Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
File: RMrauRpreaMhYYgHxnibKxyYI3g.mft (raw, json)
Hash identifier: he7Nh/EaP2FwrFxrbUpwLK1trzZmz+4tn+5X5svj3pc=
Subject key identifier: AD:29:F6:33:6F:FA:00:66:66:61:1A:62:0D:F0:14:82:2E:BF:74:47
Authority key identifier: 44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
Certificate issuer: /CN=44cadab91a6b79a321618807c6789b2b1c982378
Certificate serial: 019D333E6DCE45DEB2B8FF778CDFB2088373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
Manifest number: 133C
Signing time: Sat 28 Mar 2026 07:00:22 +0000
Manifest this update: Sat 28 Mar 2026 07:00:22 +0000
Manifest next update: Sun 29 Mar 2026 07:00:22 +0000
Files and hashes: 1: RMrauRpreaMhYYgHxnibKxyYI3g.crl (hash: zbnN6gbi52qmnOrE0H4oNik08XTFurEBlSG82kR2SCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:6d:ce:45:de:b2:b8:ff:77:8c:df:b2:08:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cadab91a6b79a321618807c6789b2b1c982378
Validity
Not Before: Mar 28 07:00:22 2026 GMT
Not After : Mar 29 07:00:22 2026 GMT
Subject: CN=ad29f6336ffa006666611a620df014822ebf7447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:f4:36:7b:f1:b1:9f:40:15:ef:27:44:fd:
0d:ca:d4:36:db:dd:45:b6:67:cd:0f:2b:3c:5a:45:
ce:b5:e4:c9:6f:1e:27:d7:d2:68:77:71:1c:54:7a:
1b:fc:41:da:d0:62:4a:da:fe:7d:21:6c:28:31:6d:
bc:5f:f8:be:a0:0b:e6:9f:a5:a6:4e:71:82:db:36:
ff:8d:c4:f9:37:d5:8a:66:50:51:84:c8:c6:26:0f:
1b:59:05:22:3b:57:aa:3a:4a:6d:b9:6a:60:43:ba:
f8:5a:7f:de:00:6b:6e:ec:76:58:dc:13:31:1d:9f:
91:98:d2:8b:ef:3b:1c:37:32:e2:e7:e1:f0:78:ff:
4d:a9:da:38:a0:0b:a7:8e:7f:7a:ba:15:cc:ab:c5:
46:6b:42:a0:69:fa:e2:ae:87:de:6b:f8:13:73:e2:
d7:e1:a0:31:78:7a:72:8b:85:60:58:04:76:7a:d9:
88:6a:73:8c:bd:61:a6:12:ab:da:9b:6d:48:0a:ea:
03:01:08:71:c0:d5:6c:d2:32:a5:ca:30:ce:8f:cb:
a2:dc:15:9c:28:cc:03:13:74:21:d0:f8:0c:28:70:
cc:7f:a6:97:f7:9a:92:b9:12:31:6f:7f:8f:a3:2e:
81:64:65:b2:82:fe:d5:e7:7e:64:d0:87:a9:0c:ad:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:F6:33:6F:FA:00:66:66:61:1A:62:0D:F0:14:82:2E:BF:74:47
X509v3 Authority Key Identifier:
keyid:44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ab:d3:0d:17:d1:bb:48:7e:e3:b0:be:e7:4d:48:9e:d7:0e:
69:32:cd:a4:d0:eb:a3:80:19:b1:2a:9b:55:25:df:b1:82:97:
94:11:63:93:91:50:86:0b:05:c0:83:14:d6:fd:7c:ac:03:ee:
f2:4a:06:52:f6:66:0a:2a:9f:78:f2:e5:68:64:80:26:34:ef:
51:2b:41:2d:5d:2f:14:95:6f:43:13:3b:d8:0f:9f:a9:76:32:
6f:db:2d:bf:c5:62:88:be:c2:da:42:b6:42:22:12:36:71:0b:
c8:7e:e2:4f:b6:9a:37:91:87:44:10:f2:fc:d2:62:b5:72:e3:
a4:0a:7b:f2:56:fd:6d:43:55:73:80:ee:2a:aa:ec:8c:a1:5d:
6d:64:a2:8f:73:77:0b:30:7a:d9:50:04:a2:00:2f:05:a2:17:
df:93:75:f3:da:e2:ec:14:b4:cc:f2:99:a8:3f:c6:a6:a9:9d:
2f:5c:02:f9:47:53:4b:f4:e4:e3:06:6c:08:6f:af:67:b5:f4:
84:47:69:c3:9a:b8:cb:0d:1a:94:18:f0:b4:7c:61:74:09:ed:
77:8d:32:8b:22:d4:a2:ac:b6:60:82:c2:3d:60:fb:f5:85:98:
d3:9e:fc:bf:97:0c:85:8e:7c:19:11:73:70:7e:cf:57:fc:da:
54:b1:73:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:16 2026 by rpki-client