Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
File: shUnDjtZdrRPOt7OVwR9HgeHunU.mft (raw, json)
Hash identifier: Dl6fsLw4Xo+JVPhy4FZEervIP2Metbzsl7DtOBFgV2k=
Subject key identifier: 29:EE:02:4E:6B:C1:79:F6:3F:97:0F:4C:D9:F7:23:EF:48:BC:8E:AE
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial: 019D284E0260014717D73485CB3029105122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: shUnDjtZdrRPOt7OVwR9HgeHunU.crl (hash: fOeOZACn1Fkvellmfe9TEm3tw73dDej23PCGs78cs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:02:60:01:47:17:d7:34:85:cb:30:29:10:51:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=29ee024e6bc179f63f970f4cd9f723ef48bc8eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:a8:28:b8:bb:3f:a9:aa:75:48:1e:75:a9:
3e:b7:b6:84:d1:72:27:f5:d0:16:0d:e7:24:a3:b7:
2b:a3:1c:0f:ce:2d:b6:74:71:55:4e:a2:01:f5:c2:
9a:7c:36:e9:71:81:35:a8:31:9f:5f:d3:bd:72:bb:
e6:d4:2b:af:21:0e:8b:6c:64:9f:3b:d7:3b:8f:52:
c1:4d:d8:1f:a4:67:48:27:5f:c5:67:f2:77:22:b3:
5a:5f:cf:5d:bd:70:63:7f:3a:3a:79:97:40:a5:ee:
e7:82:14:e2:94:8e:a6:ed:33:54:d4:8b:9d:31:39:
44:19:61:e1:54:69:fb:81:82:ac:2f:c5:63:3e:71:
f4:66:11:2a:e3:08:be:c5:5b:63:95:1e:22:a9:20:
fd:3b:42:11:6b:5c:07:91:28:85:79:61:5c:1b:47:
8c:3b:47:bf:1f:10:72:9d:22:68:4a:9c:a3:b5:9f:
3d:14:69:44:27:c3:03:c2:ed:49:47:24:0f:01:65:
9e:17:9f:b7:8c:54:9f:6e:22:ae:87:5a:d1:b3:4f:
57:f7:10:4c:24:cd:2d:29:e1:85:de:c0:7f:78:b0:
fd:fe:d7:b6:9b:06:14:f0:72:91:4a:32:06:f9:ad:
10:f4:3b:b4:a0:62:2e:e2:4d:40:24:4f:cc:8e:9d:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:02:4E:6B:C1:79:F6:3F:97:0F:4C:D9:F7:23:EF:48:BC:8E:AE
X509v3 Authority Key Identifier:
keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:40:12:0d:be:1c:2b:c9:b1:ac:a5:fb:fc:c1:c6:98:4e:aa:
fa:c5:ff:fe:6e:2a:e9:eb:9d:67:3f:1a:c7:6c:df:61:7a:50:
6b:d1:6c:29:fd:b4:1c:e9:20:0c:6d:42:64:d3:4f:42:0f:00:
b3:bd:42:d8:d3:60:71:d7:dc:22:bc:45:80:ab:5b:e3:08:1c:
fd:26:ad:15:53:95:89:d0:30:52:08:cc:76:2c:f1:7a:57:4d:
83:40:e7:77:ca:39:23:35:8f:f4:5b:f0:7a:51:20:fa:39:31:
eb:52:a3:51:93:c0:34:42:50:e6:6f:23:8d:ca:05:92:2c:c3:
2c:bc:b2:b0:da:3b:18:a6:01:21:55:3a:fa:21:56:02:01:51:
dc:d9:f4:f3:7b:41:9a:fb:e2:93:74:26:51:06:0e:56:fc:0f:
c4:c9:a1:f6:39:b9:fb:34:bf:fa:c1:b1:37:26:81:b0:d8:68:
5d:67:3d:ac:af:81:b3:a9:ec:1b:08:52:29:b3:b5:5f:27:83:
2e:b1:4f:f5:a3:c4:5d:50:d7:77:84:ba:f9:9b:0c:c5:ff:16:
89:02:1a:57:cf:7c:ac:3f:81:e7:ba:f3:0b:03:fa:03:1b:df:
af:a2:50:f8:8b:b9:12:0b:ae:ef:de:b9:71:13:88:a7:93:b7:
e1:fe:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:49 2026 by rpki-client