Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: KijWwu7fEBLMOlNpgV6azNSmp2BWYurCqb7maieeDF8=
Subject key identifier: 3E:43:E2:64:BF:E9:C8:C3:5A:21:E5:3C:C6:67:DB:CC:EE:D0:58:84
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 019D27DF804C1F9761F7BCD78ABB478F2B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 0995
Signing time: Thu 26 Mar 2026 02:00:51 +0000
Manifest this update: Thu 26 Mar 2026 02:00:51 +0000
Manifest next update: Fri 27 Mar 2026 02:00:51 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: 5tc0VKMwasMvk4jESF2ZYx4B8k9ZpHnlOC9ipdHGTtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:80:4c:1f:97:61:f7:bc:d7:8a:bb:47:8f:2b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Mar 26 02:00:51 2026 GMT
Not After : Mar 27 02:00:51 2026 GMT
Subject: CN=3e43e264bfe9c8c35a21e53cc667dbcceed05884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:09:75:2f:b0:e3:05:38:bc:70:c6:dc:70:
e7:73:09:fe:7f:fd:ce:6f:90:aa:dd:49:fd:ab:d7:
a0:a3:04:7a:91:e3:90:7e:01:c4:10:3c:2d:d0:87:
b2:fb:86:d6:da:ec:2e:c9:79:93:76:88:6a:6b:3d:
dd:42:f1:c2:6c:72:d7:ae:1c:e7:8c:a8:ee:b5:af:
fe:49:f8:6a:e3:06:59:0e:48:1e:91:bc:71:c6:bf:
47:09:c1:27:e4:1f:ac:9d:13:31:cf:de:ca:01:28:
b8:4e:7a:3f:a2:14:1b:d5:ca:dc:42:6a:5d:66:48:
62:00:a4:c9:b8:e7:5a:6e:3a:7a:c2:7e:e0:22:91:
72:11:95:45:76:04:48:99:b8:26:1b:fd:94:2f:30:
b0:3d:0c:b3:a0:de:46:36:87:52:7e:42:dc:a9:22:
ef:d9:77:a9:ab:46:e1:56:a0:eb:40:69:c2:74:f3:
04:76:3f:a4:56:60:8b:3d:24:e6:69:9c:e4:17:86:
50:9c:db:11:a3:2d:7f:36:2a:83:b8:94:ec:ce:c6:
c4:e6:d3:45:db:fb:73:3b:24:0f:1a:76:03:85:ed:
41:88:f3:e3:49:50:03:8a:43:97:33:45:a2:7b:30:
da:7d:7e:e2:28:fa:41:95:eb:48:70:3a:69:c4:ca:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:43:E2:64:BF:E9:C8:C3:5A:21:E5:3C:C6:67:DB:CC:EE:D0:58:84
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c5:c9:35:6a:bc:8a:cf:e3:78:c8:43:9c:eb:17:97:0c:72:
87:2a:be:7e:ba:37:3a:ec:8c:48:25:c7:e8:f1:2f:69:ff:89:
93:f1:7b:04:7c:21:6d:07:6e:93:c0:df:64:dd:a3:55:43:07:
b5:99:f5:f1:09:32:f9:53:17:45:d8:c5:e3:52:ef:2e:8f:07:
1a:ae:3c:6f:f6:f5:b8:9c:80:51:44:4e:43:1b:b6:8d:41:ad:
09:b2:c8:34:13:30:66:c6:a7:1b:b6:96:7b:eb:e0:6e:74:d2:
f6:18:d0:b2:3a:72:7d:71:6a:5f:4e:4d:c6:76:46:f3:92:58:
76:63:7a:f4:04:f8:7d:84:85:da:47:db:c3:bd:6a:7f:80:59:
2c:aa:21:2a:79:b7:be:19:b7:25:63:8b:d2:09:71:08:d0:0c:
90:de:b8:e9:87:94:19:49:5d:4c:a4:c1:8c:e3:92:e9:06:82:
6f:85:e5:ae:fe:69:c4:7d:89:94:34:7c:d3:36:13:7d:19:20:
87:b3:b9:9c:40:08:eb:7f:de:24:d6:75:b5:eb:48:e2:64:ef:
37:64:5c:48:02:82:0b:3b:6d:16:9c:b4:d2:d0:1c:cc:0e:15:
44:27:2b:19:24:fc:ff:40:1c:52:52:39:01:20:56:4c:79:13:
f2:20:c8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:14 2026 by rpki-client