Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
File: _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json)
Hash identifier: iYiqGKbHgwFXhmAhPYOKI1SVWZZTUCVitqUQsH4VT/Y=
Subject key identifier: 58:CC:E6:DB:42:1F:E8:5E:87:86:4B:3F:78:DC:9E:6F:45:D8:38:97
Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Certificate issuer: /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Certificate serial: 019D26963C966741E15C822E1AE47396B19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 20:01:13 +0000
Manifest this update: Wed 25 Mar 2026 20:01:13 +0000
Manifest next update: Thu 26 Mar 2026 20:01:13 +0000
Files and hashes: 1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: Sz9XCMJuFr9g3x9KLvurvyl0h3LLPJKh99P+Yj2RGO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:3c:96:67:41:e1:5c:82:2e:1a:e4:73:96:b1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Validity
Not Before: Mar 25 20:01:13 2026 GMT
Not After : Mar 26 20:01:13 2026 GMT
Subject: CN=58cce6db421fe85e87864b3f78dc9e6f45d83897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:0f:48:6a:2d:12:cc:ae:06:94:aa:6e:fd:
c2:d5:29:4c:cf:1b:6c:fa:b8:65:45:0b:88:6a:22:
d9:b8:a2:6a:95:44:8c:a9:35:e2:24:e5:10:17:2f:
73:5a:1c:72:fe:50:35:8c:4d:63:22:4e:c4:2c:8e:
24:77:bb:ca:24:fd:d1:be:5c:75:cd:df:2f:0c:93:
62:98:7d:cb:7d:ea:a5:46:07:4c:5b:86:85:3e:c7:
f9:e7:a5:64:c3:8e:7b:f5:5c:4f:de:50:33:8b:0a:
de:a1:82:58:4a:fe:92:ca:54:4d:b9:0a:c4:97:91:
cb:7f:70:d8:ed:17:05:d2:e1:a6:a2:f1:20:ee:c6:
e9:fe:86:ec:18:6c:1c:bf:8f:05:a5:3d:75:ce:68:
21:52:31:e9:d6:33:94:6e:5e:fc:bc:ae:ce:c6:26:
9d:aa:69:f2:15:0a:ab:63:62:01:e9:59:43:09:8a:
ec:ab:90:08:3f:cf:87:3c:90:2a:3d:8d:ba:7a:85:
8a:01:1a:35:44:92:0c:52:7f:74:18:26:24:27:0b:
2b:99:9c:13:ee:d9:77:e2:87:de:a1:b9:89:a3:f9:
70:5e:f5:c6:d1:ce:90:31:63:61:d6:be:47:29:87:
52:ae:9d:43:3e:48:d4:04:e7:bf:68:72:77:a8:2e:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CC:E6:DB:42:1F:E8:5E:87:86:4B:3F:78:DC:9E:6F:45:D8:38:97
X509v3 Authority Key Identifier:
keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:89:27:8d:70:02:47:1f:1c:1f:08:83:06:46:d3:ff:21:84:
ef:60:fe:f4:b3:14:cb:cc:ae:f6:41:04:f7:be:35:df:91:32:
89:4a:e5:cc:e9:32:6f:5a:1c:5f:a1:95:cf:7e:ca:20:ce:a1:
a1:22:78:6a:22:57:c8:d6:b9:49:80:cd:27:70:4c:2a:6d:48:
d8:b5:d9:97:c3:da:08:90:02:ba:2f:ab:0a:c6:ee:62:f4:6a:
6d:2f:12:85:93:26:0d:f1:c9:a8:0f:33:bc:1d:6b:11:58:43:
19:09:b9:7a:e6:13:3f:e3:20:be:39:34:ee:69:0d:06:08:89:
fb:f0:c8:1c:07:ef:cd:f0:4a:fa:9b:6d:74:13:0b:0d:b4:bc:
fc:af:9d:69:b0:bd:6f:96:4a:b0:d2:f3:e5:8e:0c:62:c8:eb:
fb:3a:37:98:49:be:b7:aa:70:b0:e9:ee:58:76:55:94:45:e4:
2e:90:b0:68:fb:96:c7:77:01:98:00:18:c0:03:8c:f4:e3:eb:
15:dc:96:ab:3e:73:7e:f3:59:a7:71:c1:fe:a3:c4:3e:15:ba:
fa:61:bf:4d:45:65:cc:17:d0:c9:bf:d8:8c:42:96:0a:7c:18:
75:9b:ea:98:f9:17:63:7f:e9:66:08:96:c3:ab:f5:94:f9:d3:
28:68:20:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:04 2026 by rpki-client