Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier: lS3zqp453bid1sMplEkNK5m7gs1KKd0hIS3LpPF4Cgg=
Subject key identifier: 1A:D5:FB:4B:CD:07:8E:B3:7B:D5:90:5F:CB:8C:C6:87:3F:9D:2B:D0
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial: 019D2B4DFAC4DEF5C8D6B2ED9DA0B1115D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number: 09BF
Signing time: Thu 26 Mar 2026 18:00:23 +0000
Manifest this update: Thu 26 Mar 2026 18:00:23 +0000
Manifest next update: Fri 27 Mar 2026 18:00:23 +0000
Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: yaBeIZHjS6cluXkkweF+hl8XV9p5QnuvYactlMntrXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:fa:c4:de:f5:c8:d6:b2:ed:9d:a0:b1:11:5d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
Validity
Not Before: Mar 26 18:00:23 2026 GMT
Not After : Mar 27 18:00:23 2026 GMT
Subject: CN=1ad5fb4bcd078eb37bd5905fcb8cc6873f9d2bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:44:79:b4:5b:3d:8c:86:88:20:c9:b8:1e:
17:ea:09:97:0a:2f:12:f0:33:e6:9a:ba:70:d3:9d:
6d:43:7a:eb:0f:64:9b:db:35:5f:c1:ea:93:dc:f9:
41:b1:35:87:45:7b:e0:e1:c2:2d:c8:bc:dd:4e:21:
06:6d:7d:e5:11:e8:84:4d:77:7e:4e:69:d4:03:43:
75:be:fb:a8:9c:96:dd:77:05:ea:bb:2c:c1:99:fe:
56:81:58:6f:19:9c:14:5a:b9:70:92:7e:ff:f5:18:
b4:ca:03:a9:f3:87:1d:3b:1e:d2:63:ae:bd:fd:86:
02:e4:5b:8a:be:ab:1a:a8:f9:ae:55:fd:20:5e:3c:
13:c6:41:bc:fe:e0:99:23:ec:7a:88:c8:9c:27:7e:
86:4e:97:1c:e7:e3:72:d1:8d:1f:43:cf:7d:b5:b7:
ea:8a:5d:0c:80:1c:ce:96:b2:fb:39:e6:21:64:e0:
8b:d8:39:22:da:e9:78:1d:32:c6:ce:4d:9f:05:ac:
e7:29:96:e0:10:1d:1d:c5:aa:8c:49:81:5c:ee:4f:
2c:ea:4c:11:06:bc:ef:c7:31:af:2c:78:48:38:fa:
1b:8c:5e:53:82:35:89:16:b5:ba:9c:e8:ab:24:5b:
7f:74:41:d8:06:d2:ee:af:72:b7:3f:40:66:89:96:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D5:FB:4B:CD:07:8E:B3:7B:D5:90:5F:CB:8C:C6:87:3F:9D:2B:D0
X509v3 Authority Key Identifier:
keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5a:a1:d8:31:fe:c3:9b:e7:7c:98:20:08:bd:45:c2:b6:5b:
e0:e9:75:e6:f5:ea:ee:05:7b:f4:e5:ee:87:e4:9a:fa:dd:ef:
84:1e:11:f5:6b:7a:01:d2:33:6e:79:64:12:43:ca:67:b3:9c:
b5:a9:2c:f4:fe:ed:c7:6c:c6:45:03:39:41:a0:e2:b8:94:55:
49:4b:ed:3a:d9:88:10:7c:5f:7b:59:82:46:df:78:ce:cc:4c:
68:97:31:ff:86:88:ab:34:38:14:0c:bf:6e:11:af:3c:41:d8:
f4:46:bd:9c:48:13:0e:81:66:49:31:07:76:59:4c:9d:df:4a:
c6:aa:a5:1e:40:b6:27:78:6b:50:10:07:97:e7:bd:01:5e:6d:
5c:ce:72:c7:76:ad:74:c7:48:4f:45:81:0f:97:9e:4b:dc:d2:
d1:07:21:24:9b:07:1d:56:85:26:74:db:c3:6e:e4:79:c9:b7:
90:c9:62:7a:4b:7e:fe:21:ee:fc:f7:e4:51:dc:cc:09:ae:b7:
32:11:2f:29:6a:a9:20:50:bd:68:e5:11:78:5c:49:2f:b2:9d:
a5:33:cb:1d:fc:0b:92:d2:48:f3:01:8f:90:61:c7:c0:6a:33:
97:53:fd:da:27:6c:06:8f:41:96:f3:57:bb:58:43:2a:4c:66:
03:e4:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:57 2026 by rpki-client