Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: yZWUEMBR2P0RS5wLDhQjqVFei662JJmhF1sTt7w+kdY=
Subject key identifier: 27:A1:1F:5D:44:A7:A4:A9:3B:17:B5:85:E5:41:B5:94:4D:B9:53:99
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 019D2A3B550C9C58F1C112615C63CD8F1A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 1389
Signing time: Thu 26 Mar 2026 13:00:24 +0000
Manifest this update: Thu 26 Mar 2026 13:00:24 +0000
Manifest next update: Fri 27 Mar 2026 13:00:24 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: q53lKp7s1Xtr1cS6PeOJWdCD7Oibb8OcaI5WSdP2kCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:55:0c:9c:58:f1:c1:12:61:5c:63:cd:8f:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Mar 26 13:00:24 2026 GMT
Not After : Mar 27 13:00:24 2026 GMT
Subject: CN=27a11f5d44a7a4a93b17b585e541b5944db95399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:2f:de:2c:45:71:11:b8:62:54:40:d4:3a:
d4:a0:33:7f:30:f8:1e:46:14:e0:3d:09:ec:97:88:
8f:15:42:17:c3:8b:18:2f:9a:52:dd:0e:4a:30:cd:
62:5f:80:1c:bb:2e:58:22:fd:c5:a2:e2:a1:83:0b:
47:c1:c6:0e:f0:04:a4:71:ba:26:f8:2d:40:27:85:
fd:03:bf:ff:85:be:2a:20:09:05:a9:b1:62:05:a2:
dc:d3:a9:0e:a2:e4:b4:1d:17:8c:65:1c:4a:f4:15:
62:1a:68:7f:2f:45:64:4e:80:83:48:db:51:4f:23:
05:25:1e:af:5a:c9:01:08:c8:eb:f8:59:72:a5:86:
1f:41:f0:53:42:28:34:b5:27:a9:88:bc:4f:dd:68:
5f:46:3b:85:2c:25:3a:af:0b:c9:79:41:e3:ab:c5:
e1:12:87:81:f4:11:64:8e:1d:33:6e:9f:b2:6a:65:
e1:41:33:9a:25:05:1a:06:86:42:32:55:37:fc:8a:
51:e7:ac:4b:cd:05:e7:d2:f4:92:b0:50:fe:a1:13:
4f:8b:b2:60:16:66:4f:bc:94:e9:53:13:36:a5:16:
29:29:37:57:8c:fa:17:f2:3f:4c:de:a5:7d:de:3d:
0b:d0:e2:33:7b:c6:f0:a9:b5:d4:6f:bb:31:c0:4d:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:1F:5D:44:A7:A4:A9:3B:17:B5:85:E5:41:B5:94:4D:B9:53:99
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:86:b5:4a:87:8f:d7:1b:97:7e:7b:24:29:f7:6b:83:61:
66:47:95:9e:4c:58:86:ef:17:4c:31:31:09:65:30:a7:c5:0b:
e9:81:a7:20:66:36:21:bb:f9:4a:31:5a:a0:5f:18:52:84:01:
4a:76:38:0f:8f:e4:33:31:bc:3d:46:ad:0a:a9:d0:83:e6:fd:
73:c8:09:f5:fb:5a:86:11:dd:30:72:4b:af:60:c4:56:60:d7:
0d:14:d8:f7:95:d6:a1:85:ee:06:51:47:dc:4d:97:f6:b7:fd:
2c:e4:40:7a:41:16:0a:dc:d0:59:87:b3:c8:69:7e:1a:ad:0c:
7e:2d:86:09:10:cd:ab:f2:41:da:e8:50:39:65:24:91:ba:21:
37:c5:bf:46:61:6a:2d:26:f2:24:6a:c9:66:3c:02:32:ed:3c:
64:c6:93:1b:f0:8e:6b:d5:e6:a1:dd:53:a8:10:59:2a:a3:d7:
27:2f:d5:d6:53:da:e3:ce:d1:66:cc:66:d1:4f:48:c0:7c:77:
b6:ae:86:76:b1:c5:89:1a:20:8c:b2:8c:c7:c5:24:1d:71:ed:
7d:06:22:64:98:a1:b0:a1:b6:5b:c9:50:16:f5:42:9c:e2:34:
e3:97:c0:0d:34:0b:5b:6f:a2:b5:24:2c:70:bc:28:3d:ac:fd:
6b:07:26:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO1UMnFjxwRJhXGPNjxovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZDg1ZDIzMWFkNTRiODQzOWMyYWFlZDkxYTU3NzU4NmFj
NDYwMDAwHhcNMjYwMzI2MTMwMDI0WhcNMjYwMzI3MTMwMDI0WjAzMTEwLwYDVQQD
EygyN2ExMWY1ZDQ0YTdhNGE5M2IxN2I1ODVlNTQxYjU5NDRkYjk1Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kcv3ixFcRG4YlRA1DrUoDN/MPge
RhTgPQnsl4iPFUIXw4sYL5pS3Q5KMM1iX4Acuy5YIv3FouKhgwtHwcYO8ASkcbom
+C1AJ4X9A7//hb4qIAkFqbFiBaLc06kOouS0HReMZRxK9BViGmh/L0VkToCDSNtR
TyMFJR6vWskBCMjr+FlypYYfQfBTQig0tSepiLxP3WhfRjuFLCU6rwvJeUHjq8Xh
EoeB9BFkjh0zbp+yamXhQTOaJQUaBoZCMlU3/IpR56xLzQXn0vSSsFD+oRNPi7Jg
FmZPvJTpUxM2pRYpKTdXjPoX8j9M3qV93j0L0OIze8bwqbXUb7sxwE1neQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCehH11Ep6SpOxe1heVBtZRNuVOZMB8GA1UdIwQY
MBaAFCHYXSMa1UuEOcKq7ZGld1hqxGAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82YTZiNTUtY2EwMi00NThkLThiNWQt
NzRkNzczMDJiMTg0LzEvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82YTZiNTUtY2EwMi00NThkLThiNWQtNzRkNzczMDJiMTg0
LzEvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigWGtUqH
j9cbl357JCn3a4NhZkeVnkxYhu8XTDExCWUwp8UL6YGnIGY2Ibv5SjFaoF8YUoQB
SnY4D4/kMzG8PUatCqnQg+b9c8gJ9ftahhHdMHJLr2DEVmDXDRTY95XWoYXuBlFH
3E2X9rf9LORAekEWCtzQWYezyGl+Gq0Mfi2GCRDNq/JB2uhQOWUkkbohN8W/RmFq
LSbyJGrJZjwCMu08ZMaTG/COa9Xmod1TqBBZKqPXJy/V1lPa487RZsxm0U9IwHx3
tq6GdrHFiRogjLKMx8UkHXHtfQYiZJihsKG2W8lQFvVCnOI045fADTQLW2+itSQs
cLwoPaz9awcmZA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:44:14 2026 by rpki-client