Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier: rb989TPNVQ7dAIXfMyOZfCbkx1X79RC0X6jHCddKt8I=
Subject key identifier: FB:B9:D9:A2:C9:22:A8:B9:2D:95:EE:94:E7:60:B7:52:8A:52:B1:8A
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial: 019D27044F27979339122BA052463EA15F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number: 0BBB
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: yP4uCckHFEksBJbn3TzeVSSesyE5/c/hNRhEr+sg3nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4f:27:97:93:39:12:2b:a0:52:46:3e:a1:5f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=fbb9d9a2c922a8b92d95ee94e760b7528a52b18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:1f:3a:77:98:09:c8:da:8a:89:0f:70:5b:
30:35:b5:ba:20:97:de:ac:9e:d3:8f:ce:f5:71:f4:
3f:b1:65:03:53:f9:d3:e7:38:b1:50:d8:28:48:f0:
64:0f:14:c0:65:4e:3c:ec:2d:c7:ea:b7:ca:b6:36:
7a:1d:e4:63:25:7a:90:31:0b:2e:06:af:bb:9a:14:
71:3c:95:aa:70:99:5c:d7:03:85:48:a4:ec:89:ee:
19:26:98:63:72:87:2b:82:65:79:9f:f4:4d:af:aa:
c2:ec:8a:82:f2:50:c2:50:51:c4:c4:70:1d:bf:c7:
5c:45:ef:0e:bf:6f:62:83:7a:86:0b:ad:43:50:ab:
de:ae:f4:ac:00:0b:ac:e3:8a:79:51:7f:44:2d:10:
ad:26:40:cb:35:b9:c4:e8:6e:95:83:8b:b3:00:98:
b6:a5:9a:3e:1e:55:a9:7f:25:e9:3a:45:c6:93:9f:
f5:a9:5a:ad:cb:66:90:20:c7:95:88:e8:d3:a7:04:
67:10:43:6a:8a:50:af:03:96:91:f0:37:d4:ae:3a:
a2:bd:93:b6:e7:45:fd:a7:10:98:93:c8:e8:f9:70:
89:3e:6c:9e:b4:7a:bc:86:e5:82:40:72:ad:40:d6:
c7:3c:7a:d1:d9:3c:ce:ef:58:7d:d6:ae:a5:15:3a:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B9:D9:A2:C9:22:A8:B9:2D:95:EE:94:E7:60:B7:52:8A:52:B1:8A
X509v3 Authority Key Identifier:
keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2b:61:d3:52:13:82:a2:16:d3:45:82:8a:6b:70:d1:15:21:
23:6e:60:d4:3f:58:d7:26:7a:4f:56:f2:60:4f:e1:a1:46:6c:
70:53:d1:43:c4:39:03:c7:f1:b0:83:4a:08:ad:ca:44:74:13:
cb:e5:ef:07:7c:e0:88:31:89:4c:45:84:64:08:d4:61:88:ef:
68:6b:b8:ed:c6:3b:e6:e9:1d:c8:b3:7d:62:73:27:65:12:81:
82:8f:90:73:ed:4f:95:2c:df:f4:20:83:01:af:76:6b:07:72:
52:21:17:7f:58:2b:04:53:a4:42:37:73:8d:c0:39:e6:c5:6c:
79:62:43:e8:88:b2:5c:a7:e9:fb:b4:cf:84:4b:1f:14:88:db:
44:97:b4:60:7b:9f:aa:1b:14:dd:bb:00:7b:16:0f:82:7e:cf:
5b:18:ae:b9:76:3e:c1:82:04:5c:d4:1a:fa:de:29:7f:82:19:
fa:73:ba:3d:a5:cd:02:b7:d6:f2:29:ff:7e:cc:48:b5:8b:4c:
5f:86:b4:0b:92:bd:18:bb:ba:70:a1:2a:0d:57:fc:69:cd:a1:
0a:5d:1f:83:89:19:92:7c:e9:1d:43:47:1b:8d:fa:5b:ef:05:
42:c3:e5:4f:f1:ba:57:10:ad:c3:55:3a:f9:d2:ea:02:d0:95:
1e:8d:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:07 2026 by rpki-client