Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: bGbUGzreeafVrvnywnoyFaEfHx4TJohY3SWAejckoOg=
Subject key identifier: CE:E9:4B:DD:08:67:72:D1:1D:74:D7:F1:61:E0:18:CC:D4:FB:81:26
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 019D2704A7DEF4BF563168C948DEA6A868CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: LY305cCFFeoSZi6FVv8lOLIv4yJ4vvIh51F9HWGRumA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a7:de:f4:bf:56:31:68:c9:48:de:a6:a8:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=cee94bdd086772d11d74d7f161e018ccd4fb8126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:52:03:4c:28:35:42:de:50:e0:91:1d:14:
cb:c5:09:fb:89:84:5e:86:2b:2f:07:a7:c8:1c:ac:
52:7e:90:bc:c0:a8:11:04:04:d9:62:2d:9f:18:64:
3c:17:6a:d9:63:18:0c:b6:27:23:13:4c:f4:cc:4e:
3e:43:c1:b6:e7:fe:ca:3e:34:91:20:4f:1f:f8:41:
a5:41:23:79:7e:db:d3:e7:93:11:21:39:ac:68:27:
ab:ef:f4:ae:8c:6e:d2:fd:ef:28:3c:31:77:5e:8c:
9a:0a:b5:31:65:62:7c:69:d7:5e:09:33:13:cf:bd:
8e:75:ff:d9:a5:9f:c5:88:b2:7b:a9:55:aa:e2:df:
c4:c5:cb:24:28:84:9c:cc:7e:2c:2a:e1:25:d4:d6:
eb:46:23:d6:55:c7:db:68:a8:f3:a3:ac:34:3e:20:
87:45:87:05:cf:1b:a6:f3:f5:21:64:bf:1b:97:8d:
9d:5d:32:d3:79:a9:fb:01:25:bb:40:f8:42:4a:1c:
24:10:e5:49:c4:f5:34:0e:f4:89:1f:ea:51:f4:de:
fb:38:92:d7:c0:d9:ac:42:43:54:18:a8:c9:f7:17:
bd:ea:be:f5:a9:56:80:a0:dc:80:1c:9b:90:f2:64:
9c:a0:fa:35:76:ad:b0:7c:fc:e4:88:97:74:4e:c8:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E9:4B:DD:08:67:72:D1:1D:74:D7:F1:61:E0:18:CC:D4:FB:81:26
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ae:cc:c4:c1:18:24:d3:dc:fe:ea:18:f0:d2:d7:24:da:73:
6a:10:29:8e:e9:25:61:19:bb:c9:2c:d6:44:7f:18:04:09:ec:
3f:db:87:53:85:36:58:2a:97:6e:27:ac:95:e9:57:04:4d:f0:
76:93:b8:b1:93:d0:9a:41:bc:10:d7:c7:72:2c:f5:8d:72:e2:
1c:a3:8b:f8:c7:2d:12:3e:ca:18:50:eb:66:64:a1:40:2c:a7:
65:1c:af:c6:82:80:27:8d:f9:28:06:46:4e:c3:b0:b1:0c:0d:
9f:99:d5:6a:74:af:d2:74:e8:9d:9c:c5:7e:ce:e4:1c:26:8a:
60:16:58:d5:2b:bd:77:b3:5d:bc:3b:b5:05:b1:22:c7:44:ac:
c4:cd:8d:ea:1b:91:c0:cb:67:bd:bc:86:5f:65:78:74:08:51:
0a:51:0c:85:b9:b4:9f:9f:81:79:05:22:46:9b:e9:87:07:d7:
38:23:cf:7b:90:29:72:c7:72:a2:fb:11:ab:be:b9:f7:32:1c:
c2:07:7a:b9:96:6d:8f:da:10:0e:02:6c:31:0d:b1:98:a3:e9:
82:ec:5a:0a:e7:12:30:a0:fc:77:9b:e6:7a:ca:ea:b4:a4:84:
20:f2:e9:fb:f0:d4:3d:93:16:41:08:68:59:d5:ae:ce:2d:3c:
2c:82:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:13 2026 by rpki-client