Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft
File: tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft (raw, json)
Hash identifier: YKtShZ8PiAgLyKZvxFuOy0cVM9n8yQxwIm3gAT7+c1k=
Subject key identifier: 37:E7:A7:0E:2F:3A:03:3F:02:2C:CE:4B:48:84:37:55:5B:C2:56:06
Authority key identifier: B5:1F:4F:D2:F4:EB:47:E4:A0:9E:9A:0A:0A:91:EC:C4:A5:A9:30:F5
Certificate issuer: /CN=b51f4fd2f4eb47e4a09e9a0a0a91ecc4a5a930f5
Certificate serial: 019D26CD1E18C6DB8F4B347CA42624201CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR9P0vTrR-SgnpoKCpHsxKWpMPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft
Manifest number: 0132
Signing time: Wed 25 Mar 2026 21:01:09 +0000
Manifest this update: Wed 25 Mar 2026 21:01:09 +0000
Manifest next update: Thu 26 Mar 2026 21:01:09 +0000
Files and hashes: 1: tR9P0vTrR-SgnpoKCpHsxKWpMPU.crl (hash: dE8uOgxbNVjHb3vFI6Aky5Xl2yRYC+TFBh20TzfZfbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR9P0vTrR-SgnpoKCpHsxKWpMPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:1e:18:c6:db:8f:4b:34:7c:a4:26:24:20:1c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51f4fd2f4eb47e4a09e9a0a0a91ecc4a5a930f5
Validity
Not Before: Mar 25 21:01:09 2026 GMT
Not After : Mar 26 21:01:09 2026 GMT
Subject: CN=37e7a70e2f3a033f022cce4b488437555bc25606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:83:d8:17:aa:e6:12:e1:e8:bf:df:e5:73:
07:30:c2:ed:4b:3e:1c:97:e7:62:62:58:a1:33:87:
ce:43:c4:52:c3:d9:ba:11:bd:06:82:9a:eb:7d:32:
a7:f5:70:3f:64:e4:d1:f8:b8:ed:e9:d3:d8:d2:3d:
23:09:40:83:d0:07:67:99:10:da:10:20:1d:03:ba:
68:7b:ad:c3:e5:83:74:2c:53:18:e8:7a:bc:88:f9:
a3:85:89:f8:7c:23:ad:d2:40:9a:be:5a:0e:5e:6d:
c8:fc:66:27:44:4b:6f:a8:94:bc:c5:59:be:34:00:
94:8d:dd:16:d9:3b:82:67:d2:dc:d8:29:6b:9b:e4:
0c:3d:bc:6a:68:55:e6:26:0a:73:23:a2:f0:4f:f8:
53:ca:6f:3a:32:03:ff:a5:b7:ff:c6:ce:fe:21:ea:
15:cb:9d:4e:cf:86:a0:9d:c2:a6:dc:da:20:d3:a4:
0d:14:67:2d:9c:33:4c:3f:e3:8f:9b:75:89:c6:e9:
9b:74:1a:8d:6c:ec:fb:ab:56:9d:57:5c:3d:81:cc:
13:ae:d0:47:45:8f:87:af:38:98:77:ef:2a:1f:82:
0a:5b:a3:4a:95:f1:a6:a3:58:fb:4c:d8:f9:95:b4:
d2:12:83:e9:4a:b6:d4:38:07:bc:a5:31:e2:da:db:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E7:A7:0E:2F:3A:03:3F:02:2C:CE:4B:48:84:37:55:5B:C2:56:06
X509v3 Authority Key Identifier:
keyid:B5:1F:4F:D2:F4:EB:47:E4:A0:9E:9A:0A:0A:91:EC:C4:A5:A9:30:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR9P0vTrR-SgnpoKCpHsxKWpMPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:40:a6:67:1c:b9:f6:05:50:8f:ad:27:a5:75:75:2d:c3:0e:
b9:af:4d:73:d0:fa:64:e6:96:d9:67:b7:d0:c9:8d:e0:db:7c:
c7:a9:55:0f:87:5e:d1:12:d5:cc:b0:c5:6e:04:3e:71:7d:22:
f8:02:48:2a:f7:c4:fe:cf:4e:5d:4b:b2:ae:3b:5c:b5:59:4e:
5d:d6:0c:bd:c1:41:5a:2a:7e:06:34:d6:54:71:e0:e1:d7:c5:
5d:c4:72:88:cc:9b:8a:1f:5c:ac:cf:1f:18:99:e7:e3:3d:1d:
ba:bb:4b:e6:13:a9:d9:c4:23:64:9f:ab:6b:16:84:e0:ea:4f:
46:4a:aa:4e:8c:c3:ec:42:66:b6:1b:58:8a:04:ce:15:83:1b:
5e:16:34:79:8e:9f:99:6f:aa:7b:30:ec:8f:e1:02:84:02:9b:
a2:51:fd:1e:52:98:71:36:a6:68:51:f1:90:cc:dd:84:98:e6:
9a:e9:18:47:a7:81:71:a6:57:72:a1:7c:b2:db:5b:f4:98:a7:
cb:92:8f:11:c4:91:5c:21:86:b2:d3:13:7c:96:9f:cb:e5:5c:
92:0e:7f:5d:67:4d:9b:04:b0:3a:c1:16:71:61:c5:39:3d:73:
8f:06:33:d1:29:0d:7a:3b:ea:af:11:30:28:f0:25:e1:dc:cb:
ff:9e:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:07 2026 by rpki-client