Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: ir33cghFHj+o05084j5hts1OM+FibRWzirYZF3xQ6ws=
Subject key identifier: 1D:7F:BB:7D:CB:6F:B3:22:6B:BD:E3:9E:7C:91:83:18:B8:C3:53:45
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 019D29CE42C729D16741BD8FFB7CE1884370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 0781
Signing time: Thu 26 Mar 2026 11:01:16 +0000
Manifest this update: Thu 26 Mar 2026 11:01:16 +0000
Manifest next update: Fri 27 Mar 2026 11:01:16 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: OpqAJ8QUgMY79w4VgLtisXSDnuPun0OfG4rln6iYJFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:42:c7:29:d1:67:41:bd:8f:fb:7c:e1:88:43:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Mar 26 11:01:16 2026 GMT
Not After : Mar 27 11:01:16 2026 GMT
Subject: CN=1d7fbb7dcb6fb3226bbde39e7c918318b8c35345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:bf:3f:c2:95:6e:41:09:77:44:cc:4a:a3:
50:2c:0b:7c:fd:31:eb:eb:26:67:e4:8b:95:5c:68:
52:e2:af:bc:76:a1:11:7e:90:76:2c:cb:07:50:87:
a1:3b:ed:1a:6d:72:72:6a:c6:84:a5:24:00:3b:da:
03:3b:ae:1a:45:dd:ae:fa:5a:7c:fa:38:41:c4:60:
fe:b5:a6:1a:96:77:a3:c1:75:fb:88:e7:e1:09:31:
9d:ba:57:cb:48:28:ef:3d:26:fd:e9:34:4c:00:a0:
d3:77:8a:51:81:c8:5c:c2:7d:f9:ae:ed:5d:36:bf:
b4:99:1b:5a:17:eb:af:0d:73:d7:bc:99:98:c1:74:
32:aa:7e:01:c6:7d:59:19:8b:5d:0c:ee:49:df:3f:
d6:eb:d3:fe:c9:20:6e:59:21:f1:2b:02:ca:63:7d:
b2:10:f2:9a:21:28:9e:35:c5:b7:2f:ee:58:f8:0c:
41:e5:00:9b:b1:f1:89:d7:33:20:31:2d:7a:02:38:
b6:93:00:b7:d0:62:d6:41:76:e9:6f:9a:42:5e:15:
e7:98:04:3a:c4:de:cb:b3:65:dd:c2:89:ee:49:4c:
e7:5b:fc:e9:4d:08:36:ff:ff:29:71:af:0b:bb:bd:
ab:c0:28:93:41:53:43:6f:b8:3f:0f:c0:74:80:94:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7F:BB:7D:CB:6F:B3:22:6B:BD:E3:9E:7C:91:83:18:B8:C3:53:45
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e4:10:98:82:da:3b:e9:c3:79:42:b1:cd:7b:03:01:48:9f:
7d:51:b4:9e:46:7e:a7:e2:9c:b5:a9:c3:18:c9:aa:4b:a1:9b:
fe:86:68:25:26:d2:46:ef:5b:fa:71:0a:93:62:b5:bd:4c:a8:
f0:df:71:ed:75:19:4e:17:5b:60:d3:6e:d8:f4:12:cb:ca:79:
38:ac:57:e0:b9:b4:1b:20:7b:5f:2b:87:04:19:9e:e9:44:09:
0f:73:59:7e:1b:b6:7c:36:4e:a1:17:1d:fd:46:90:7d:1a:30:
39:59:8c:fc:80:2f:08:36:ff:0f:e3:99:c0:16:06:a0:4a:9e:
46:3b:ad:63:ed:11:0c:d8:a9:d2:dc:31:93:bb:bb:39:de:cc:
8b:df:ce:d5:3c:64:a2:37:c4:4d:0e:ba:78:17:dc:59:75:5b:
64:07:67:9c:66:0e:c3:e6:5c:8e:6c:64:55:98:87:76:a7:95:
50:48:80:0a:38:df:6e:61:1f:47:4b:20:92:c1:f3:c6:08:53:
d2:53:60:25:2e:35:d7:f8:ff:37:1d:c4:ca:65:25:c5:ce:97:
19:78:87:5c:4b:8c:35:86:92:24:77:44:39:fc:3c:71:24:3d:
f4:ae:59:8a:17:72:cb:a1:c0:93:de:12:90:fb:76:d8:39:c7:
98:b1:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:24 2026 by rpki-client