Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: ymnlnfXWJUnM7kjqKD7aj6U4xINPq4zeN+UBxRasRVo=
Subject key identifier: 77:3F:9F:C6:5D:9C:EA:43:4E:FD:37:55:52:FC:51:8F:D6:32:BA:DE
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 019D258421472053AEE5EE1CA0995CCA26BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 0863
Signing time: Wed 25 Mar 2026 15:01:49 +0000
Manifest this update: Wed 25 Mar 2026 15:01:49 +0000
Manifest next update: Thu 26 Mar 2026 15:01:49 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: bWkPaVCKux0HM5I6HBSp4K83doQNk9q3+j53GoodcIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:21:47:20:53:ae:e5:ee:1c:a0:99:5c:ca:26:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Mar 25 15:01:49 2026 GMT
Not After : Mar 26 15:01:49 2026 GMT
Subject: CN=773f9fc65d9cea434efd375552fc518fd632bade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:25:06:a9:01:9f:d3:5f:3a:53:c7:23:a8:
07:7a:09:2b:0d:52:8e:8d:5d:71:a5:8c:2d:cf:de:
a8:00:f6:74:5e:57:d6:36:0f:92:2b:6a:15:8a:6f:
ed:16:82:0b:61:0c:d4:37:52:0a:0d:97:63:5f:a8:
03:b7:79:64:d7:bd:1b:b2:4e:6c:bf:ee:c7:74:59:
1c:4e:aa:6b:f7:fc:3e:21:d5:bf:9b:6b:df:bd:7e:
95:29:56:ae:95:62:96:ba:b3:ea:24:c6:de:47:21:
25:c6:41:28:5f:51:fd:bc:02:57:35:10:a3:69:65:
30:2b:4a:6a:9e:3e:64:27:39:21:d3:a9:5f:bf:00:
bb:2c:6a:cc:36:96:b2:e2:b1:8a:08:07:a4:02:73:
de:02:2b:68:c3:22:51:6e:22:f9:d9:cf:38:c2:87:
96:13:cd:8d:d1:2a:0a:d5:79:b0:13:58:a3:d3:90:
8b:81:18:2b:22:40:4d:67:6a:0b:e8:da:aa:33:2c:
fb:b7:0a:a6:d6:ea:61:a6:2a:69:b8:65:e8:a7:bd:
24:b3:91:06:de:e3:d7:b2:2f:d7:5c:31:0e:15:4c:
6d:64:fa:7a:ef:de:30:0c:cf:6c:46:e1:ab:40:9d:
3e:e4:29:fa:68:c7:c2:26:3e:53:50:2e:31:37:39:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3F:9F:C6:5D:9C:EA:43:4E:FD:37:55:52:FC:51:8F:D6:32:BA:DE
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a8:12:fa:6c:54:17:ba:96:0b:02:de:ed:9e:57:68:48:9f:
a7:63:7d:5f:54:c1:7e:92:d9:a5:43:ec:28:70:69:ff:3d:12:
8f:a8:a2:bd:8b:4b:f8:2d:9b:9f:95:1d:f6:40:9e:b4:21:54:
7a:c5:3a:ff:28:5a:fd:d6:90:c9:79:cb:44:b5:7c:00:90:3a:
b5:19:1c:a7:d7:0c:21:e0:96:25:2a:34:27:31:c3:a9:a7:00:
12:bd:9a:72:ef:f1:81:49:19:03:69:a1:ec:af:e7:e0:2d:9c:
28:9e:3a:c6:19:77:3a:e0:11:b4:88:c0:1a:55:7e:f5:3d:09:
94:f5:db:34:c3:f3:2f:b6:2c:fb:52:de:21:79:f4:5d:48:1e:
1b:33:ee:f1:b3:7e:6f:55:c5:21:de:41:8e:03:35:3e:e2:b2:
bf:9e:8b:af:5f:1a:a8:3c:7b:f9:e0:c1:b2:67:d8:3b:95:37:
c4:4f:69:6e:24:cc:4b:43:ea:1d:19:cf:aa:01:14:f9:6e:1b:
69:b7:9c:8b:53:ab:3f:0a:67:32:d8:fd:c0:18:01:4f:ab:04:
75:cd:23:b4:e9:43:8c:05:5b:9a:c3:12:2b:bf:0f:28:37:88:
69:76:cc:40:87:33:4c:10:df:9e:13:91:c0:12:ea:c8:09:bf:
27:2d:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:07 2026 by rpki-client