Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: bj8kRJYmhZWaP1mAgz8/OinytkEQR2104M332fuk4pg=
Subject key identifier: 8E:2A:7E:E8:E0:8D:AB:76:A8:CE:16:99:E0:45:3E:B0:74:A4:5C:35
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 019D29615E2A2F2FBB5DDE79E51D5946392F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 0D2A
Signing time: Thu 26 Mar 2026 09:02:20 +0000
Manifest this update: Thu 26 Mar 2026 09:02:20 +0000
Manifest next update: Fri 27 Mar 2026 09:02:20 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: cLCdoa+MwdBVn7n1RIBaK98mUOkAfq1m91x8XZ2Lnkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:5e:2a:2f:2f:bb:5d:de:79:e5:1d:59:46:39:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Mar 26 09:02:20 2026 GMT
Not After : Mar 27 09:02:20 2026 GMT
Subject: CN=8e2a7ee8e08dab76a8ce1699e0453eb074a45c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:4a:74:a9:61:61:e5:6a:1c:54:ff:89:81:
d8:06:cc:1d:3a:ee:0b:01:74:ef:68:02:b6:cb:6a:
38:d4:ee:5e:a4:a1:e8:f5:c6:28:e4:ab:a8:41:f2:
04:cc:7a:89:cf:03:3d:70:a0:66:82:c4:ae:f1:06:
de:36:0e:79:f0:01:09:e6:d1:e8:18:2c:07:c0:93:
30:de:15:5e:92:e1:52:05:cb:e1:8d:a7:e5:bd:8a:
7d:20:c3:91:aa:cd:78:da:4b:ee:c3:79:ce:83:6b:
7d:d9:e3:cd:27:5f:07:ac:28:2e:6f:55:a5:59:61:
2c:41:bb:73:56:24:0b:a8:8c:b4:81:b2:5b:dd:f2:
49:e8:45:47:78:18:3b:31:bf:03:5c:1c:9d:89:0a:
f8:12:9a:66:7d:f0:d6:25:ea:d4:e1:74:7e:03:f7:
ea:2a:6d:29:b4:1e:40:f2:19:76:94:9c:e5:d3:c1:
c7:7d:25:a3:61:13:10:53:7e:6e:2a:a1:04:84:dc:
d1:8a:ac:de:4d:6c:95:0e:c5:0c:6c:f1:50:3c:f5:
09:4c:d4:c5:b1:3e:1f:1c:64:60:3c:a8:41:18:20:
0a:36:22:56:87:51:44:ed:6e:82:d3:c8:29:f4:65:
b2:f3:da:23:65:b4:0a:b2:47:d0:db:fe:e2:97:fb:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:7E:E8:E0:8D:AB:76:A8:CE:16:99:E0:45:3E:B0:74:A4:5C:35
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e6:31:bc:15:24:1d:ec:66:3e:e2:79:f2:83:f3:30:2f:c3:
d7:35:87:f5:4c:a2:2f:28:25:d9:e3:3d:26:01:23:e2:c7:ea:
6b:32:63:52:e4:e4:9d:94:fa:4e:93:8e:72:b1:3a:78:13:cf:
c3:77:1d:87:40:19:44:8c:86:d1:f0:30:6a:7a:19:c5:02:a9:
67:41:4e:99:f6:5a:52:e7:f2:ba:c4:d7:68:71:a6:65:00:a1:
2a:a6:ca:56:d2:16:3b:ae:27:d3:e0:b5:f4:92:08:eb:3d:7e:
0e:d1:d7:c9:1f:4e:e3:e0:9a:85:35:5b:8c:38:ef:fe:34:e3:
86:75:ca:64:11:48:8b:e6:2e:94:71:f5:65:5e:0d:40:1b:87:
64:bf:92:67:22:ac:ba:2a:8b:06:be:5e:98:43:f9:c4:44:5f:
20:eb:53:28:95:08:67:56:93:bb:09:aa:8c:18:86:e4:e7:e9:
3e:03:d1:2a:d2:7c:1d:95:8b:a4:13:55:00:03:95:39:6f:88:
b0:21:cc:47:5c:63:5d:6b:28:45:46:5b:91:f8:c4:a6:ab:dd:
b9:35:3e:51:38:74:48:3c:ac:6d:2a:66:3c:c9:62:f6:27:76:
03:b3:ed:3c:45:cf:cd:e8:a8:84:ca:14:6c:92:92:1b:70:c1:
11:41:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:04 2026 by rpki-client