Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: No2Oo9tESyUhpmAdV6mFiKzrwzpmJRlMCop6UtGnwV4=
Subject key identifier: 80:11:5E:46:47:F9:DE:34:E3:B9:25:23:6B:4A:13:6D:BE:C0:B4:23
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 019D2704923502D6C8DAB25F035F0D7CF05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: nnPC8bwX3x6dO3hx3jfnqxyVo7CSSGsgzbYG9THPfws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:92:35:02:d6:c8:da:b2:5f:03:5f:0d:7c:f0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=80115e4647f9de34e3b925236b4a136dbec0b423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:d8:8a:d4:aa:3d:a8:8e:a2:32:cf:fb:11:
02:ee:00:3d:16:27:eb:6c:28:9c:57:96:8e:ab:a3:
e4:03:39:86:50:2a:a1:f5:3d:84:58:ca:0b:96:0f:
33:cd:04:26:5f:a0:d7:3e:8a:bf:5c:2f:82:f0:4b:
2a:83:5a:72:d2:93:44:69:9d:83:b0:de:ce:8a:5c:
6d:de:9a:64:06:55:bb:ea:19:db:f8:1a:b4:be:48:
7d:51:7f:2e:da:f7:9f:f8:5d:ac:d7:d9:7b:9a:e2:
1c:8c:17:a3:e3:3b:87:91:c8:e4:39:df:07:93:83:
a7:bf:d4:3f:d2:d0:65:99:76:e8:f0:bd:f8:ad:45:
14:05:81:fd:f6:55:f4:cf:a8:94:fa:62:aa:7e:b8:
3c:d8:dc:8e:c7:39:2a:8a:bd:5b:29:62:37:8d:bd:
54:7d:fc:88:e7:eb:0a:02:1b:b9:cb:8b:79:23:c6:
a2:f7:d4:b8:c0:93:83:0d:d1:0c:fc:7e:9a:80:68:
3c:34:bf:95:b2:4d:f4:07:6f:9e:50:22:5b:2e:43:
ba:cf:fc:4a:e8:0c:c0:f5:7e:df:d2:ab:70:cc:06:
b2:ad:4e:3b:8a:60:ac:8b:2b:d6:06:10:89:5f:17:
a8:a6:4b:29:b5:7f:7f:b7:29:94:06:38:11:3b:78:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:11:5E:46:47:F9:DE:34:E3:B9:25:23:6B:4A:13:6D:BE:C0:B4:23
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fd:2e:9b:83:9b:47:78:99:a0:5a:81:46:45:2f:10:25:9a:
d9:32:68:08:60:cc:57:3c:b9:e6:dd:79:56:50:b3:8a:ef:df:
95:b4:f3:07:2b:ac:b5:7a:2f:39:71:17:d4:17:89:05:34:78:
fd:d2:aa:79:7b:2c:d0:fa:bc:3a:1a:7f:73:42:16:20:81:11:
0a:35:56:b3:0b:51:0b:d4:a0:d4:d2:f3:a9:62:1b:27:fd:c3:
04:c6:dd:e7:a4:e3:a9:f2:99:9a:40:5d:1d:d7:7d:2e:24:d1:
52:de:18:15:75:b5:d4:99:1b:51:47:b1:be:79:3c:d3:56:fc:
b5:c7:ec:4c:2f:57:c2:9f:a7:f3:70:9a:8d:f4:5e:34:a2:32:
c3:7b:f1:8d:2a:81:85:28:96:70:0c:02:dd:82:fc:28:0d:bb:
83:c0:6d:8b:4a:df:f9:66:71:c3:a9:d0:ca:85:27:a8:03:84:
22:6c:b7:d5:9a:36:87:fd:4f:b5:ce:0a:56:48:ad:0c:9b:e2:
9b:d9:f2:d0:4c:f7:c5:18:63:be:95:99:27:27:7a:ae:73:86:
d2:f9:23:70:b1:c6:ad:bf:31:3b:59:06:e0:08:c7:03:94:7e:
89:f9:53:9c:2d:1f:92:65:d9:c2:2f:48:38:5e:5b:f1:00:4a:
03:64:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:28 2026 by rpki-client