Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier: fVj9Cu0kNMeBpFSJpqNvR3Ntr/NAe2LshZlwCri/B58=
Subject key identifier: 22:DD:EE:B0:67:48:8D:8B:75:D2:90:1C:43:86:71:D7:A2:D1:C3:B6
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial: 019D2B4E364DB1E7DAF4E51C0D44E7AE5BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 18:00:39 +0000
Manifest this update: Thu 26 Mar 2026 18:00:39 +0000
Manifest next update: Fri 27 Mar 2026 18:00:39 +0000
Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: zAEuarZmbMmq0rduov2E0++LOA1OPpuFOga7B5jZUgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:36:4d:b1:e7:da:f4:e5:1c:0d:44:e7:ae:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Validity
Not Before: Mar 26 18:00:39 2026 GMT
Not After : Mar 27 18:00:39 2026 GMT
Subject: CN=22ddeeb067488d8b75d2901c438671d7a2d1c3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c2:52:93:4c:d6:ef:c4:ee:f4:c7:34:c1:ab:
e8:dd:5f:f3:db:74:11:b7:a1:23:19:13:3d:38:4e:
8f:9b:bd:f4:e4:f7:58:61:f5:44:48:0a:29:59:c5:
58:d2:c5:39:09:d1:12:0b:48:07:e7:d9:0b:59:39:
89:28:e0:25:dc:47:49:5a:ee:17:6e:01:01:9e:93:
ce:d2:19:d2:54:04:c5:09:f6:4f:7f:99:29:c5:d8:
c7:6a:3b:70:83:8d:ec:83:5e:05:a9:71:2c:29:92:
75:f0:eb:59:76:b0:cc:de:c0:f8:a8:cf:dd:42:50:
de:93:e8:5d:cc:3d:55:e2:77:73:76:3f:98:06:5c:
58:35:77:85:62:0c:0f:28:91:4e:e7:d1:50:36:83:
4c:ca:2a:25:99:db:21:57:d9:b7:a0:be:28:e1:4a:
0f:e9:cb:07:be:0b:de:bc:bb:e1:11:cf:42:20:4e:
92:e9:8b:8a:e3:ec:3d:b1:48:4e:e2:f9:fa:df:a5:
3e:a3:b1:47:bc:79:6f:e9:3d:69:8b:1d:44:61:7d:
b9:d4:a2:37:69:64:ed:aa:c5:78:85:7a:30:75:92:
c0:ee:70:3b:d3:d5:ad:a9:7a:c9:89:34:bb:46:94:
0b:b5:1b:d4:9b:dd:2b:c1:14:ff:18:29:53:32:28:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DD:EE:B0:67:48:8D:8B:75:D2:90:1C:43:86:71:D7:A2:D1:C3:B6
X509v3 Authority Key Identifier:
keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:39:fb:50:f7:10:93:f4:00:e5:38:c2:12:7f:6b:17:ee:
49:63:ae:7e:70:b3:53:55:38:d0:33:a9:f1:e8:44:62:73:df:
ea:32:05:6f:c4:4a:ae:bb:5d:08:81:29:f0:76:bf:19:cd:71:
9c:e1:2e:d5:89:40:ea:9e:a3:a1:9e:7a:0d:e6:9b:e0:77:8f:
6e:dc:2d:d7:63:4b:2c:a7:35:04:73:df:9e:88:40:ef:7f:60:
b9:ed:48:73:44:3e:4b:a2:9e:a5:39:47:04:8f:ac:51:0e:dc:
9c:d7:c1:96:6c:33:f1:ba:34:5a:47:e7:19:ae:cd:40:04:ca:
66:ff:44:e8:79:73:24:d8:65:90:4b:fb:a3:3a:3a:1b:2b:cf:
fa:ad:7a:15:a1:ff:be:4f:97:8d:9c:64:24:86:5b:c9:fd:20:
fb:4f:eb:5a:7f:a6:d0:75:a8:e8:77:c9:17:1a:46:bc:65:bc:
61:f9:03:63:de:e9:cb:b1:40:2f:1b:3e:33:cc:b5:53:b7:bd:
d2:2a:86:d6:36:33:50:95:e1:e7:5a:f9:4f:88:d0:fe:4a:91:
8f:d5:29:7a:50:ad:82:9c:d3:75:bd:85:fa:e2:5a:61:2f:ba:
e5:50:83:67:e9:7e:83:42:69:10:5c:1f:4f:31:d9:cf:c0:f5:
21:11:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:42 2026 by rpki-client