Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File: cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier: m1ayr40gNQK6hxL8O4Kpb8kZ0NAY1ah0DopyDejjpC0=
Subject key identifier: 38:22:36:1F:D1:62:F8:03:42:50:1A:D7:E6:F0:60:79:51:36:9E:80
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer: /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial: 019D2703FAD98B4B7E0458D028AEEB3E1F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 22:01:05 +0000
Manifest this update: Wed 25 Mar 2026 22:01:05 +0000
Manifest next update: Thu 26 Mar 2026 22:01:05 +0000
Files and hashes: 1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: +WOgg2791gj9ciSDljXA/KctVxlHICH+kkrVBurUZqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fa:d9:8b:4b:7e:04:58:d0:28:ae:eb:3e:1f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Validity
Not Before: Mar 25 22:01:05 2026 GMT
Not After : Mar 26 22:01:05 2026 GMT
Subject: CN=3822361fd162f80342501ad7e6f0607951369e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:f7:e5:92:7b:0b:ba:37:e5:f1:d3:b4:84:
8d:f1:fa:28:88:73:7f:8d:41:68:5f:dd:e8:41:19:
a1:07:6b:85:60:65:96:ea:57:90:b4:f5:c7:65:a4:
c9:a7:8e:21:61:e3:b8:b7:f6:9e:96:09:92:6c:1f:
ec:25:93:56:91:70:75:41:a7:f8:26:79:e1:98:95:
55:50:82:be:a9:73:6e:71:7f:e4:d0:76:59:5e:e7:
74:c4:8d:cd:79:f5:f6:dd:af:74:70:6f:5d:5f:e7:
7d:bb:eb:c8:da:28:07:51:ad:71:76:ff:c6:63:1a:
5d:86:f1:c6:5f:a2:b1:7f:99:a3:ae:a0:d4:8d:7a:
f1:f0:9b:07:bf:6f:fa:ed:04:50:a0:a6:09:a5:9d:
07:05:3f:4e:7b:97:1b:2e:9f:c1:e7:59:72:41:64:
3d:9b:5b:cf:57:c3:0c:6e:82:e9:15:f6:30:25:cf:
35:b2:70:78:50:b9:60:76:67:f4:17:5d:66:e3:62:
2d:34:3c:70:82:fa:6a:51:2f:80:da:8d:f3:23:13:
22:f8:03:e8:e5:7c:23:56:8e:cb:62:86:39:f3:01:
33:26:d6:a4:3f:4b:93:7f:f3:cd:b7:12:0d:d8:60:
1a:7a:bb:ed:f6:c9:d6:39:67:97:b9:fe:e3:1e:13:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:36:1F:D1:62:F8:03:42:50:1A:D7:E6:F0:60:79:51:36:9E:80
X509v3 Authority Key Identifier:
keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7e:4f:68:19:7a:31:82:e0:ab:af:6c:cc:2a:ad:43:14:22:
1a:ec:84:2d:7b:0d:eb:05:ad:b7:c6:20:b8:40:95:ac:bb:d9:
e3:88:61:2d:85:35:7e:1b:fc:8d:5d:33:f5:c9:b1:95:c1:6e:
71:75:b5:a9:eb:ed:16:8c:d7:e9:0a:fb:4a:4e:9e:1c:29:ce:
1c:6e:45:54:7d:70:94:97:b8:e5:3f:b4:cc:41:fa:c8:95:82:
a2:f9:ed:46:27:8d:08:6b:18:5c:ca:05:3c:dc:d3:70:3a:13:
52:1e:3f:8e:d6:ee:ac:4f:69:e7:f1:d0:12:db:ff:dd:8d:63:
ae:29:dd:1d:eb:dd:b2:23:95:9f:cd:5f:35:c3:0a:b0:c9:01:
4f:42:67:42:46:77:b8:95:32:e0:c2:63:c9:0a:55:40:4f:f1:
40:fd:5e:db:e9:9d:38:62:aa:06:44:6a:4b:80:7b:03:8a:87:
10:97:34:ec:02:06:88:57:a6:d8:fe:fe:07:ee:80:b2:98:f1:
95:df:51:04:94:a2:6c:e2:8c:e1:0f:31:9e:3a:9c:97:13:6a:
11:ad:e5:68:5a:a7:e6:ed:8c:8b:7a:c7:81:7f:bd:d1:8e:14:
6f:38:3f:01:5b:48:5d:30:be:32:42:27:e2:78:43:84:cb:6e:
94:bf:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:39:47 2026 by rpki-client