Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: Eg0Vn40/U3lVFVRLxm9yQfjALatZVbc0C38TsPcO7ys=
Subject key identifier: DD:66:AE:34:3F:1C:1A:54:6E:3B:A3:1D:71:68:2F:DA:B5:B0:F8:51
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 019D288489F6557AD0FA29031CF02F3D55AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:01:07 +0000
Manifest this update: Thu 26 Mar 2026 05:01:07 +0000
Manifest next update: Fri 27 Mar 2026 05:01:07 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: ovyENAHxoXwArtmjL8UtfiFulrniWj1xewgQesm04Ic=)
2: KKHPIMDT8NiUrfJyp3qumk7jzz0.roa (hash: F9DAPFB3HYHVOGcoMRsEePDFxOqD9/ROl95gQQnRzvU=)
3: OZy02Cq16jIMB_FoJZn64VS22JA.roa (hash: nKj4XdLVyOxWe/dNxJ4EoTYTSII+Va1gBKibKO7YLnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:89:f6:55:7a:d0:fa:29:03:1c:f0:2f:3d:55:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Mar 26 05:01:07 2026 GMT
Not After : Mar 27 05:01:07 2026 GMT
Subject: CN=dd66ae343f1c1a546e3ba31d71682fdab5b0f851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:f5:62:fc:77:19:ba:21:c5:8e:ed:89:6d:
7b:7f:3b:02:a9:fa:72:d5:ad:bf:dc:ce:81:e1:87:
18:fa:29:26:b8:7f:a5:52:c1:ec:1d:47:89:5c:41:
34:9e:fa:6a:5a:c5:7d:33:83:50:dc:ec:be:48:bb:
83:ab:c1:a4:31:8e:06:ae:83:86:ad:4b:7d:6a:2d:
00:6c:5c:68:8d:dd:6c:c8:2d:5e:38:ca:ef:a4:44:
ca:49:4f:0b:ef:67:db:c2:47:5d:05:29:d9:08:50:
2f:78:65:43:34:97:90:a8:c9:56:36:94:99:c6:70:
34:66:e5:98:e1:d1:0d:c7:80:63:c8:8e:b4:63:50:
e7:2a:0a:e2:95:b4:12:c1:35:01:67:db:8d:df:a5:
3e:21:a9:f0:16:0c:52:82:83:66:94:6f:80:78:b0:
bd:06:57:02:c6:ef:37:9a:d4:53:05:ad:e4:80:75:
f4:88:e4:9e:35:b8:d3:77:4e:aa:c4:07:93:3f:13:
df:f7:56:a2:b9:17:c5:fa:9c:7c:47:cb:43:cb:1b:
c4:7c:b2:96:35:67:c2:ad:a1:8c:98:6d:4f:58:75:
dd:fa:f7:5a:bc:64:26:1e:7f:fd:c8:13:b4:40:89:
de:18:1c:99:47:43:43:38:58:a3:44:9d:b2:19:13:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:AE:34:3F:1C:1A:54:6E:3B:A3:1D:71:68:2F:DA:B5:B0:F8:51
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:15:73:be:fc:51:ed:3b:c5:06:a8:4c:13:bd:3b:b7:d9:
34:1f:14:96:39:18:da:b3:91:b1:00:91:be:0d:66:0d:08:55:
0e:5f:46:a1:3a:5e:d4:1d:e0:80:46:ef:34:2d:3b:09:8e:47:
49:4b:4f:8e:d5:85:26:d1:59:c1:e4:1f:06:c8:77:0b:db:bb:
42:fa:45:83:82:f4:aa:78:73:9e:d5:b1:90:7e:b0:0a:45:77:
3f:52:1f:67:71:d2:ab:6c:d0:af:82:75:dc:8b:3b:85:ff:50:
b3:75:9f:62:a3:ea:5b:cf:60:12:64:0a:d4:fe:d1:a1:38:26:
25:17:a5:b5:50:63:e1:1f:d2:98:d4:fc:0b:23:66:0a:6a:ca:
9b:f6:c5:5e:c8:25:c5:c9:51:06:bf:54:9b:1e:50:ae:b5:55:
15:a2:d9:d8:b1:ab:c6:cd:da:c4:26:80:2d:67:d8:af:33:df:
15:d0:b6:32:05:08:6e:ac:cf:1f:bf:3d:4e:cc:91:b3:8b:dc:
83:ff:24:42:94:17:de:37:93:64:0d:5f:94:49:b8:9a:52:8d:
3f:26:5b:e9:de:11:ec:f8:c9:69:1d:fc:ad:5f:ce:0b:fb:6a:
0c:3c:2a:3e:37:f5:43:6d:73:aa:ac:d1:d6:03:19:ea:72:79:
f3:66:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:01 2026 by rpki-client