3:8B:4A:17:30:59:12:F8:EC:71:BF
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 019D3865DAF6B55671043A408AC54985B215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 0648
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: lAgNhPkSb9DvLBs5uK9iEsrobk2MTgHCzyaC9W60epE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:da:f6:b5:56:71:04:3a:40:8a:c5:49:85:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=37e63339aa11952a83b38b4a17305912f8ec71bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:78:30:f1:fe:14:02:1c:d6:9f:16:96:5f:
89:a8:77:f0:ee:ad:fe:f9:3d:c3:8c:f0:19:03:e1:
ec:8d:06:6b:52:bf:a8:5b:a7:f7:4b:39:60:4d:bf:
4b:dc:13:b1:58:37:15:89:79:7c:e3:69:97:57:f5:
a4:4e:72:6b:3f:49:45:04:79:f3:ae:f3:28:16:96:
9a:7f:6a:c6:85:fd:ef:56:03:95:d1:84:1a:92:68:
6c:ab:35:a1:4d:82:68:83:91:94:1b:ab:30:5d:91:
43:f3:94:a3:be:3a:18:ad:93:a3:c5:d7:a3:b7:f4:
1c:fa:3f:01:5b:19:f8:f9:37:c9:60:47:24:89:b8:
92:e0:01:40:26:0d:76:60:d4:50:a2:26:ff:4e:85:
12:5c:ad:3d:d0:96:47:cf:85:d4:28:99:00:af:ba:
ce:86:46:3a:71:6d:df:25:e8:e3:a4:c0:57:7d:17:
15:e6:a2:c9:3d:18:50:d2:60:85:f0:4d:b8:03:d1:
38:4e:7b:c2:ed:ec:84:fd:64:98:a2:c4:58:f8:09:
06:6c:c6:92:4e:44:0e:66:95:53:24:00:3e:df:32:
ca:ee:c7:b7:42:9e:01:2e:08:f0:22:8c:7c:d3:cf:
cb:d4:3c:7e:42:c9:0e:c2:db:e0:3c:60:17:96:cd:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E6:33:39:AA:11:95:2A:83:B3:8B:4A:17:30:59:12:F8:EC:71:BF
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:04:a2:ec:4b:60:30:eb:16:75:b4:82:e9:67:d8:94:77:b8:
ad:c9:8c:ab:c0:47:93:5e:17:1c:af:a3:10:e2:32:dd:c5:1e:
fc:8b:ed:0d:bc:79:bb:cc:3e:5e:03:8f:20:e0:7a:36:49:c5:
dc:0a:aa:6d:4b:5b:5f:df:41:17:0d:d0:fe:b6:6c:27:6b:51:
78:f6:1c:29:dc:f3:e6:d0:fa:f0:cc:48:c0:f4:11:d8:8d:a8:
f1:1d:86:6c:b5:de:1d:03:69:60:85:04:05:58:18:d0:04:ed:
f9:3f:4c:a3:5a:aa:a8:bb:fa:dd:fe:55:1b:43:d6:bb:1b:af:
68:63:ae:02:b1:dd:86:c2:39:5c:1d:cd:3b:99:0d:ed:d3:38:
de:79:a6:24:15:df:dc:83:5e:86:d9:6b:8f:b9:77:0a:e8:99:
52:72:7a:4c:25:bd:04:ca:46:15:0a:64:0c:00:a6:ed:e0:0d:
c6:96:fc:d7:9b:82:38:9a:82:d0:93:ce:cf:93:8c:ef:01:21:
69:54:c5:02:83:3f:7a:c9:bb:75:26:3d:34:5b:02:00:db:4b:
19:53:13:4d:01:94:26:c7:a7:22:8d:a1:a6:0d:42:96:0c:f8:
e4:ba:f0:11:15:f8:3a:ec:91:64:03:4d:f5:67:9e:95:5e:c6:
0e:19:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:20 2026 by rpki-client