Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier: 2HQBEZkAkTO53K1GnStBP9oSL7W7FOkbkpBOjsC/AYM=
Subject key identifier: 84:96:20:DB:33:CF:8E:31:74:22:FA:02:FC:2A:1F:33:1F:44:11:C5
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial: 019D26CD8A8E7E95CA5C96FA785E84FC8440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 21:01:37 +0000
Manifest this update: Wed 25 Mar 2026 21:01:37 +0000
Manifest next update: Thu 26 Mar 2026 21:01:37 +0000
Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: 6MSjgnmvHhfFIGz7UiZxQ2Iu6v3eBNtFhPHr/WcOciU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8a:8e:7e:95:ca:5c:96:fa:78:5e:84:fc:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
Validity
Not Before: Mar 25 21:01:37 2026 GMT
Not After : Mar 26 21:01:37 2026 GMT
Subject: CN=849620db33cf8e317422fa02fc2a1f331f4411c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:26:00:da:fa:3b:ea:08:1b:98:dc:01:5d:
74:54:93:4d:80:d9:ce:a9:11:6f:fd:e5:90:9d:ea:
27:07:e4:db:f9:86:39:79:8e:d9:ca:89:ca:77:c8:
d6:eb:bd:86:72:43:5a:51:aa:33:dc:6c:67:a8:18:
4f:78:ac:7b:95:93:63:5c:02:a9:cd:6d:62:9c:d4:
4d:8d:82:40:2a:46:a6:c5:36:6d:98:e1:95:55:86:
2e:f1:64:32:70:ee:4e:36:ea:d3:7b:1d:33:7a:e4:
72:ba:37:50:0b:fe:a8:5c:50:b2:b0:a1:0d:b7:14:
45:10:7d:a9:b1:47:36:58:c3:27:90:93:cc:af:22:
cc:34:38:a6:bb:ce:cf:2b:91:8c:a1:a3:a1:91:1b:
5b:85:23:14:ea:cb:78:5c:2f:4b:b7:fc:eb:2c:ee:
a9:78:97:aa:f1:a3:74:34:ed:64:35:28:bf:2d:b0:
e6:dc:20:89:b2:7b:e5:1a:af:ae:f2:8d:78:f7:6f:
cd:ae:d3:55:3d:5f:36:d8:15:0b:5d:31:53:4a:67:
9c:ae:42:aa:20:13:3e:a7:c6:ec:8c:3d:76:af:2a:
2a:68:99:00:2f:7a:85:8e:3a:1f:bc:72:12:1b:59:
f6:3a:c9:be:23:30:28:69:4b:f0:68:60:49:66:f6:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:20:DB:33:CF:8E:31:74:22:FA:02:FC:2A:1F:33:1F:44:11:C5
X509v3 Authority Key Identifier:
keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f4:1f:a4:43:59:94:2a:2d:b2:5a:50:78:87:83:4d:8e:9f:
d3:9c:3b:46:2a:e5:f8:7b:6a:3e:49:cc:c1:42:1d:73:9a:23:
ce:43:ee:47:ef:85:ff:1d:64:ec:27:e2:a6:00:5c:8d:4c:56:
4e:25:f1:cf:5f:38:61:c6:18:cc:97:ce:ec:ff:d7:2e:1c:57:
58:00:2e:ca:59:84:61:fc:33:bf:bd:c8:54:75:73:63:a4:80:
13:05:b9:61:97:d2:cb:73:56:3b:39:f9:2d:38:42:2d:ba:b2:
cb:9b:e4:4d:9b:bd:4c:8a:aa:10:55:27:30:7d:b1:a8:13:ac:
cd:f7:e2:be:72:53:1a:63:02:67:fc:d7:31:91:44:c9:e4:57:
94:c4:83:f7:07:14:58:6f:b1:83:86:f2:c5:d8:31:b1:0e:34:
0a:db:2b:f7:eb:ad:8d:af:c0:a9:2a:ef:a2:12:37:63:b3:d8:
bf:19:d3:33:c7:59:41:44:20:05:f4:b1:18:00:82:78:95:9e:
0f:0e:28:a0:21:e7:b8:47:0d:ed:a3:7b:ff:18:b2:46:2c:46:
2d:95:3c:67:1d:19:fb:01:f0:9e:d1:a2:b5:f6:fd:ac:7e:d5:
80:be:e9:10:df:5a:10:05:e9:10:43:6a:8e:26:5d:14:49:7d:
83:e3:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:39 2026 by rpki-client