Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: 9Ewi2BUjwCJI1qVLrK7I7iQrJDHvARRGlaBFxP3iWbk=
Subject key identifier: D0:2D:BD:B5:CE:01:0F:27:AD:4E:11:07:82:4A:95:25:58:BE:C2:48
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 019D270417CACC036D08549120F4DE6D8DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 11A5
Signing time: Wed 25 Mar 2026 22:01:12 +0000
Manifest this update: Wed 25 Mar 2026 22:01:12 +0000
Manifest next update: Thu 26 Mar 2026 22:01:12 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: ptnMjBcq2e4dmfxJrVkmAzJ5GlNAQVT5cTtMR8O1VYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:17:ca:cc:03:6d:08:54:91:20:f4:de:6d:8d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Mar 25 22:01:12 2026 GMT
Not After : Mar 26 22:01:12 2026 GMT
Subject: CN=d02dbdb5ce010f27ad4e1107824a952558bec248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:63:24:ed:0f:f0:c7:a7:e7:ef:a0:05:9a:
7b:6f:0d:2a:d1:7c:d4:5a:60:2f:5e:d2:a1:0f:93:
23:5d:e9:22:96:9c:e3:fd:c5:84:29:18:32:52:58:
63:e2:98:15:bd:c0:d4:18:1f:c2:6b:48:6d:eb:7d:
20:3b:de:6a:17:d2:01:bc:fa:c1:ee:bd:a0:0e:d7:
e4:dc:a5:fc:7b:33:ce:95:a2:53:79:7d:f6:75:4a:
6d:87:27:d5:40:ac:32:b4:83:01:2b:93:d9:6e:82:
15:28:12:b9:cb:f3:aa:22:fe:b0:2c:fd:3d:46:29:
24:e4:da:c9:98:06:c9:98:dd:84:29:56:a4:5c:c8:
72:1e:83:5d:c3:a2:d8:9f:2b:88:a1:84:1d:44:41:
db:ae:a7:0b:5c:2e:c3:56:ef:8f:a2:0d:75:38:09:
2e:c4:b8:2a:53:89:db:31:cd:06:c7:64:d5:d7:85:
9a:0f:03:4b:5c:cb:4a:ca:7f:78:de:37:23:f8:75:
24:aa:b2:d1:bf:ef:de:fb:d1:97:eb:56:ea:d2:38:
07:11:7c:58:1d:24:78:50:e7:25:73:c3:84:a5:80:
6e:f9:49:10:c4:72:90:45:c8:f4:92:ab:18:bb:7a:
1b:04:eb:05:78:20:6e:db:37:3b:c5:58:aa:88:88:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:BD:B5:CE:01:0F:27:AD:4E:11:07:82:4A:95:25:58:BE:C2:48
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a5:21:c5:a5:e4:22:fb:0c:ab:fd:86:3d:da:28:3b:2a:86:
a3:93:b3:4b:2f:4a:76:6e:88:22:06:19:9b:21:83:78:94:23:
d2:f6:27:9d:cf:ee:df:f6:24:6f:18:e3:20:e7:89:c0:15:6b:
9b:7e:4e:f1:e4:9f:da:be:4d:e6:9e:25:4a:ea:ee:b8:6e:e6:
e4:49:95:cf:d3:6d:63:ff:a2:ce:2a:ba:3d:4e:dd:dc:e4:1e:
f8:2c:3e:bd:8b:a4:6b:07:ca:15:38:c2:27:4f:8c:76:33:0f:
96:dc:f5:3c:10:03:30:27:b3:17:b6:17:e3:aa:36:e0:7d:2a:
82:4a:49:c7:66:4b:64:91:2a:07:2b:1b:36:e9:b8:7b:35:da:
c7:5f:49:42:d3:ac:36:85:7c:00:67:68:4a:63:09:7f:22:a6:
f5:55:da:f8:27:eb:2c:b4:cf:19:0b:6b:32:34:c7:5b:a9:2a:
62:49:bd:f6:a0:c3:20:64:09:fb:d7:01:b5:d0:ea:cf:9f:88:
4f:4f:54:ac:6b:32:19:eb:c7:0c:8d:17:af:50:df:57:78:3b:
3f:34:25:7d:d4:e8:0b:40:06:52:f7:b2:06:cd:c5:7a:95:13:
c6:83:bb:91:58:f3:9c:09:69:d1:2c:d7:0c:8f:4c:73:cf:6b:
ae:7b:14:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:55:06 2026 by rpki-client