Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
File: 26EAC0C665B207D6F15E4123457505C531F616E2.mft (raw, json)
Hash identifier: FAEsR5FzNpREEdBem1PgtFSe+VTYPCLe/FIn3uJywDQ=
Subject key identifier: 12:EF:27:D2:19:99:71:37:AD:76:68:89:8B:31:C6:63:E9:FC:48:93
Authority key identifier: 26:EA:C0:C6:65:B2:07:D6:F1:5E:41:23:45:75:05:C5:31:F6:16:E2
Certificate issuer: /CN=26eac0c665b207d6f15e4123457505c531f616e2
Certificate serial: 12822B855467BC8A71BD7DFD5DDC8831DDD78162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
Manifest number: 0F
Signing time: Tue 11 Nov 2025 09:01:57 +0000
Manifest this update: Tue 11 Nov 2025 08:56:57 +0000
Manifest next update: Wed 12 Nov 2025 10:36:57 +0000
Files and hashes: 1: 26EAC0C665B207D6F15E4123457505C531F616E2.crl (hash: rMYwrHcVib0wre9Vz+bg9HUPVELlvoOOgrHcuo6U508=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.crl
rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
rsync://rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:82:2b:85:54:67:bc:8a:71:bd:7d:fd:5d:dc:88:31:dd:d7:81:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26eac0c665b207d6f15e4123457505c531f616e2
Validity
Not Before: Nov 11 08:56:57 2025 GMT
Not After : Nov 12 10:36:57 2025 GMT
Subject: CN=12EF27D219997137AD7668898B31C663E9FC4893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:a1:18:5c:39:5d:ab:ea:b2:ab:da:63:3d:
d1:30:65:0b:9d:47:bb:35:8b:76:a6:b0:cc:18:2b:
24:fb:13:dd:7a:22:b6:eb:1b:67:27:b4:63:a4:9d:
6f:ae:70:37:78:6e:81:d8:65:9c:31:58:f0:86:cc:
4e:29:69:98:c0:4d:46:e8:68:b3:d5:73:b1:63:34:
2b:1e:27:4f:e2:fa:6d:f7:92:22:11:6e:f7:b9:e2:
f2:e9:b0:f6:fb:ca:f2:fd:49:f2:17:7a:6c:68:57:
50:21:05:a6:b8:df:5c:7e:d2:a7:50:9d:2b:1e:07:
56:84:d3:3d:f7:a9:c5:3c:fb:b0:6f:2a:dd:63:cc:
67:62:61:e4:cf:24:fe:92:c5:2e:8c:d4:76:74:e2:
bd:29:34:95:ab:0a:5d:61:56:5b:4b:13:dd:00:4a:
5c:bc:59:7b:60:2b:28:f7:6d:14:9c:5c:b9:96:f1:
a7:92:95:ea:cc:0d:b5:15:35:56:bc:cf:2b:ce:aa:
61:85:2c:80:a1:89:be:92:58:05:c3:0b:2b:f8:c4:
ca:3d:36:52:0b:bd:b7:4e:3b:e1:13:93:a3:ed:83:
ef:b0:e8:97:6d:41:b5:f9:73:06:40:78:65:32:8c:
58:8c:ae:d3:53:54:4e:35:4a:01:1d:cd:2c:69:54:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:27:D2:19:99:71:37:AD:76:68:89:8B:31:C6:63:E9:FC:48:93
X509v3 Authority Key Identifier:
keyid:26:EA:C0:C6:65:B2:07:D6:F1:5E:41:23:45:75:05:C5:31:F6:16:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:61:fc:c3:80:e4:05:d3:17:dd:3e:de:7f:15:f0:5d:ef:25:
84:ce:2f:2f:51:95:bd:56:6b:99:57:37:39:05:3f:74:10:fc:
e4:85:80:7d:ff:49:41:91:62:e7:5d:ba:88:2e:35:fa:3b:6d:
ff:3d:88:45:47:92:cb:6f:5a:71:fc:78:2c:10:a2:9e:66:aa:
50:9c:ce:03:f7:ae:22:0e:d4:ed:62:46:c7:e9:13:4d:a3:ac:
10:77:31:2d:20:c7:a6:4f:7b:5e:d3:56:05:6f:2b:70:99:bb:
32:04:27:0a:91:1e:80:4b:15:3f:ec:d4:14:4f:4e:86:c7:f2:
d0:62:d2:7a:44:98:b1:cd:19:4c:6b:b6:73:1b:28:af:90:e8:
ad:68:69:65:aa:ce:85:2c:7e:32:82:20:53:75:ae:1f:dc:b8:
66:dc:aa:2c:a3:49:5a:4b:3e:0d:2d:e8:50:de:27:50:f9:47:
0f:6e:43:0d:de:a8:9c:63:2e:9c:56:1c:66:47:a1:d5:be:6e:
5b:e3:b3:21:ee:4b:61:b3:d9:d2:16:17:c3:8a:72:f1:41:ff:
b9:a3:e2:93:39:df:75:2c:45:32:26:12:52:13:38:a1:3e:16:
27:b3:b5:b3:e6:97:4e:5d:2f:f0:36:4f:b6:06:ca:10:dd:eb:
37:1b:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:23 2025 by rpki-client