Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: 4XcPGgzu00ZoGc25OytfwpN+F8GwG1+u70LBpYefU4E=
Subject key identifier: F6:3B:FE:F0:D1:B1:15:CE:83:F0:DA:E9:D0:50:F7:A8:DE:60:A5:35
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 019D28F26FFEA2ECC8403EAAC4566BE74AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 08C5
Signing time: Thu 26 Mar 2026 07:01:10 +0000
Manifest this update: Thu 26 Mar 2026 07:01:10 +0000
Manifest next update: Fri 27 Mar 2026 07:01:10 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: xVbPkxHPGtIbu2bDDnsiCm2pq4CoPU3k8X7mTBIDBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:6f:fe:a2:ec:c8:40:3e:aa:c4:56:6b:e7:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Mar 26 07:01:10 2026 GMT
Not After : Mar 27 07:01:10 2026 GMT
Subject: CN=f63bfef0d1b115ce83f0dae9d050f7a8de60a535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:72:03:73:ff:1c:56:79:bc:ca:3d:6d:f8:
e7:b5:c7:11:3b:ec:6e:47:27:00:a2:97:6d:62:a3:
62:e1:80:60:0c:41:a2:5e:09:b4:e1:8d:dd:f4:99:
91:dd:50:5a:86:21:0f:76:ab:94:ee:ba:a0:d4:7a:
dd:04:86:b4:50:b5:f1:ec:fb:19:60:3a:98:87:2b:
4c:80:dd:4e:e1:c1:ca:7a:07:e9:a5:1f:a5:40:9e:
ab:50:06:82:38:d0:f5:dd:2b:a2:38:a6:f9:ef:72:
77:3f:20:61:5f:ab:b8:ca:8f:a7:b7:70:7f:f9:3a:
aa:24:8b:de:33:a6:fc:3e:60:da:4d:aa:b8:04:cf:
a8:59:20:1d:06:ce:ab:27:ca:c1:6f:c2:47:be:3c:
90:46:00:7d:d7:07:dc:2e:46:3a:69:09:ae:e0:f2:
52:af:15:d3:b4:9b:db:19:db:c4:af:de:73:66:7d:
1f:64:94:f3:87:b6:17:91:fc:0c:c1:24:5d:9a:9c:
c7:70:6c:30:b8:0a:f0:36:bb:45:6e:2e:a2:81:ed:
c8:db:71:c7:a7:30:6a:b2:b9:d0:08:ae:9a:24:26:
2e:db:87:eb:92:2b:79:9b:81:17:c5:e5:26:49:55:
3b:c8:fa:ae:8c:a1:5f:ad:9f:8a:fe:5d:b2:41:b4:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:FE:F0:D1:B1:15:CE:83:F0:DA:E9:D0:50:F7:A8:DE:60:A5:35
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9e:05:d5:a8:8b:35:f5:37:9c:c4:69:62:20:bc:45:b6:65:
51:e2:18:0e:79:9c:23:41:68:32:94:88:b9:a4:c4:d8:b0:4c:
e3:76:b3:ab:14:49:73:75:9f:8a:a1:75:fb:58:16:b7:81:7b:
71:bf:f0:95:d8:8b:7e:17:eb:4d:d1:d0:42:51:bc:c9:01:ad:
03:e3:fa:8d:a1:2f:73:f6:b2:ca:b0:05:4f:ac:27:ef:b9:f8:
04:9a:c5:9c:f2:74:a0:2b:b7:f8:8e:22:cd:69:0e:0d:8b:68:
09:b6:a3:a2:6b:bf:0c:1f:e5:4b:75:48:f6:56:71:8c:0c:11:
32:11:7f:d0:4d:4c:63:88:d4:f2:e1:aa:b9:a2:12:37:32:23:
6e:bf:4b:84:e3:4a:d4:6f:0b:3d:de:8e:58:f3:b8:f5:a4:ce:
be:5d:75:5b:a0:b3:53:9f:de:ab:40:52:36:b8:83:d1:fd:63:
d8:7e:00:43:a4:dd:94:b5:d9:70:1d:37:1f:95:e4:18:1f:9f:
32:31:a3:43:a9:40:00:91:b6:f0:2f:92:87:93:38:33:8f:3d:
bb:c0:ba:86:96:09:f4:0d:be:0a:6f:a0:38:9b:f5:e7:39:67:
a2:34:18:09:0c:b3:03:1c:e1:74:eb:80:e2:2e:d5:eb:ad:22:
6b:0d:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:59 2026 by rpki-client