Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json)
Hash identifier: E0ZgOWYEBBeyGnv60hHAkoDhk9jiEaRBhGbKFQuhrrw=
Subject key identifier: 7D:84:66:F5:0F:9C:CB:B2:9E:34:21:D1:87:17:80:14:3B:10:F8:63
Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Certificate serial: 019D2771F6B48ADB7CD83614BD314511577A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
Manifest number: 1361
Signing time: Thu 26 Mar 2026 00:01:13 +0000
Manifest this update: Thu 26 Mar 2026 00:01:13 +0000
Manifest next update: Fri 27 Mar 2026 00:01:13 +0000
Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: lkC1GK6k0NRF9AxyLOTAvkWSoB2vq3PNflt7eGVRdJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f6:b4:8a:db:7c:d8:36:14:bd:31:45:11:57:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Validity
Not Before: Mar 26 00:01:13 2026 GMT
Not After : Mar 27 00:01:13 2026 GMT
Subject: CN=7d8466f50f9ccbb29e3421d1871780143b10f863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:a8:e9:55:a0:7a:a7:c8:91:26:6d:31:d8:
0c:4d:35:c9:69:0f:67:23:34:f2:8f:a9:dd:43:21:
9f:86:21:c6:a5:87:6f:67:5f:13:43:2c:f7:fe:5b:
a0:c1:58:54:5b:7e:ba:cf:70:4e:4a:f5:31:e6:99:
11:e3:e2:6a:71:73:b1:0a:50:78:16:8b:0a:ee:1a:
e4:7e:c6:18:10:c3:65:89:79:37:6c:17:61:4b:b6:
d6:b0:2c:5b:f3:a0:df:1e:72:fb:2d:51:d4:d6:48:
7d:90:bc:f6:5b:34:ed:42:22:8f:d0:57:ea:a0:1f:
73:85:21:e3:28:08:45:de:0b:d9:42:53:f8:85:a0:
fe:cd:6b:9c:e4:7e:c0:2a:db:75:99:db:fe:e2:51:
3b:a5:11:c3:c4:1b:5f:55:3a:6e:da:db:7a:3d:bd:
2a:71:4d:f5:4a:7b:4c:1f:0b:57:ad:80:78:c2:92:
db:54:c9:06:11:e2:e0:7b:52:08:e6:df:df:7f:a4:
cb:b2:f7:4d:b9:b3:f4:f6:b8:46:97:42:c0:40:fa:
3e:76:8f:be:cc:f4:0f:90:1c:61:ad:26:8b:58:ee:
cb:8d:36:44:11:a8:65:01:5e:dd:33:08:9b:ac:f6:
be:db:68:dd:50:3e:94:53:9e:00:b1:01:b7:b5:bb:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:84:66:F5:0F:9C:CB:B2:9E:34:21:D1:87:17:80:14:3B:10:F8:63
X509v3 Authority Key Identifier:
keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:f9:f5:c1:a9:a1:b6:85:38:ba:05:fe:b9:10:44:84:a8:
bb:08:15:02:93:c9:50:97:a1:81:28:ac:6b:85:67:56:be:d7:
9f:9f:5d:9d:56:9f:4b:7c:44:d1:39:4f:c5:31:2f:87:22:cb:
25:86:cd:91:f5:28:7f:9e:61:26:19:9a:b5:39:28:b3:0d:b7:
0c:77:b3:1d:63:c8:f0:fb:12:47:e5:51:75:69:15:85:66:34:
d3:01:96:a1:c6:6c:1d:d7:0c:ea:59:ac:f2:e1:12:86:e8:d0:
ec:a1:c6:74:ad:d1:f0:04:14:31:24:4e:d4:96:4f:f2:0f:43:
c2:01:08:d4:6d:d8:69:9f:12:f0:24:1e:3c:c5:fc:f2:29:a5:
c0:10:eb:3f:5a:6d:b5:94:1d:bf:3f:5f:aa:0e:d4:e9:e7:88:
fa:12:a0:10:f3:cd:4f:1d:77:44:c7:d4:c9:3d:86:73:73:ec:
9d:d7:f7:47:cd:a9:d6:d5:17:87:31:48:ce:f8:16:00:2f:a0:
b4:96:84:25:6c:94:4d:ec:5c:59:bc:f6:ea:ab:a3:ac:a1:72:
e7:cc:bf:7e:8c:65:52:9a:25:5b:c1:a9:00:54:74:57:7b:93:
72:c2:6d:72:b1:40:27:44:87:ee:5e:ca:6d:85:d0:14:56:a5:
18:46:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:00 2026 by rpki-client