Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
File: rDWoN7KvW2-xjKNdFguamhgiBO8.mft (raw, json)
Hash identifier: GFHPBSi4kibLk7D9xPLFr4p+fekb6WuXqX11ko+UJgc=
Subject key identifier: 50:35:DF:E1:07:EE:CA:0C:69:8B:A8:55:54:1A:DB:FD:12:6E:F2:38
Authority key identifier: AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
Certificate issuer: /CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Certificate serial: 019D27043C0ADA5C24B1265A2859549FC603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
Manifest number: 136F
Signing time: Wed 25 Mar 2026 22:01:21 +0000
Manifest this update: Wed 25 Mar 2026 22:01:21 +0000
Manifest next update: Thu 26 Mar 2026 22:01:21 +0000
Files and hashes: 1: rDWoN7KvW2-xjKNdFguamhgiBO8.crl (hash: TivwOF9N/mBhLVH0Kn0g1i7UCZVZRHQnVurdxX2MTS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3c:0a:da:5c:24:b1:26:5a:28:59:54:9f:c6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Validity
Not Before: Mar 25 22:01:21 2026 GMT
Not After : Mar 26 22:01:21 2026 GMT
Subject: CN=5035dfe107eeca0c698ba855541adbfd126ef238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:f6:24:13:ca:78:a5:0f:b8:5b:91:24:5e:
a9:61:d6:53:8d:fd:29:6e:a1:46:cb:e7:71:67:91:
3d:fc:56:b6:4a:2d:77:99:8a:99:5a:b7:f3:82:56:
dc:11:45:f6:2f:4b:67:d7:75:af:2b:9e:9f:22:cf:
94:1a:48:89:66:a0:39:af:d8:c5:5e:40:c4:77:7f:
14:2e:31:4c:e5:38:01:f0:5a:38:29:71:79:9f:f4:
94:7c:df:f0:84:60:48:5b:61:6c:be:6c:37:32:15:
69:91:6a:ed:8d:20:30:98:1d:48:91:4a:3c:fb:13:
f4:33:8b:fa:17:ca:f6:07:97:56:fb:ff:28:ac:fa:
6a:9c:3c:73:47:49:b9:b5:98:ec:1c:3b:00:58:d0:
63:d0:28:be:b3:20:10:35:9b:cc:8e:87:c0:34:c1:
27:a0:6e:3b:8c:e2:12:46:67:9c:fb:bd:e3:c9:39:
bb:8c:45:a0:da:65:b8:8e:c5:51:35:9c:5b:a8:53:
ec:6a:8a:04:54:af:bb:9c:e8:2f:aa:17:75:5b:32:
d6:a3:a7:90:48:01:b8:bd:f0:2b:b3:1d:50:70:eb:
45:da:2c:be:1e:04:2b:21:01:08:ac:2e:30:8f:dc:
55:73:b0:d2:a4:85:d6:c1:bf:cc:c7:0e:03:17:7d:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:35:DF:E1:07:EE:CA:0C:69:8B:A8:55:54:1A:DB:FD:12:6E:F2:38
X509v3 Authority Key Identifier:
keyid:AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1e:04:c9:b4:f1:08:31:16:22:1f:d4:ff:e9:d7:22:ea:23:
fd:ab:50:9c:49:c3:72:d6:d3:1a:e8:11:c9:79:1e:f4:72:78:
4a:bd:32:fc:bb:70:ad:f8:92:47:50:19:25:4f:b4:1c:35:02:
e5:a8:70:b3:0a:c3:94:a9:ec:da:68:bf:a7:e9:c7:e3:24:6f:
58:37:32:c1:34:f2:8a:7e:f7:d6:d9:26:50:ed:0b:d2:f1:2b:
e6:55:ca:60:cb:dd:21:09:a0:f5:27:e3:66:4b:c3:7c:fe:e5:
78:c6:b1:cd:8e:f4:19:98:e6:b2:4e:e3:c8:9b:40:a5:30:4d:
ad:dd:f9:ca:a0:39:81:66:3d:e9:ff:58:e1:b6:2c:69:83:3c:
5c:60:c4:ba:37:32:86:e7:73:8f:72:10:67:e8:6e:a1:e1:90:
34:bc:91:87:63:ef:95:62:e2:99:65:74:ac:4d:2b:57:2c:57:
c5:a1:9a:36:e8:6e:5e:81:9e:1c:da:04:3b:ce:e5:35:36:24:
ec:62:ca:23:f6:f3:49:22:72:1d:c1:e0:69:80:58:dd:71:e9:
42:77:db:c1:6b:93:fc:4d:ac:d7:ca:c1:b4:4b:f2:c3:dd:06:
42:51:80:11:a1:88:9a:0a:ea:60:14:e3:48:69:0d:26:c7:d7:
1f:33:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:14 2026 by rpki-client