Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json)
Hash identifier: tqqv0pW+FykaUYB1hfrGQDFwo9s6rD97E2SXEbFAzgE=
Subject key identifier: 2E:28:23:72:93:80:94:50:CE:3C:B5:F5:0E:1E:21:A5:7C:FA:D0:F8
Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Certificate serial: 019D273ADC6A03887511DF0537C280E9E95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
Manifest number: 01E8
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: qJdXmESDbmml9iO6X68ttzHF9OMzKtUVXYmKZITLO8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:dc:6a:03:88:75:11:df:05:37:c2:80:e9:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=2e28237293809450ce3cb5f50e1e21a57cfad0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:d1:a6:ab:bc:92:23:b9:3a:da:57:24:7d:
b7:70:f4:e5:23:d8:7b:6e:40:a4:22:0a:0a:41:32:
5c:d9:2b:f2:68:cb:a7:2e:21:8c:85:67:f7:37:fa:
32:3e:ca:83:cb:59:2b:df:b5:da:19:ef:0d:7b:8c:
15:e2:08:36:3b:cc:ec:71:49:64:b3:f9:63:f8:d3:
e1:d6:8c:bc:15:d1:cd:1c:45:54:13:4a:1f:f4:ef:
93:12:f8:6b:f8:50:6c:c2:77:1d:f1:21:25:cc:00:
98:bc:05:5a:03:24:f0:af:31:cf:d7:34:da:c9:59:
45:8e:aa:a2:e3:18:60:74:a1:0c:c5:ce:9a:da:c5:
bf:70:d7:9e:ac:5d:36:71:d9:ef:21:c1:85:13:ed:
c4:ae:ac:aa:3f:a4:b7:d1:31:45:b2:7a:b4:1b:06:
f4:c6:b3:92:87:53:cf:c1:b9:4d:ee:cd:ad:a8:d4:
e7:31:bd:7b:25:75:91:66:e5:3e:62:c4:8d:e8:06:
9d:8c:ee:18:a8:d6:1f:96:4e:78:b3:aa:00:06:50:
62:af:2c:4f:83:87:42:04:59:f0:08:1f:58:16:bd:
6a:18:38:43:ac:07:75:75:6f:34:0c:a4:8d:56:8e:
ed:cc:ef:59:a7:11:aa:af:14:4a:33:21:40:8c:fe:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:23:72:93:80:94:50:CE:3C:B5:F5:0E:1E:21:A5:7C:FA:D0:F8
X509v3 Authority Key Identifier:
keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f3:6a:4d:e9:84:ee:f2:bb:2b:e5:90:95:ce:c9:fa:10:bb:
e2:c1:2b:54:c7:7e:99:bb:da:af:6f:75:67:0a:c0:de:2f:b5:
40:a9:11:1c:50:76:c8:18:bf:63:94:d7:eb:70:a7:9b:ad:64:
ca:b2:fc:2f:06:7b:2e:35:2c:50:3b:9b:32:d5:c9:4e:51:4a:
62:64:d2:96:3f:f5:32:91:98:12:fc:da:ff:0d:53:fc:7a:11:
13:56:92:da:94:b6:8a:81:17:b5:55:76:82:ff:bc:a8:2a:5b:
9e:ff:b5:dd:34:17:07:bc:41:fa:54:ba:39:34:1e:9d:df:56:
f8:9b:d9:b6:2d:a7:0f:e6:c1:c2:c3:7d:f0:e3:03:6f:81:6e:
44:92:97:04:4d:b4:1d:f0:cb:cb:05:22:bf:f8:3b:bc:47:16:
c9:ae:e4:6d:68:1a:3c:3f:4c:56:88:3a:77:b9:54:f0:d5:69:
28:0c:1e:34:ad:f4:e9:34:b7:41:be:42:b4:91:b1:b7:13:7e:
87:4d:e5:db:eb:f9:9d:e5:3a:4a:13:5b:8d:0d:ed:48:00:b0:
b6:a6:66:7a:e1:17:73:25:a5:ae:a7:26:66:f6:ba:8d:1d:86:
44:30:1b:e5:da:c0:99:7c:e6:14:86:3a:c4:42:a0:27:79:e3:
59:50:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:30 2026 by rpki-client