Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
File: RrLFRAI1IgBtccF5VhxL0wW6030.mft (raw, json)
Hash identifier: D15B9q9x1we/ZpSPcGpsx99UtD5pHxMwEfvkI7lSGuc=
Subject key identifier: 04:59:BB:30:28:65:C8:3B:5F:59:04:E5:AF:9E:B7:87:34:E7:7D:73
Authority key identifier: 46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
Certificate issuer: /CN=46b2c544023522006d71c179561c4bd305bad37d
Certificate serial: 019D284E61439A9C36F6F190BD1F47B53211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
Manifest number: 0A09
Signing time: Thu 26 Mar 2026 04:01:58 +0000
Manifest this update: Thu 26 Mar 2026 04:01:58 +0000
Manifest next update: Fri 27 Mar 2026 04:01:58 +0000
Files and hashes: 1: RrLFRAI1IgBtccF5VhxL0wW6030.crl (hash: WyuLQqEBLSkB1lOUos07LjKhTNpWRupWUv7WEblbKGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:61:43:9a:9c:36:f6:f1:90:bd:1f:47:b5:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46b2c544023522006d71c179561c4bd305bad37d
Validity
Not Before: Mar 26 04:01:58 2026 GMT
Not After : Mar 27 04:01:58 2026 GMT
Subject: CN=0459bb302865c83b5f5904e5af9eb78734e77d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:cd:97:43:c3:05:83:45:1d:dd:2b:52:af:
76:15:98:32:be:8d:a8:31:1f:af:33:4e:b7:73:31:
dd:c7:b5:17:70:40:c0:1c:3e:74:30:10:db:a9:05:
56:12:b5:00:a2:9d:94:3e:56:5d:1c:1f:6e:18:a2:
0e:f6:05:db:9f:a2:a5:5b:b4:95:35:dc:1a:fd:8b:
b2:69:31:21:b4:4b:ac:ad:62:e2:a6:2b:6d:9f:34:
6a:15:9a:c5:67:82:c5:c9:d1:fc:af:eb:a0:45:96:
35:b9:44:ea:4c:00:e7:3d:cc:67:dd:85:b9:31:d4:
a6:7c:a0:22:88:40:d6:65:c4:ab:07:cf:4d:b0:a9:
ee:dc:97:fe:84:8e:d3:10:00:2e:0d:e3:85:47:4b:
0d:7b:57:a7:d0:c7:b9:df:b7:6e:a2:fa:0c:7b:c7:
38:90:45:37:6d:94:ba:6c:18:a8:4c:75:ee:34:8a:
f7:b8:05:04:8d:17:4e:1e:98:50:18:a8:6c:dd:e4:
03:78:e1:ee:72:af:e7:5a:13:82:bc:11:a0:40:6e:
3e:3f:12:f5:83:47:e2:a3:62:85:31:1e:1e:30:f3:
d3:37:42:ee:f0:b0:ca:8a:8f:9b:84:f7:dd:50:b8:
91:cf:fd:e9:42:92:43:0c:05:8a:88:13:bf:81:07:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:BB:30:28:65:C8:3B:5F:59:04:E5:AF:9E:B7:87:34:E7:7D:73
X509v3 Authority Key Identifier:
keyid:46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:99:5e:6a:a5:1d:65:14:19:a7:08:d1:e7:6c:1a:b0:79:2b:
a2:c4:18:92:76:70:fb:02:f7:09:a5:0e:8b:4d:27:c7:65:8c:
de:8b:79:f7:15:f7:11:49:cc:be:4c:b3:2b:35:aa:44:47:aa:
a3:da:49:03:23:a1:3e:ee:e7:88:15:bb:17:99:47:0d:6f:0c:
97:72:77:41:9d:4a:fe:d1:88:c2:f2:8c:52:8b:b3:58:77:e3:
b7:1b:ee:2d:08:17:f2:a0:3c:c2:ff:ae:53:45:e1:26:34:d2:
84:01:d8:64:84:3e:24:b5:7a:36:1e:71:55:29:80:75:34:21:
b1:79:7e:b2:d0:bd:58:68:1d:04:e4:de:59:bc:82:79:fb:9f:
a5:ef:92:b5:b6:a1:ed:9e:4f:89:29:34:43:65:17:e3:f6:a2:
de:45:00:80:cb:a0:f6:0c:b1:2e:97:0e:41:31:57:03:05:b3:
cf:01:58:57:d0:9f:5b:bb:3e:a4:3e:d6:5a:0c:8a:21:c9:c9:
92:a5:5a:5b:6e:4f:cb:3b:94:8c:f0:ff:13:3a:5d:00:5d:b9:
40:66:c4:ba:a5:6f:f9:27:16:24:b7:0f:be:09:ec:6e:d4:e0:
ac:cf:1f:2c:eb:66:c0:27:cb:f2:b1:df:41:5f:a9:d3:90:32:
09:76:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:28 2026 by rpki-client