Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json)
Hash identifier: DDlCxbZuZ0YMVSScF5WrY3Ye/tyVlMtY61hgCfMdqAc=
Subject key identifier: D7:B1:E6:58:10:AA:27:88:0C:46:05:5C:39:31:B0:EB:47:63:74:4A
Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Certificate issuer: /CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Certificate serial: 019D265F637E976F615000FA9010FCEACEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
Manifest number: 1331
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: XPgLjWNNy9ss0cA+czNtCuuoXFFZyahX0fMePd/bSq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:63:7e:97:6f:61:50:00:fa:90:10:fc:ea:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=d7b1e65810aa27880c46055c3931b0eb4763744a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:b6:7d:2a:ff:0f:6e:ff:42:0e:f4:83:21:
0d:69:c0:e0:7c:7a:ed:f5:6f:31:ed:34:80:49:7b:
fe:9b:a5:83:9a:88:08:3a:8c:53:ca:68:8b:90:50:
32:8b:ca:4b:f7:f0:c5:73:93:fa:b8:ad:ad:a3:f1:
f5:97:76:ec:3b:de:91:c6:48:ee:52:ef:95:c2:5e:
3b:a0:4b:1c:3e:09:b4:46:c0:c8:ba:a1:1a:7b:6b:
e6:19:3d:cc:cd:22:99:52:76:af:22:cd:b8:0c:53:
19:d9:bb:d7:16:4d:24:1e:af:29:a1:72:4b:2a:df:
ef:60:19:9d:6e:67:fa:f5:e1:b4:4a:f4:89:65:45:
d4:47:e9:bd:ad:db:f8:a2:40:f4:44:6b:fe:cb:ce:
6b:f8:af:5a:42:23:bb:77:85:ea:48:ac:22:67:d5:
c5:64:0d:e5:30:85:30:c5:fb:b4:e8:04:ec:ad:ee:
5c:2f:2d:6d:50:0b:2f:3a:00:05:3d:fc:73:e6:6a:
48:86:57:30:3d:fa:70:3e:8f:89:0d:3d:50:dd:38:
e5:52:99:01:84:c8:8e:49:d0:1e:82:f3:41:c8:d1:
d2:7a:b6:02:72:3f:33:75:86:ea:de:5d:50:3a:d1:
8e:e0:46:2e:b3:65:72:7c:45:af:7e:91:52:08:38:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:E6:58:10:AA:27:88:0C:46:05:5C:39:31:B0:EB:47:63:74:4A
X509v3 Authority Key Identifier:
keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:38:9b:f0:c0:b1:db:43:d5:d1:3c:82:b2:c8:48:6d:36:a3:
83:41:17:2f:e2:49:31:04:40:42:79:da:a4:29:71:d4:36:7d:
2c:98:e7:1c:47:d0:98:70:26:7d:db:c6:78:c2:35:ea:9e:d0:
cd:18:90:9d:49:e2:82:a4:f0:e9:5a:07:be:05:60:5e:75:09:
0c:d5:b8:fb:cc:c0:c1:f7:ff:b7:60:09:8a:dc:e7:4f:04:3b:
f8:85:c2:74:4b:b3:c2:08:5e:e3:d1:88:25:c5:f1:59:41:2d:
20:c0:bd:0e:bf:3d:f8:c4:d6:e6:de:8f:32:3f:f9:91:9e:2e:
7f:39:b2:34:89:b3:c6:58:a2:30:41:0d:39:12:fe:86:60:02:
fe:5f:cd:49:85:28:ac:e8:81:b4:ae:a0:d4:8a:61:ef:fc:cd:
46:39:cb:9c:8a:8c:dc:3f:ad:e6:7e:42:0a:b9:a8:45:58:86:
f1:b4:fa:69:82:e1:4a:8a:2b:14:8f:33:5d:32:22:ca:ff:07:
68:14:ca:7c:0d:db:18:c3:7f:62:4c:fb:5b:59:c8:cb:db:0a:
c7:37:b0:b3:f7:05:5e:98:65:f2:d9:74:5b:a3:80:b4:44:b0:
da:f7:84:fc:54:f7:69:71:57:c4:f4:e7:5b:6b:15:5d:ee:41:
fd:70:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:18 2026 by rpki-client