Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
File: Th1cISsoF0fIw-xuhm4Vs5TFu98.mft (raw, json)
Hash identifier: +4uFz5mFSBblUPVVpjKTC011uocpFe8Vk9NABXpwRPk=
Subject key identifier: DC:2E:A9:CF:C6:1F:06:E0:C0:C4:B8:F7:58:2B:A1:C9:D8:CC:C1:97
Authority key identifier: 4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
Certificate issuer: /CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Certificate serial: 019D27A910871A6C98E1F7006685AD0FED15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
Manifest number: 0FBE
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: Th1cISsoF0fIw-xuhm4Vs5TFu98.crl (hash: nFLRkLiBJolOi0epyuIZAZ8J0fnzsIVCV8yrzARImM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:10:87:1a:6c:98:e1:f7:00:66:85:ad:0f:ed:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=dc2ea9cfc61f06e0c0c4b8f7582ba1c9d8ccc197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:05:dc:51:49:f1:fa:b7:5a:5f:46:cd:e2:
9d:b9:e8:84:cf:66:81:72:e8:03:b9:de:f4:04:b4:
ae:fb:9b:13:a3:35:30:fb:55:bd:83:4d:80:32:bc:
86:25:1b:f7:78:7e:1a:f6:51:08:1b:bf:91:2d:4a:
f4:c9:4d:cc:d5:82:aa:7d:21:bc:63:df:0e:64:02:
e2:08:2d:16:5c:bd:af:8c:36:5f:84:67:47:da:82:
33:21:07:03:f0:50:7f:c7:51:69:34:30:59:3b:74:
d6:0e:f2:89:a7:95:88:4f:ac:fa:ef:18:fa:97:e8:
e2:d4:b9:6c:b7:80:1a:5f:f3:d4:fd:2d:8c:14:af:
eb:f0:4d:6d:b9:d9:c6:20:e6:22:a5:90:20:4b:e4:
b2:8e:84:ff:5d:c1:31:ce:b2:6b:a7:d7:5d:b8:9c:
03:9b:39:ef:ce:b1:b5:4c:75:ba:31:14:a0:25:2a:
5f:cb:d2:f7:13:8e:33:19:af:bd:d3:63:a5:f8:dd:
43:25:e2:e4:2f:55:b6:03:db:c4:a5:d1:51:e2:35:
ce:00:3e:6e:dd:92:69:52:b9:26:d2:e2:04:2d:4a:
77:9b:16:5a:2a:93:21:d4:68:f0:fb:90:eb:2a:93:
b1:0f:57:b9:50:75:02:24:50:50:a3:24:42:a8:62:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:A9:CF:C6:1F:06:E0:C0:C4:B8:F7:58:2B:A1:C9:D8:CC:C1:97
X509v3 Authority Key Identifier:
keyid:4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:27:3f:ef:03:fc:28:46:6e:7b:96:11:b0:2e:f2:8b:18:56:
6e:0a:06:7f:58:7f:24:b3:2a:24:79:76:4b:86:77:70:a5:60:
3e:33:bd:90:e8:1a:3b:a6:ed:88:cb:ba:f2:25:12:eb:5f:ef:
35:70:d2:16:c7:43:7e:5a:d9:81:eb:ef:b2:dd:06:b1:6f:56:
5a:a2:50:a9:07:31:94:b5:ab:21:96:a4:36:3c:ab:f5:f8:d0:
ea:d5:67:5b:81:3e:84:db:64:c5:7f:7c:86:b8:68:6f:dd:52:
00:a8:cb:b2:c6:64:c3:e5:57:53:76:dd:b1:84:d1:86:fb:60:
90:f6:d3:97:c8:b8:59:10:0a:a8:08:cb:76:4b:03:f5:72:81:
d8:39:26:17:f0:1c:f4:db:e7:99:d8:73:34:00:28:b1:f6:e6:
33:4e:2e:fd:15:d7:3b:fa:f4:55:af:61:96:15:c8:ae:76:03:
20:e4:d4:66:c5:eb:e6:8b:f0:27:b4:e0:1e:cc:bd:46:46:2e:
99:01:32:32:1a:05:24:19:c7:51:20:aa:df:0a:a4:57:da:4a:
6e:dc:eb:a6:1b:47:4b:94:26:1b:54:57:da:f0:a1:32:88:75:
b6:01:aa:2c:f2:a4:a4:54:87:91:91:47:93:10:84:c5:c3:1f:
ac:62:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:11 2026 by rpki-client