Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.mft
File: RjfshNu9TlwIo5IV8S54XLOsVpY.mft (raw, json)
Hash identifier: J26T8lwLmotQg2BeAahMZ5IvMMan2kINMArH3hbyrcI=
Subject key identifier: 9E:D3:35:C2:4A:97:9F:2C:D1:CA:B0:25:4D:43:8D:0E:E0:CB:2C:E6
Authority key identifier: 46:37:EC:84:DB:BD:4E:5C:08:A3:92:15:F1:2E:78:5C:B3:AC:56:96
Certificate issuer: /CN=4637ec84dbbd4e5c08a39215f12e785cb3ac5696
Certificate serial: 019D26288241F2A1C56EDF591EB8D5A4C9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjfshNu9TlwIo5IV8S54XLOsVpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.mft
Manifest number: 3D
Signing time: Wed 25 Mar 2026 18:01:22 +0000
Manifest this update: Wed 25 Mar 2026 18:01:22 +0000
Manifest next update: Thu 26 Mar 2026 18:01:22 +0000
Files and hashes: 1: RjfshNu9TlwIo5IV8S54XLOsVpY.crl (hash: XkyuJ/mdpFpkSjJdw2a6MwTZc64KNErjya8mAMH0RFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjfshNu9TlwIo5IV8S54XLOsVpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:82:41:f2:a1:c5:6e:df:59:1e:b8:d5:a4:c9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4637ec84dbbd4e5c08a39215f12e785cb3ac5696
Validity
Not Before: Mar 25 18:01:22 2026 GMT
Not After : Mar 26 18:01:22 2026 GMT
Subject: CN=9ed335c24a979f2cd1cab0254d438d0ee0cb2ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:6e:45:81:b7:3e:a4:c4:14:bd:59:9b:5b:
90:81:7a:b0:66:c3:5a:7f:68:ee:53:cc:3f:bd:47:
3d:76:bf:c5:ec:2a:32:ba:8e:fa:cc:f6:e1:9b:54:
86:f6:6f:75:e5:06:2c:53:00:c2:46:35:09:47:fa:
ae:46:8a:b1:82:ad:4e:08:dd:8b:ad:ae:86:6a:bc:
2b:e2:e9:7d:0a:ba:1d:8f:d0:34:fe:2b:49:4b:66:
eb:5d:09:40:20:ce:a4:3e:0c:c1:7b:1a:39:0c:b0:
36:ff:ad:69:8c:dc:4e:03:11:8b:24:57:d2:64:ea:
66:85:b6:dc:d7:7f:72:fe:bb:c2:8a:25:01:2c:06:
d5:f1:cd:c5:71:5c:1b:2b:74:26:06:3f:aa:d9:c1:
97:15:19:e8:b8:11:39:85:b9:04:58:88:53:73:58:
d0:b2:3c:7e:20:f4:08:ad:8d:28:04:5c:ab:52:db:
25:74:a7:77:cd:1e:88:1c:f1:15:58:98:21:46:e0:
4b:83:3c:5c:fd:0e:bc:ce:2f:4e:cf:8b:7a:6d:33:
3d:73:f6:e2:eb:dd:78:02:9d:b3:26:ca:d3:55:dc:
58:9b:1c:a4:e0:4e:14:cb:c2:9d:1d:6c:4f:2d:12:
9c:86:0b:fa:5d:59:b5:84:3e:b4:17:fc:b7:58:bd:
93:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D3:35:C2:4A:97:9F:2C:D1:CA:B0:25:4D:43:8D:0E:E0:CB:2C:E6
X509v3 Authority Key Identifier:
keyid:46:37:EC:84:DB:BD:4E:5C:08:A3:92:15:F1:2E:78:5C:B3:AC:56:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjfshNu9TlwIo5IV8S54XLOsVpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f4:d7:ae:fe:e3:88:6f:f0:00:2f:30:ba:e8:d5:f6:89:ea:
dd:dd:60:19:65:d5:a5:2f:89:99:9e:75:82:cf:10:4f:17:1b:
85:e4:80:5d:e0:0a:ed:1e:52:40:e8:e9:d0:56:08:87:63:44:
65:1c:bf:2e:eb:34:d2:9b:b5:7a:7d:88:10:a0:ce:c2:1a:78:
0b:8c:56:e7:00:13:85:31:33:b0:04:16:ce:a2:19:13:71:9f:
fa:d6:b4:dc:47:98:05:87:97:e4:4a:59:0f:ea:1a:b5:a2:61:
a9:f7:96:a3:f0:1e:ef:db:bd:00:ed:09:72:2e:4d:e4:4f:e8:
b6:20:26:d2:ca:63:89:25:41:f1:63:b2:0f:ec:68:45:71:1c:
0a:ca:34:bd:f5:65:b5:bd:ed:55:f7:89:1d:ad:05:94:9b:21:
04:6c:64:fa:f5:af:8a:e2:26:7f:ef:82:11:d1:34:22:b4:1a:
75:06:11:b2:93:39:63:04:6c:d9:95:b2:ab:97:d5:dc:84:ac:
99:5e:05:f3:94:b0:58:5c:c9:e9:89:c7:4a:c9:9a:a9:bb:f6:
e2:e9:d8:e0:b4:a3:a8:f1:6a:f1:f6:04:4e:b3:2b:d3:24:d5:
36:22:d8:46:d0:7b:f9:7c:75:90:5b:de:09:42:f2:67:f5:88:
86:8f:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:51 2026 by rpki-client