Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier: ftH0oWmEeR2g8RrdTBnUBCqiBfazOVXi31jSAGi2GSA=
Subject key identifier: 45:35:E3:8F:E8:59:61:6D:4F:99:BE:2D:51:8F:0E:EC:87:01:37:90
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial: 019D2AE008CA5202BB002D701B53588C8469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 16:00:18 +0000
Manifest this update: Thu 26 Mar 2026 16:00:18 +0000
Manifest next update: Fri 27 Mar 2026 16:00:18 +0000
Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: Og68w0Lb2GquscrOs+BOzeCgd2vOQwkRTrSmMjSc8KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:08:ca:52:02:bb:00:2d:70:1b:53:58:8c:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Validity
Not Before: Mar 26 16:00:18 2026 GMT
Not After : Mar 27 16:00:18 2026 GMT
Subject: CN=4535e38fe859616d4f99be2d518f0eec87013790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:0c:e8:84:fc:2a:8b:86:c7:90:00:e6:d7:
d1:12:23:06:57:9a:c0:3d:98:44:b3:5d:f6:23:28:
21:1e:74:ab:58:93:9c:ee:2e:f1:5d:84:9c:fd:ae:
7f:62:53:83:6d:ad:2e:19:14:f4:df:4a:27:15:cb:
fc:31:c6:72:62:45:fa:d7:19:82:9e:fb:ff:16:48:
1a:0c:00:f1:73:ca:7b:ef:2b:8c:0c:6c:09:34:99:
0b:dc:a0:ed:df:b1:68:8d:07:c5:7c:6a:bd:be:69:
78:9b:5a:5e:30:ba:6d:06:e0:62:d3:73:4d:af:9c:
4f:67:d0:66:3a:39:60:7a:8c:a2:7a:ac:b7:75:94:
09:21:26:bf:b1:63:63:cb:15:9a:87:b0:e3:02:e2:
7d:5f:08:e6:a1:5b:d7:b9:19:18:ed:6f:ee:79:f0:
7b:6e:38:c1:de:95:e3:68:52:d1:a9:18:9a:dc:68:
ca:b7:34:0f:c0:f1:f0:92:fd:78:d9:5d:e3:cb:c3:
f1:95:ae:a8:06:33:ca:a7:e8:68:3e:d5:bb:6b:eb:
39:8c:33:09:af:96:77:84:04:09:c1:2a:d1:72:35:
b4:a9:8f:15:73:06:64:78:77:e4:d2:5f:d3:f4:2e:
ed:2b:91:c3:6c:a8:07:7f:a8:fd:37:4a:ac:18:71:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:E3:8F:E8:59:61:6D:4F:99:BE:2D:51:8F:0E:EC:87:01:37:90
X509v3 Authority Key Identifier:
keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:5c:96:d2:45:c2:f1:04:47:35:81:4f:0c:dd:87:d5:fd:e1:
3f:ce:56:e8:52:bc:f9:74:db:db:f7:52:62:db:1e:6d:b8:90:
a5:a6:40:16:0f:1f:ac:c2:4a:16:3a:5f:c2:03:59:a4:a0:36:
60:86:4f:68:f6:5a:68:80:23:0e:dd:8b:e2:8c:7e:17:45:5c:
9e:c4:a0:98:29:2b:09:09:d9:82:06:7e:75:ab:7c:70:ae:a2:
69:8e:4c:36:03:40:2d:2a:33:8e:dd:ff:8f:e1:41:6a:f1:c5:
93:de:a1:3f:89:a6:43:41:ba:66:a2:5b:1b:ff:b3:be:72:8f:
2c:50:9e:29:90:c9:ca:eb:34:a3:76:9f:37:e5:7b:02:33:60:
d1:cc:dc:77:e3:98:28:05:87:94:e2:f5:b2:01:4c:78:45:6d:
9c:68:d5:82:80:9e:53:f5:00:e0:e9:ae:6b:db:1f:3e:2a:53:
25:21:04:67:b8:ca:e7:27:79:72:a7:4d:28:27:7d:6e:af:9e:
30:06:2f:c4:f2:6d:3c:48:a4:cc:ba:9d:c8:5e:d4:70:15:87:
fa:8e:ad:ad:9e:12:3e:44:6d:5e:41:77:0c:85:07:a4:ef:59:
1b:5b:7a:74:d1:e8:22:42:b3:13:ab:30:cb:1b:57:4d:e2:09:
68:b5:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:13 2026 by rpki-client