Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
File: RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft (raw, json)
Hash identifier: QA/5EdajeGk0+D+ViFTlj/D17NY/biWH5rBpFxLIRrc=
Subject key identifier: 0C:85:ED:1E:49:38:D4:CA:64:4D:A6:E6:F1:2F:EC:33:20:BE:28:87
Authority key identifier: 44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
Certificate issuer: /CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Certificate serial: 019D2816C96077DFA8EED6D193E3CFDFC6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
Manifest number: 02E1
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl (hash: WF6AZLsVEDjdHK++nBK+BpEbVIz1nJU7Aui8zTbHT1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c9:60:77:df:a8:ee:d6:d1:93:e3:cf:df:c6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=0c85ed1e4938d4ca644da6e6f12fec3320be2887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:65:86:5b:31:6e:f9:dd:90:c5:64:c5:32:
47:7f:90:66:51:ff:db:52:da:c0:f2:e9:c3:59:43:
6a:31:bd:58:77:db:9c:21:b2:09:00:53:5f:5f:3b:
07:2d:4e:e3:26:f9:b7:22:38:24:a5:ec:35:18:30:
39:6c:2c:91:e7:b9:33:44:f1:bb:46:11:4b:b4:2c:
f4:d2:d4:a5:de:23:82:1c:6f:0e:a5:df:46:11:f9:
53:39:f4:ed:00:4c:1c:4f:33:2e:fb:4f:de:9f:d4:
5e:fc:48:fd:83:80:a0:74:65:44:c5:be:00:83:a8:
16:5b:75:69:3e:10:ae:b5:c0:2b:c2:7e:b3:59:87:
27:11:fa:e7:dc:91:f4:7d:fa:6a:ce:02:c3:33:cd:
1d:c3:4b:32:06:40:66:7c:28:47:92:42:af:b7:82:
10:82:6b:b0:1d:b4:e4:af:97:fb:73:70:96:d4:7a:
83:b8:18:99:39:f3:1b:06:0f:5d:c3:92:0a:23:99:
db:3c:13:c4:80:70:06:96:82:44:05:d4:96:15:6f:
45:26:61:80:71:d2:12:b3:c7:a2:67:7e:d0:c5:76:
3d:64:fe:60:e9:a3:ec:2c:f8:fb:82:13:b6:0e:e8:
cb:20:6f:93:15:16:49:fa:f2:e4:13:77:73:42:04:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:ED:1E:49:38:D4:CA:64:4D:A6:E6:F1:2F:EC:33:20:BE:28:87
X509v3 Authority Key Identifier:
keyid:44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:71:5d:7a:e4:f4:0d:69:c0:93:46:3d:77:7c:39:1c:ff:0d:
8c:a3:9e:a6:78:f6:92:2a:6b:0d:f4:30:39:a3:3f:0e:ce:1e:
be:52:f3:1c:0f:b1:3f:54:b3:ed:40:0f:ca:cf:f5:43:f3:18:
92:50:e4:85:b9:05:0a:4f:40:69:9e:eb:94:cd:9b:f6:dc:0e:
be:1f:e1:28:a1:5e:60:49:07:5c:ea:04:e4:e5:65:b7:11:27:
4b:b2:bf:5f:b3:ae:c4:7b:b1:55:13:78:e3:88:bf:45:19:f2:
90:6b:c7:48:61:5b:bc:f3:d6:96:af:3d:bc:b5:52:f8:54:e5:
98:6f:4c:27:ee:fc:17:b8:08:cc:c5:88:a9:03:47:28:6a:b0:
93:91:da:aa:79:c6:a7:e5:ae:b7:95:15:12:0b:b1:6d:24:f2:
b3:ab:dd:c7:b0:01:f3:67:9f:6c:a9:d1:80:e8:0a:ee:dc:b8:
4a:a7:86:b9:f0:42:7b:f7:f4:0d:1b:62:a6:00:36:c4:57:25:
df:a4:ca:47:ab:ce:33:9c:86:8e:ac:69:c2:ae:44:05:b4:a2:
d4:c8:07:18:f1:e0:a9:f3:70:55:1c:0c:7d:d9:24:e3:8b:af:
fd:89:9d:de:cd:8b:b0:ff:92:da:55:6f:c2:0a:24:e7:74:01:
b4:14:a5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:02 2026 by rpki-client