Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
File: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft (raw, json)
Hash identifier: wkVfzVbZjuB9zmr+4yygHFtwba8bNtnJOmBrNvIk6Mk=
Subject key identifier: 48:57:CE:0D:0E:6E:95:A6:2A:D8:C7:7A:81:49:F3:D4:90:E7:E2:7A
Authority key identifier: F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
Certificate issuer: /CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Certificate serial: 019D2695DE2BFAC311FAB23751FB63F6CD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
Manifest number: 88
Signing time: Wed 25 Mar 2026 20:00:49 +0000
Manifest this update: Wed 25 Mar 2026 20:00:49 +0000
Manifest next update: Thu 26 Mar 2026 20:00:49 +0000
Files and hashes: 1: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl (hash: hRr7LE0KYR5jH6RgPsItUjI2d6q5h+Z9E/GDsMyJIAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:de:2b:fa:c3:11:fa:b2:37:51:fb:63:f6:cd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Validity
Not Before: Mar 25 20:00:49 2026 GMT
Not After : Mar 26 20:00:49 2026 GMT
Subject: CN=4857ce0d0e6e95a62ad8c77a8149f3d490e7e27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:74:05:35:81:97:72:7c:ed:a6:02:59:5c:
54:17:45:73:cb:35:72:44:f5:a2:01:67:3e:df:19:
0b:8a:6c:ce:c7:5f:f6:ca:12:9a:c1:00:11:ef:85:
08:2f:09:39:90:41:d2:bc:ff:25:40:38:ee:e1:72:
8e:c0:4e:46:6f:8e:25:e2:2f:19:be:88:9d:d7:44:
b3:5c:e2:b4:ee:53:20:41:7a:1d:3d:e8:66:44:62:
67:49:05:ac:bb:b2:ed:d9:72:c4:31:9d:79:c7:f8:
4a:07:ca:ea:f1:b2:30:d7:b5:37:8d:37:6e:fb:d2:
55:a4:78:ab:38:1d:74:00:24:a8:ed:52:f1:0a:07:
55:a8:61:89:a3:48:7b:04:99:bb:00:aa:dd:5e:65:
6f:ff:1d:e8:4e:11:04:cf:45:39:69:ad:19:52:94:
7f:e5:69:e2:e0:e2:ab:a8:e0:7c:af:66:cb:34:22:
a0:65:1a:d9:81:03:c0:17:e2:a7:32:6e:ab:40:29:
1d:8b:e0:03:5f:81:c0:b3:37:0e:6a:51:25:52:1e:
e1:fb:6b:fb:f5:10:e9:3f:14:85:f3:17:5c:da:fe:
d1:d6:e8:d6:b2:9d:ec:64:64:0a:b7:73:38:c6:7c:
db:50:de:db:07:80:af:f0:8a:5e:f4:2f:9e:21:89:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:57:CE:0D:0E:6E:95:A6:2A:D8:C7:7A:81:49:F3:D4:90:E7:E2:7A
X509v3 Authority Key Identifier:
keyid:F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d5:7d:b4:21:6f:ee:2f:42:77:f2:cf:76:57:76:a8:a9:61:
85:06:a7:1f:9b:d5:e2:0a:e1:e8:0b:de:7a:bb:dc:67:00:31:
17:98:37:f0:ea:04:d3:4f:d4:dc:5a:b5:2a:0a:c3:dd:35:d8:
3e:7b:7a:73:83:6b:61:6d:e9:55:9b:85:8f:d4:3f:51:38:56:
55:4c:89:e5:6a:d5:f5:db:07:c6:fa:36:66:72:9d:c9:15:49:
3e:06:f8:92:2a:b1:ee:11:14:42:69:aa:37:26:0d:cf:d0:03:
df:55:8f:15:12:04:0f:44:35:05:7f:7b:01:9f:17:e3:7c:13:
5e:2e:39:60:3f:9f:37:fe:c5:09:45:41:20:c9:e5:23:67:37:
d2:4c:c4:d5:25:51:e0:72:bb:75:e8:a8:9e:84:cf:d0:2d:2b:
13:78:e3:9d:3a:79:fb:8f:e4:ba:6f:00:57:27:f3:43:f2:15:
4d:76:a9:bd:d9:64:94:ba:65:d7:3a:43:b7:be:6e:8a:b2:d5:
03:1a:06:a1:f7:e3:fa:f2:ac:56:64:0e:1c:1e:da:6c:f3:80:
41:3b:b6:63:05:bf:20:99:9c:8d:5b:72:9f:b8:90:52:e8:3e:
42:38:bd:1e:75:09:64:2e:15:f0:0e:c4:45:ae:70:4f:0e:ff:
29:cb:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:13:49 2026 by rpki-client