Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
File: d-Sz2VlinaKIrNim3gA-zgyTTbE.mft (raw, json)
Hash identifier: R7yIAJxkAndiuXfLKrPW8ZCEfGviUBRoBDZgMALBgHM=
Subject key identifier: 46:7B:22:1F:6A:10:1D:A9:A8:D2:55:91:60:64:FD:37:07:40:73:AC
Authority key identifier: 77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
Certificate issuer: /CN=77e4b3d959629da288acd8a6de003ece0c934db1
Certificate serial: 019D26966CF213B988254691E9B74552C703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
Manifest number: 0721
Signing time: Wed 25 Mar 2026 20:01:25 +0000
Manifest this update: Wed 25 Mar 2026 20:01:25 +0000
Manifest next update: Thu 26 Mar 2026 20:01:25 +0000
Files and hashes: 1: d-Sz2VlinaKIrNim3gA-zgyTTbE.crl (hash: lS3VTiXXZKqYHtIaUJCk/3jKQ/00T7AgVNaaWf0+TnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:6c:f2:13:b9:88:25:46:91:e9:b7:45:52:c7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e4b3d959629da288acd8a6de003ece0c934db1
Validity
Not Before: Mar 25 20:01:25 2026 GMT
Not After : Mar 26 20:01:25 2026 GMT
Subject: CN=467b221f6a101da9a8d255916064fd37074073ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:80:c9:9f:7c:c4:88:f7:fc:0e:f2:17:75:
fc:26:07:00:57:4a:1c:50:6c:a3:c8:87:4a:5a:cd:
63:2b:67:68:c5:41:9c:a0:07:8f:87:b0:3e:73:4d:
e1:2d:0a:5b:87:9a:bc:4d:58:e8:f5:6d:13:c0:6e:
8c:80:e6:7b:cb:06:ba:4c:73:52:28:5b:ee:88:83:
e5:fe:de:0d:fc:12:b8:8d:7c:85:68:fe:fe:46:26:
42:bb:79:b2:3a:58:36:d6:d2:51:43:ed:6a:dd:eb:
e2:d3:f5:75:2b:15:88:41:06:7f:e2:8c:74:46:d4:
41:99:fc:e6:9c:83:cc:f2:5c:fe:f4:66:72:42:ad:
47:2e:de:14:0a:d1:42:a2:d3:71:db:79:1f:0c:ba:
78:2b:61:a0:0e:3f:5b:dd:d0:65:cc:01:07:99:f3:
d6:ee:b6:8e:4c:a9:26:69:91:d8:b6:d0:5f:4e:6f:
bc:73:7f:9c:95:a9:75:fe:c0:11:91:5c:8b:da:08:
91:ed:6d:4f:52:55:57:46:14:b7:6b:0e:0d:13:1a:
2c:ac:6d:7b:e4:06:08:f6:ea:2f:d9:9d:49:5d:3a:
5c:47:4b:fd:84:50:e4:5c:62:1f:50:9f:e7:6c:a7:
9b:0f:90:c8:cc:b5:03:db:58:56:16:59:59:78:33:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7B:22:1F:6A:10:1D:A9:A8:D2:55:91:60:64:FD:37:07:40:73:AC
X509v3 Authority Key Identifier:
keyid:77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0d:66:13:db:9c:a5:12:dc:db:60:25:2c:17:9a:fe:84:e5:
31:a7:0d:33:78:aa:ff:4c:5a:03:ff:1a:c7:61:ea:7f:0e:96:
25:12:a8:25:54:e9:54:a4:d5:4d:ec:86:a8:cd:a7:8a:d9:3f:
ca:3b:e4:59:b9:6f:24:af:ad:55:72:63:43:bf:e6:7d:be:8d:
20:d8:99:d4:66:68:e8:97:fc:51:4e:ee:02:ac:0c:7f:6a:a8:
c9:d4:ec:53:90:f4:3f:68:ed:7d:a1:48:3b:9d:94:b1:67:ce:
15:da:38:53:4a:ca:98:b6:b6:7c:fa:fc:18:75:80:cd:8c:27:
d1:a2:c0:bc:56:fe:46:05:51:dd:96:9d:5c:45:5d:32:e5:94:
c8:9e:09:1d:1a:ce:6c:c1:2a:68:6b:25:23:d7:9c:7f:fe:0e:
99:00:b1:1c:bf:c1:7e:5b:2a:f1:d9:b7:00:3c:a0:a2:11:42:
a1:dc:88:a5:9d:13:96:9e:2d:72:4d:cf:a5:2b:6e:75:3e:02:
f1:58:22:c7:85:09:39:1d:b3:ab:1f:98:af:81:54:4c:32:ab:
b5:94:8a:72:ab:2a:f5:5f:29:31:7e:39:7f:f0:bd:d0:f8:b1:
4e:e3:71:c4:82:24:a5:7c:28:ca:2f:fe:15:d7:1e:16:52:63:
c8:20:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:16 2026 by rpki-client