Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier: D5CS1cqZSCOxq8kez+uLecOklAL3NSlAjmIqUAwIKTk=
Subject key identifier: F3:A9:85:06:01:F2:4E:01:0B:67:BF:CA:0D:48:69:1C:7B:BC:F5:0B
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial: 019D2704695CFA4E46D8E260C668776C1E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:33 +0000
Manifest this update: Wed 25 Mar 2026 22:01:33 +0000
Manifest next update: Thu 26 Mar 2026 22:01:33 +0000
Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: yC+36ajBjBDKOUQZalXCkDtEbeFwsWnn8SPzuzuL7Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:69:5c:fa:4e:46:d8:e2:60:c6:68:77:6c:1e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Validity
Not Before: Mar 25 22:01:33 2026 GMT
Not After : Mar 26 22:01:33 2026 GMT
Subject: CN=f3a9850601f24e010b67bfca0d48691c7bbcf50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:66:29:8d:6f:fa:e5:26:52:e3:0c:7e:a3:
f2:b1:53:49:41:9a:81:96:21:81:87:8c:10:62:58:
83:9c:5c:57:68:3e:d2:cd:68:df:4a:93:b2:42:27:
af:2c:4b:32:c6:4f:31:46:54:37:64:ab:9a:19:09:
21:56:df:1d:fe:2d:87:05:7b:05:08:30:90:b8:da:
ca:6f:26:ed:41:3f:23:85:41:5b:ca:c0:32:65:a0:
7d:4d:bc:6a:4a:7d:5f:09:4a:2e:4e:e8:90:3d:e3:
bc:8e:6f:23:8b:89:1c:7b:a2:6b:0c:bc:59:a4:b6:
68:59:10:28:94:54:f3:bb:62:c5:98:75:b5:62:dc:
2c:8e:51:a4:39:6c:08:b7:6c:34:b7:07:3b:22:45:
a6:4f:d7:c7:cf:69:68:df:ae:cb:dc:ba:f3:e6:47:
a1:6e:66:37:45:e8:9d:5e:ee:c4:82:66:d9:62:80:
b5:e2:db:b0:8f:a1:ce:68:f3:93:a8:45:0a:45:1d:
8b:ec:98:08:6e:c2:c7:47:e1:4b:0e:a4:1c:da:81:
e6:c7:9d:a8:14:17:96:e0:fd:75:1a:c5:7d:d9:d7:
0b:a1:83:dc:7b:e0:af:2f:27:f0:0e:b1:a7:6a:dd:
56:fa:9c:c2:03:81:10:9f:a4:fa:24:ec:ad:15:09:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:85:06:01:F2:4E:01:0B:67:BF:CA:0D:48:69:1C:7B:BC:F5:0B
X509v3 Authority Key Identifier:
keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c3:8e:ba:15:ef:93:f4:76:52:cf:fb:d3:d9:b1:37:7a:f5:
99:d1:ae:57:04:d6:35:51:03:cc:36:db:46:58:b2:31:b5:22:
4a:7e:c9:81:b6:02:9d:9a:2b:b8:76:fd:95:77:41:18:ca:cf:
e4:63:7a:79:68:74:b5:54:1d:53:65:8d:6a:82:4a:bc:31:37:
f4:6b:6b:8c:e1:15:1b:ed:8a:7d:7e:cf:4f:ff:f4:1d:e5:3f:
6d:ec:e8:3e:56:47:b5:14:63:61:63:66:9e:73:7b:ab:0c:f8:
e8:36:59:e4:2f:e8:b8:82:4b:eb:e7:91:4e:9d:e2:51:ac:d9:
fa:c5:43:b3:98:20:d4:3e:35:ce:3b:43:d1:6a:04:83:b3:ad:
f4:00:fd:d8:b5:1b:4d:b9:63:0d:b7:3a:1c:6b:10:06:3b:87:
6d:34:e5:b5:b2:e2:dc:5e:23:0c:e9:3e:9c:7f:ca:db:9e:e0:
e1:77:0a:f7:3e:e7:77:2c:48:72:c6:78:4d:31:10:58:cd:f8:
34:06:1e:90:ba:96:22:17:39:d6:5b:e7:74:ab:db:b0:5b:c8:
5a:9d:1b:92:e0:67:1a:31:06:a5:3f:17:86:d7:4f:7c:78:68:
4f:75:20:88:8a:53:fc:90:3f:ce:62:7a:1d:a6:7c:88:b0:0b:
1a:10:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:58 2026 by rpki-client