Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier: mAX4Km/lOVZdVNAWZ19+HFQENhZuTyv9wSiubCnSllE=
Subject key identifier: EC:EB:63:7A:D1:DE:5D:95:E8:6E:5A:4C:73:C1:7B:74:46:30:9E:69
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial: 019D2A0501C3D1C624531E8C3BACBC20C6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number: 0543
Signing time: Thu 26 Mar 2026 12:01:04 +0000
Manifest this update: Thu 26 Mar 2026 12:01:04 +0000
Manifest next update: Fri 27 Mar 2026 12:01:04 +0000
Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: IhhPTvpIh01d51bYOK1Ka8/wRM9NAvFwCJgUEURNyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:01:c3:d1:c6:24:53:1e:8c:3b:ac:bc:20:c6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Validity
Not Before: Mar 26 12:01:04 2026 GMT
Not After : Mar 27 12:01:04 2026 GMT
Subject: CN=eceb637ad1de5d95e86e5a4c73c17b7446309e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:79:66:d9:be:06:5d:c3:2f:4a:fd:8e:cf:
45:38:d1:1d:d8:3b:d7:af:72:ca:76:e4:25:68:fa:
74:15:cf:b6:1f:af:b8:27:17:ed:03:12:45:f2:22:
4b:5c:df:ec:4e:3a:ce:a5:5f:49:0f:08:55:be:d9:
6a:aa:67:69:1a:48:6a:9c:62:b9:60:7e:03:c4:ab:
79:ef:64:75:32:32:c5:83:2f:6a:77:70:33:0e:42:
43:07:2e:e8:c0:1a:18:22:09:ea:62:ee:cb:dd:90:
38:59:09:ae:bf:04:04:24:4e:aa:6f:2d:ea:c2:64:
74:2d:35:be:e2:c1:11:c8:63:fc:fd:49:43:74:ad:
a8:8a:20:2c:1d:4f:02:cc:70:ff:c7:8d:72:d2:b6:
45:97:92:05:24:01:2c:b5:f2:1e:96:a7:27:c4:3b:
de:b6:c4:3a:1e:ae:5f:7c:17:8f:be:9a:07:7e:4f:
52:d7:df:24:f7:64:f0:26:69:f1:f0:e8:cd:a6:8a:
78:fa:5f:c5:8d:f0:7c:8a:a8:a9:10:cc:c2:07:ab:
5b:f9:c2:51:2b:eb:aa:1e:06:eb:cb:64:d7:14:2d:
b0:a8:eb:b3:1f:3f:56:20:9b:76:69:37:f0:c9:9e:
6b:7e:9f:c9:f3:7a:27:d5:30:41:16:13:83:c4:47:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:63:7A:D1:DE:5D:95:E8:6E:5A:4C:73:C1:7B:74:46:30:9E:69
X509v3 Authority Key Identifier:
keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c1:e9:ea:eb:55:67:82:4f:3d:98:c3:93:02:4e:e9:f4:30:
67:b3:71:57:7d:65:a0:c0:68:85:16:4f:33:30:3f:c4:6c:20:
1a:33:ad:1d:d6:4a:88:d4:89:34:b7:ed:9a:02:2c:d6:f1:3f:
5d:eb:e1:e5:07:e8:de:b2:e9:04:84:16:85:66:01:90:8e:ec:
43:b8:2b:65:09:f7:d8:0b:64:94:a5:66:2b:f5:53:b8:7f:bc:
bd:0c:36:1d:a6:50:85:25:7c:4c:3d:da:bd:3b:17:2e:82:18:
43:f0:3f:c8:ab:8c:51:c5:c5:6a:12:c3:7e:12:cc:a0:83:10:
1b:fd:44:c4:78:b9:1a:e7:18:64:24:4a:88:1b:55:b3:d1:9b:
03:1b:5b:9b:b0:59:d9:07:75:ed:2e:11:69:14:43:62:a8:50:
79:e4:5c:b5:02:0d:93:b9:75:11:71:0a:58:23:56:09:0d:46:
9d:be:e3:da:1b:a4:84:b5:1b:d3:ad:80:30:db:22:3c:55:2b:
d2:fa:9a:5c:8d:3f:92:71:72:f4:ae:aa:ac:2e:7d:f6:c5:1e:
5a:86:93:28:0c:47:b1:54:85:d7:dd:25:63:16:4e:de:4c:7a:
c0:ed:80:bf:d7:65:c1:45:af:5c:8c:0d:65:7e:e7:8f:a1:50:
c8:6b:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:50 2026 by rpki-client