Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
File: rh967y8S0HaqitWli8uNyvPwvUw.mft (raw, json)
Hash identifier: lDIUvxRZajAvhvXMb7m8dRMbmN8AhS5Ssmuup0iIByc=
Subject key identifier: 84:D9:BA:6F:BE:EF:36:88:86:83:43:25:C6:21:D1:1F:C3:E2:97:A6
Authority key identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
Certificate issuer: /CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Certificate serial: 019D25842B76A3552414A94F07C75CE594FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
Manifest number: 13D4
Signing time: Wed 25 Mar 2026 15:01:52 +0000
Manifest this update: Wed 25 Mar 2026 15:01:52 +0000
Manifest next update: Thu 26 Mar 2026 15:01:52 +0000
Files and hashes: 1: rh967y8S0HaqitWli8uNyvPwvUw.crl (hash: RCbrvAgPceI6lfJoFVCSWYFmsLiFrMWAaC4VeHR42/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:2b:76:a3:55:24:14:a9:4f:07:c7:5c:e5:94:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Validity
Not Before: Mar 25 15:01:52 2026 GMT
Not After : Mar 26 15:01:52 2026 GMT
Subject: CN=84d9ba6fbeef368886834325c621d11fc3e297a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:99:48:07:72:d5:79:e6:fa:2f:af:38:3b:
da:ca:f0:16:d3:f4:32:0e:0d:b9:b4:be:f3:1d:26:
ab:13:1d:15:86:ba:68:89:e9:b3:50:c6:9e:31:d3:
8b:74:02:94:d3:a7:59:86:77:40:df:79:ce:b4:db:
2a:90:96:2d:34:4f:90:af:1b:8b:14:d4:37:aa:9b:
85:62:a9:4f:8d:3d:43:bf:49:40:1a:af:31:b5:b8:
62:f5:76:b7:ba:08:8f:86:da:de:9a:46:59:ee:71:
57:b7:9d:ed:7a:05:0b:77:2d:ed:8a:27:19:df:84:
d4:1b:f7:26:c8:60:a6:db:da:11:bd:09:8e:e8:f6:
74:da:49:68:6a:9a:b2:8f:15:fd:e7:21:0c:90:79:
2d:32:b2:7e:52:a9:68:55:78:b9:8e:0c:ea:b1:4d:
9f:aa:5f:c6:4b:50:06:fd:de:6c:f5:1d:05:ff:75:
3b:2d:5c:5a:1a:45:6c:dd:09:7f:45:3a:bf:a2:fb:
31:34:bd:ac:d7:38:80:60:5f:b9:ee:72:25:43:a5:
fe:b3:90:c7:3f:96:53:c8:94:5f:cc:bf:09:d2:1d:
f5:a9:61:3d:e9:4f:d8:1a:78:76:dc:47:2a:8f:f8:
25:04:45:b2:56:b3:a4:92:d4:8e:cd:a8:40:12:75:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D9:BA:6F:BE:EF:36:88:86:83:43:25:C6:21:D1:1F:C3:E2:97:A6
X509v3 Authority Key Identifier:
keyid:AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:65:5f:b4:60:32:8f:97:72:2c:ca:5b:7d:0b:72:d4:86:4d:
55:ec:43:14:1e:74:46:91:ce:2b:99:73:a4:07:7a:37:9b:5f:
92:c4:61:f7:c0:30:07:90:6a:5a:6e:3a:10:f2:d1:1f:bc:b0:
a1:28:f4:05:dc:22:21:c3:c9:03:52:20:9d:b3:03:c5:7d:fb:
2b:e7:47:82:cd:05:f0:5c:c8:cb:07:2a:e4:0f:ea:28:e0:f9:
04:8e:ef:19:74:4d:15:f1:b2:a7:c5:85:af:f4:b6:a1:a2:65:
20:7c:97:9d:3a:14:01:e1:82:bc:5a:8e:41:3b:42:33:ae:29:
2b:95:c1:7f:83:9f:86:1b:bc:21:05:80:dc:c0:75:55:98:f1:
c3:b0:93:75:8a:a6:45:43:51:42:da:bf:a6:dd:6f:d0:19:d0:
af:3c:dd:b2:d1:a3:57:bc:8e:75:41:69:bb:28:fe:77:ab:9d:
6b:83:06:63:b0:e3:13:02:0d:56:3c:9b:81:ab:61:ce:43:b2:
56:f3:06:fe:19:93:a3:73:e4:88:95:bb:61:4c:d8:46:3f:34:
58:6e:11:58:06:15:cb:11:65:8c:b6:9f:82:e1:a5:3c:95:a5:
9d:6b:a1:1d:b0:0e:21:36:43:89:90:6f:a6:bb:bb:06:79:68:
f9:61:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:22 2026 by rpki-client