Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
File: Rl73vS6z3NurBJCDgNSKjy_rxiw.mft (raw, json)
Hash identifier: wZl/8pIdrvFgR6FgTiJrWTkJJBu8Aj71BhnM6bprUsw=
Subject key identifier: 30:85:18:01:93:B9:75:7E:9A:68:26:E0:2F:E6:CB:CD:2E:8B:AC:74
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial: 019D2B1776DB51A5D21AD017D7ED9A6A7AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
Manifest number: 1287
Signing time: Thu 26 Mar 2026 17:00:50 +0000
Manifest this update: Thu 26 Mar 2026 17:00:50 +0000
Manifest next update: Fri 27 Mar 2026 17:00:50 +0000
Files and hashes: 1: Rl73vS6z3NurBJCDgNSKjy_rxiw.crl (hash: Gq5R52SUwtE6H+YyoXP1cLXawXDtV+pCHjP6ea1ASJA=)
2: aMbMcTxJqNY_J9l47sKKtyWmfY0.roa (hash: 2URg953/d4UDsCHiGXQnGS8745mKkNdX4MZQCglPrUA=)
3: qGSJDYxfQ3dproMIpgTITGdpiXM.roa (hash: r66j/l8L1jLLu66GfqUEgm9JROBqZsScLN0nerfe/vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:76:db:51:a5:d2:1a:d0:17:d7:ed:9a:6a:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Validity
Not Before: Mar 26 17:00:50 2026 GMT
Not After : Mar 27 17:00:50 2026 GMT
Subject: CN=3085180193b9757e9a6826e02fe6cbcd2e8bac74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:d5:a5:06:2e:96:02:92:01:15:52:27:4d:
26:e3:a0:82:c1:cd:5a:0e:45:32:fd:86:55:d9:41:
c8:87:d4:24:ea:f2:a4:22:b0:24:ea:44:c6:59:78:
29:07:43:84:91:c9:4b:d9:54:c4:60:f0:ec:17:2d:
4b:bf:9e:14:44:36:5e:30:5a:b2:64:95:1f:d0:ab:
58:de:60:fd:e7:99:d9:39:15:c5:0b:84:54:ae:5f:
df:65:58:1c:c0:19:10:48:d3:bf:23:20:12:d8:39:
bc:a9:b2:63:0d:7f:e5:54:aa:bc:61:55:c9:2e:63:
65:01:4a:e4:40:a0:59:47:57:a4:f1:25:9d:52:b3:
2f:ce:d2:2d:b6:0c:f1:14:62:bf:32:27:71:67:20:
2b:1c:58:39:65:3c:62:01:ab:2b:76:9b:b0:37:09:
80:66:da:9e:b2:bb:2d:00:d3:2f:43:89:a6:86:aa:
47:7d:3a:32:f5:a6:5e:ca:b5:08:b6:11:a5:90:28:
1b:7e:1e:e4:a6:cc:5d:0c:62:2a:b9:0e:fb:3b:56:
b1:21:41:e9:b2:cd:78:71:46:21:2d:04:e0:a5:53:
4e:c4:da:53:09:fd:78:29:ed:6c:46:12:e5:3d:4a:
6f:51:48:e9:72:9e:20:b6:81:c5:c5:4f:67:9b:74:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:18:01:93:B9:75:7E:9A:68:26:E0:2F:E6:CB:CD:2E:8B:AC:74
X509v3 Authority Key Identifier:
keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:23:3f:3e:9b:0d:96:16:36:1f:89:f1:9d:fe:c9:f5:6a:fc:
1f:83:2e:c7:20:d7:b1:59:cb:52:da:0a:14:9e:10:c5:ac:83:
de:f8:51:a0:c7:6e:67:cb:c8:9a:53:ce:61:ac:da:d4:d0:8d:
76:ce:41:b8:6b:8e:24:4d:02:9e:8b:59:58:74:af:d1:f5:9a:
65:1b:e4:04:90:b1:34:5e:c2:b2:78:40:44:85:e0:4b:d5:ae:
6d:c6:71:0e:a3:a4:d0:03:b8:bf:2e:e6:ab:ab:45:ad:b7:d5:
b4:bf:99:7b:d1:5f:9a:67:66:8a:3a:f8:d3:69:b5:04:7c:73:
4b:80:73:bc:4d:e8:69:f4:29:1d:f9:70:7d:f6:60:90:60:17:
f3:e9:67:8e:b8:86:3a:7b:69:46:ec:f0:7a:ee:7d:c3:ad:85:
6f:73:d1:63:92:65:97:8d:42:89:81:20:f3:4a:46:96:e1:de:
ec:84:32:c1:7c:e0:43:79:55:3d:51:88:a4:1e:f6:29:88:04:
ab:fe:79:a2:81:95:e1:54:b0:dd:d5:a3:cc:03:f5:60:9f:28:
ac:8e:f3:79:32:71:68:42:17:85:f2:a2:62:16:4c:49:3d:fb:
61:18:fb:da:8b:16:1e:fd:fd:c9:00:af:56:3b:a1:02:e8:b0:
d6:fc:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:23:47 2026 by rpki-client