Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier: X+4MZB+CDcATv32kDf4DgoNr91iQqxpc/5SkxeyBwQM=
Subject key identifier: 80:D1:03:6E:68:3A:35:AF:D5:F7:D1:C2:0C:43:1E:4A:FA:E6:D8:FA
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial: 019D27039FDF5C9A3B360E88FE4B83415E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: IOG/cP7ITBQrsPNElM5mAm+exa4MX/DvJqXre4NSuEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9f:df:5c:9a:3b:36:0e:88:fe:4b:83:41:5e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=80d1036e683a35afd5f7d1c20c431e4afae6d8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:88:e7:4f:f0:85:7e:7e:f5:02:db:fd:9d:
d4:3c:96:f4:93:5e:c6:50:8b:d1:79:b0:1b:c7:0e:
91:90:82:70:9c:44:eb:b0:eb:d0:80:1a:3b:e5:97:
9b:a5:f4:31:28:24:0a:24:c6:41:6f:93:18:53:6b:
91:25:4a:a1:22:5b:62:cb:20:1e:99:0b:4d:80:a0:
b9:6e:c1:0f:df:3a:ae:db:7c:d3:f1:dd:09:0f:a4:
33:0e:14:ce:09:69:c0:3e:d7:17:a3:81:78:52:b9:
b3:5a:01:96:c4:93:9a:ca:d7:95:68:8c:57:3d:91:
90:62:08:38:a9:89:89:29:16:0a:da:f0:6f:9d:09:
3e:c5:e2:a9:9d:c5:87:82:9f:62:d7:6c:f4:e5:2e:
8a:9a:9a:a3:db:dd:f9:60:36:8f:1c:93:f1:5a:ca:
05:a7:b6:7e:1b:6e:b8:9c:bd:21:10:10:25:c5:51:
da:a8:d6:42:8d:2c:1c:16:05:7c:bd:33:97:4d:c7:
4a:7d:8e:45:5b:d1:a7:8e:5f:ed:68:29:a4:83:99:
77:33:68:39:e9:a5:2b:0c:6d:36:fe:1a:44:df:17:
a4:8c:eb:29:40:ae:c2:3e:bd:ac:1f:6d:7b:15:a7:
e8:5d:45:a4:c9:49:77:ba:c6:29:9f:46:8c:ec:98:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D1:03:6E:68:3A:35:AF:D5:F7:D1:C2:0C:43:1E:4A:FA:E6:D8:FA
X509v3 Authority Key Identifier:
keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0d:7b:fc:7e:f0:43:41:d0:45:80:dd:a9:fe:1c:ba:c3:47:
4e:c2:d4:c5:c6:e8:ea:07:4a:ae:15:f2:a4:f0:b4:bc:fa:b1:
8c:86:2d:e5:d6:66:b0:1b:ef:29:ae:e9:ad:86:cf:d0:33:07:
86:5c:5c:43:2d:43:36:46:38:32:de:30:44:97:f0:70:1b:7c:
06:17:d6:d6:bc:1a:f8:8b:ae:a7:1b:a6:a2:1c:aa:e2:c6:38:
eb:43:ea:f2:1a:37:03:0d:95:05:50:a2:60:2e:c8:47:6c:62:
1d:fd:cf:cc:2a:8a:8c:cf:d9:a6:d6:be:73:68:09:26:92:4f:
79:aa:b0:64:0d:9e:b9:88:4c:55:0c:c3:59:36:09:99:a9:19:
03:ce:6c:44:46:de:13:54:f1:87:b2:af:7c:0a:a4:f4:e4:63:
fb:7b:a8:3c:5f:66:59:0b:32:7e:5a:fa:7d:dc:12:11:9e:02:
cc:7f:b5:05:db:9f:22:51:b0:ac:ca:11:0b:4f:4a:9b:65:4d:
fc:2b:68:7f:93:83:d9:90:56:6f:14:a9:ce:58:06:98:3d:39:
59:ab:49:17:f3:f4:bd:56:53:15:34:d3:27:ad:67:fa:9f:64:
ed:b8:71:51:18:88:41:6c:95:d6:53:9e:f6:9e:cd:5b:b4:30:
76:15:6e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:18 2026 by rpki-client