Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft
File: rENzvP5MWzcCARWd-W2xNzaYur0.mft (raw, json)
Hash identifier: 6iYE1RHHQclu4HzDITOvtvPW727UcCHvZL0TwnrcKXY=
Subject key identifier: AE:18:C8:AD:FA:B2:E3:23:4A:57:E7:56:66:AF:9C:96:55:AE:F9:2C
Authority key identifier: AC:43:73:BC:FE:4C:5B:37:02:01:15:9D:F9:6D:B1:37:36:98:BA:BD
Certificate issuer: /CN=ac4373bcfe4c5b370201159df96db1373698babd
Certificate serial: 019D273B0F5E30BCF9611116F7A34A8DC0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rENzvP5MWzcCARWd-W2xNzaYur0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft
Manifest number: 01AF
Signing time: Wed 25 Mar 2026 23:01:15 +0000
Manifest this update: Wed 25 Mar 2026 23:01:15 +0000
Manifest next update: Thu 26 Mar 2026 23:01:15 +0000
Files and hashes: 1: rENzvP5MWzcCARWd-W2xNzaYur0.crl (hash: qKmDM0SaJo/ZiUst7P9RQhIPUp4ACdVPhq1zF88NeZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rENzvP5MWzcCARWd-W2xNzaYur0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0f:5e:30:bc:f9:61:11:16:f7:a3:4a:8d:c0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4373bcfe4c5b370201159df96db1373698babd
Validity
Not Before: Mar 25 23:01:15 2026 GMT
Not After : Mar 26 23:01:15 2026 GMT
Subject: CN=ae18c8adfab2e3234a57e75666af9c9655aef92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:e8:7d:79:b4:21:14:0a:14:c9:a3:11:b2:
8a:f6:c2:14:fb:c3:27:1f:8f:d4:56:fe:dd:94:d7:
64:09:a8:34:e1:94:2b:35:9b:86:3c:b5:b5:1d:de:
46:30:83:b1:b9:71:a0:2d:c1:dc:2c:e0:ac:67:b6:
6a:6c:29:7e:4b:f3:1c:3e:83:ed:55:b7:d3:fe:14:
21:02:5f:33:7f:b5:cb:36:2a:dc:27:09:83:56:27:
09:e9:27:4f:c0:b2:8d:1f:a4:c2:0c:b1:12:9a:39:
06:4a:5c:08:e5:e0:c4:77:2d:7b:f2:ac:50:5b:51:
05:4e:5d:50:0d:0e:15:e5:35:14:66:6c:99:b8:06:
ee:35:01:de:17:ec:99:71:74:b2:4a:95:a5:6a:e0:
2f:ac:b3:4a:0f:f3:84:06:2e:1b:fa:63:34:a8:b5:
91:05:7f:81:c0:03:27:7d:da:16:38:8d:22:9d:8f:
ac:53:91:32:24:de:bd:8c:92:ee:54:11:57:a4:4f:
27:d8:c8:54:50:de:a3:12:8d:c5:a5:dc:d4:16:f8:
c1:e1:1e:1f:91:30:7a:f0:40:1e:91:5e:33:38:0c:
44:fc:b2:0a:ca:6d:27:fb:d1:31:e0:24:33:c8:af:
cb:01:33:43:2c:a5:23:52:ad:51:c9:80:54:65:64:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:C8:AD:FA:B2:E3:23:4A:57:E7:56:66:AF:9C:96:55:AE:F9:2C
X509v3 Authority Key Identifier:
keyid:AC:43:73:BC:FE:4C:5B:37:02:01:15:9D:F9:6D:B1:37:36:98:BA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rENzvP5MWzcCARWd-W2xNzaYur0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:95:8d:e5:b1:33:0d:ce:f3:3d:13:25:95:f8:05:04:e0:91:
ca:30:3b:a5:fd:05:c7:ba:39:27:51:48:66:e2:e5:ed:5f:1f:
50:51:f8:3c:ec:54:5c:67:e8:e1:f8:87:f8:1d:9b:cb:9f:82:
df:95:0a:a6:1f:53:5f:6f:76:87:f4:f8:06:ec:c1:80:67:74:
92:5c:cf:4c:a7:8d:fe:43:7b:9d:b6:d3:fe:34:93:e2:83:c6:
49:a0:e3:e2:94:89:c2:24:e4:c4:d0:1b:5b:3c:a1:f2:5b:2e:
f7:02:46:9b:d3:e9:d4:dc:40:a5:8b:70:f2:a0:b4:c4:bf:80:
15:ec:b4:2f:77:97:b5:39:28:75:f8:5d:82:de:78:de:07:6c:
0c:62:b0:e4:88:89:ed:c7:c9:ae:4c:aa:26:d6:79:bd:a9:5e:
ad:c7:bc:82:28:48:d5:8a:8e:8a:ad:8b:86:8e:95:a3:72:2d:
5a:2c:eb:b4:d7:82:bc:2d:26:62:80:1e:60:78:05:73:d0:08:
42:f5:36:8a:95:27:09:7d:65:d8:9e:36:eb:a0:b5:fc:eb:be:
83:67:96:6b:7b:e2:1f:93:8f:53:02:2b:29:e3:bc:33:72:74:
48:82:51:f5:ee:f9:6f:ad:0a:b1:38:7d:93:b8:75:d9:1f:bb:
78:6e:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:35 2026 by rpki-client