Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: LA4vA5A993KFbNFPJqbtuPM6Uzfj0BGFhKhwfScuo4U=
Subject key identifier: 20:01:3A:31:7A:21:8D:21:30:2C:94:E7:15:55:25:D2:7A:35:43:A7
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 019D28F21F93CDBC121EB00EC72948A11E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:00:49 +0000
Manifest this update: Thu 26 Mar 2026 07:00:49 +0000
Manifest next update: Fri 27 Mar 2026 07:00:49 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: LLS0eivzp+bgeD6kagBC524Jw4BPs2JNBAxzn01NiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:1f:93:cd:bc:12:1e:b0:0e:c7:29:48:a1:1e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Mar 26 07:00:49 2026 GMT
Not After : Mar 27 07:00:49 2026 GMT
Subject: CN=20013a317a218d21302c94e7155525d27a3543a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:15:f4:62:75:d8:44:80:12:60:1e:6f:85:
c6:7d:28:dc:b6:be:d6:05:c2:42:62:7d:a2:b7:3b:
7b:9e:51:04:15:a3:05:35:72:7d:93:fb:45:49:59:
76:64:97:8d:9f:4d:21:a3:f2:d0:9c:0b:ca:9b:77:
f3:bd:04:6a:0f:1f:3b:dd:98:ea:ba:28:86:a6:a0:
9b:55:c5:9e:46:fb:8e:4f:f9:33:93:07:f1:47:6a:
f1:cf:d7:e1:ff:09:51:17:48:45:53:cc:72:d9:28:
d0:a3:8e:57:38:c2:4e:eb:c7:70:e9:0f:f8:1c:65:
37:eb:42:a8:40:40:d7:d6:fc:2d:a1:df:4f:6f:88:
0d:06:6d:3d:46:0b:f0:ae:a0:4b:16:65:b9:30:be:
c6:3f:4b:43:d2:f4:8a:f5:90:2e:f0:23:9c:64:48:
93:b8:da:00:14:b9:30:51:71:7a:9a:a7:dc:a5:12:
d7:9b:e4:62:5d:1d:65:dc:4d:47:69:31:af:5d:8d:
ad:b4:dd:6e:97:d1:40:d2:61:fe:b8:3f:91:5f:9f:
db:cd:d3:0f:35:60:a3:2a:ea:c6:19:74:c9:d1:83:
2e:21:61:b6:0f:44:be:55:dd:8d:d4:a4:64:88:2f:
d2:b3:a4:12:32:9c:ef:cf:6d:2f:25:0c:10:63:06:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:01:3A:31:7A:21:8D:21:30:2C:94:E7:15:55:25:D2:7A:35:43:A7
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:08:f5:14:89:21:ab:db:9c:c4:e2:3a:1a:5d:a7:e3:95:71:
e0:fa:9a:9c:32:50:44:3a:f0:83:dd:6f:26:b0:8e:bc:c6:25:
dc:a2:8d:42:1c:15:e6:b9:04:82:fd:49:d9:82:13:5b:d7:8e:
8f:03:77:9b:cd:20:ec:3c:e2:95:9a:67:60:91:a8:ed:27:92:
37:a4:95:ad:8f:64:66:50:3c:75:92:df:0e:d9:9b:f9:d2:df:
09:0a:c0:09:8f:a1:6b:a5:56:c6:04:1f:0a:86:db:0f:91:c4:
49:76:7d:51:dc:89:62:13:29:24:12:9b:86:de:67:47:81:c3:
ff:e7:e7:b8:02:fa:59:b7:d0:bc:0a:75:f4:c8:1c:21:8f:2d:
58:50:7e:70:01:f6:36:b2:cd:9f:4f:b5:aa:11:08:2e:20:d5:
03:ec:be:10:8b:c8:89:45:ea:12:31:d2:38:fd:f9:73:7e:4c:
04:09:5e:cf:a9:53:bf:1a:4a:bc:3f:47:2f:d1:f2:b6:a7:4a:
86:20:86:eb:c8:8a:63:6b:45:5a:c1:79:8d:cc:b2:b3:c5:7a:
b7:ff:45:5c:b1:c0:ba:74:d7:db:b7:a4:72:34:c2:0f:ef:57:
60:c7:69:cb:1b:8f:e9:c8:92:57:88:75:17:3a:bb:32:1d:11:
9c:e4:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:39 2026 by rpki-client