Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
File: inwNQWIenTgIi43T5t4VVBvuHIw.mft (raw, json)
Hash identifier: E0msT6cspHMHEmN8cuU4+s3TecQdc/ZBOq9rC/33CtM=
Subject key identifier: 3B:6A:A8:69:E7:C7:DC:94:38:24:12:C7:C8:3B:7F:09:1C:E2:81:06
Authority key identifier: 8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
Certificate issuer: /CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Certificate serial: 019D25F1D43875D7577C4EBD66DF774B4E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 17:01:38 +0000
Manifest this update: Wed 25 Mar 2026 17:01:38 +0000
Manifest next update: Thu 26 Mar 2026 17:01:38 +0000
Files and hashes: 1: inwNQWIenTgIi43T5t4VVBvuHIw.crl (hash: H/dtKHCprsLhZkVuB15tRoOd2s6mDYgBQLyyO7yVQxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d4:38:75:d7:57:7c:4e:bd:66:df:77:4b:4e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Validity
Not Before: Mar 25 17:01:38 2026 GMT
Not After : Mar 26 17:01:38 2026 GMT
Subject: CN=3b6aa869e7c7dc94382412c7c83b7f091ce28106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:98:c7:f1:ae:d4:3e:89:86:39:58:07:74:
da:f2:83:15:a7:95:46:4a:24:af:21:f2:b7:d7:66:
17:2c:fa:41:c3:0c:94:9c:8b:0e:32:36:9c:8e:bf:
6e:ab:ca:9e:46:10:af:01:9a:bb:7a:df:77:b8:63:
51:3e:43:b7:0a:ed:cb:93:a1:f4:34:4b:59:4e:5b:
33:36:6c:c5:32:84:ac:f0:a1:40:78:57:6f:f5:e2:
ba:03:0c:45:f9:2f:e3:88:76:ac:aa:37:77:86:01:
dd:8b:9d:e9:16:6d:b9:1c:40:f9:e0:11:be:2b:00:
18:b4:96:74:3a:b0:11:26:a5:59:9a:c7:1f:35:f5:
97:fa:46:4f:37:50:d1:38:db:5a:3b:cd:a4:71:d0:
87:ca:71:6a:41:86:3a:9e:18:ef:09:53:06:f0:9e:
90:d7:c7:b1:e7:e9:5c:9c:50:49:e7:61:bb:34:9e:
bd:97:1d:a8:40:2c:36:76:30:9f:53:83:eb:58:66:
38:80:c0:6d:77:cc:1d:e9:08:c1:8d:30:ea:18:4e:
7b:cf:1b:6d:7a:08:18:a7:0c:16:16:4e:1c:8a:54:
c2:f6:e1:84:8d:d1:c9:72:1c:83:3b:84:5a:47:54:
c1:37:d5:7a:bd:c9:35:57:e3:20:21:96:63:81:ab:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6A:A8:69:E7:C7:DC:94:38:24:12:C7:C8:3B:7F:09:1C:E2:81:06
X509v3 Authority Key Identifier:
keyid:8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:db:b1:a0:11:b7:ee:ab:7e:0b:3e:19:65:90:bb:44:46:47:
b3:9c:9e:e0:6a:eb:ec:08:b1:ae:0c:f4:0e:b3:3d:45:15:a2:
07:3a:24:b7:ae:28:c2:de:4f:a3:48:af:bc:ec:cd:e4:b8:5e:
12:59:4c:b9:06:55:1e:5a:6a:af:5f:51:3c:08:b4:1a:a2:05:
53:ac:6e:4b:25:ae:8b:a8:0e:d1:8a:20:e7:97:45:f1:e4:73:
87:c0:75:30:02:fb:e3:d8:31:54:ef:46:12:02:c6:59:e3:2f:
a6:d9:c2:6b:aa:7f:a6:5e:4a:7a:f7:88:46:63:dc:4d:ef:e5:
3a:9b:fd:0c:1f:04:f3:fd:7d:38:22:51:a8:89:d7:10:0a:8d:
ed:1c:9f:ab:b2:10:72:c1:46:3f:f0:20:8f:cc:15:82:89:07:
10:63:58:8e:6d:10:45:1a:56:44:4e:08:58:4f:e8:6d:e0:31:
8c:bd:6c:c8:f9:f8:fa:5a:b0:4d:d4:c8:a6:5e:99:60:68:65:
cc:f8:08:42:bf:5c:98:7c:09:0f:3c:f4:dd:e2:67:56:a6:d5:
d6:03:9d:50:13:d5:22:8a:6a:84:9c:83:7b:78:b6:eb:9d:9f:
21:e2:2e:ed:3e:59:51:64:f8:3b:95:46:94:09:d8:f1:59:c7:
1a:11:76:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:36 2026 by rpki-client