Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier: ZnYDCf3W4pSb6xX0DUO6ALNttHEX7I3AkmUVkrfK0PM=
Subject key identifier: C7:1A:5D:10:E4:AA:63:EC:21:47:5E:10:3D:DD:9E:34:E6:99:4C:25
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial: 019D386623CD2F01DC1930D93926097D6E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number: 0AF1
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: 1I5gA6LUevC/6M5DdR2doxefopkPWwHhXKUTd4dOEJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:23:cd:2f:01:dc:19:30:d9:39:26:09:7d:6e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=c71a5d10e4aa63ec21475e103ddd9e34e6994c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:aa:a5:9f:df:2f:8b:9e:d6:e8:b9:a8:f1:
fe:94:c0:e9:83:8c:ac:90:70:9f:14:5a:92:89:17:
f7:39:0b:3e:0e:83:7e:fb:d5:90:ed:73:86:39:85:
6a:f2:23:8b:a8:6a:8c:be:dd:da:9a:5e:a4:fb:c0:
e3:ca:63:3f:fc:a9:23:e0:ea:d4:d7:f0:7d:f8:05:
12:cd:76:53:37:15:f3:2d:3d:d1:24:e4:a8:4b:f5:
9c:e9:33:5c:9d:a0:12:de:94:0c:63:ac:f4:7d:5d:
90:a3:dd:21:ff:2e:78:d3:14:27:ec:34:01:10:5e:
ff:89:b4:07:bb:f4:24:8d:03:50:99:79:86:fa:96:
62:97:c4:50:a7:cd:d6:57:94:0f:27:d4:a1:0f:c1:
2f:4e:c5:3b:50:2a:a8:97:c0:07:40:a4:e9:ff:5c:
97:94:aa:91:f1:90:77:99:1e:41:9f:d4:38:f6:a0:
98:58:29:09:4d:38:af:fb:02:d6:3b:b1:83:14:f0:
18:54:83:98:4b:d4:2e:42:f7:64:3e:33:6b:91:c8:
86:9a:7a:62:db:7a:0b:c4:4e:24:98:e7:f1:13:ca:
e8:bf:fe:6f:90:ea:a2:60:16:18:d1:d3:fa:7b:da:
79:35:04:73:86:70:5d:c5:c4:da:fd:60:3a:b9:d7:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:5D:10:E4:AA:63:EC:21:47:5E:10:3D:DD:9E:34:E6:99:4C:25
X509v3 Authority Key Identifier:
keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:96:3e:d2:bf:56:82:9e:1a:45:c3:5d:a2:94:45:97:65:43:
4a:9b:b3:3c:dd:fb:0f:db:b3:c8:29:d1:61:fd:59:29:04:6b:
3d:13:57:f8:a8:07:81:c0:19:3e:fe:dc:69:8a:1b:4a:eb:d0:
82:33:75:b4:18:36:df:cc:a0:b4:ab:5f:63:c4:fb:3f:cd:dc:
d1:f3:03:38:d0:f4:dc:90:93:b5:de:78:f5:6b:b0:b6:73:63:
a5:3d:a3:17:ef:4d:d5:e6:dd:9a:ee:b6:e6:97:9d:13:6a:9c:
d3:af:22:c2:75:32:bb:c4:1c:fe:49:c4:25:b6:a7:97:4e:c7:
fd:46:c3:3c:83:b4:a4:e0:34:f4:87:b1:a1:f0:5b:15:bd:f9:
f4:4c:93:cd:94:5b:d6:12:75:43:0c:1a:6b:62:08:4e:86:30:
89:a8:49:f9:e5:cc:d0:f6:b2:dc:09:ec:a2:be:ce:1e:08:29:
96:47:97:d6:03:f6:b9:8c:a6:f4:7d:4f:bd:4a:a5:c4:cb:f9:
d8:0e:d2:5f:68:ec:1b:c4:56:5e:38:0e:40:83:1c:a3:d9:17:
b9:3a:6c:75:08:f7:65:71:89:c0:a4:87:d7:cd:4d:64:d7:03:
9c:58:ab:1f:12:a5:f8:fd:3e:1c:ae:da:19:9e:32:06:41:dc:
8d:f3:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:40 2026 by rpki-client