Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json)
Hash identifier: Io2iKJZHz4GVoEA+1Rf88Ip4p2r7Hzs+WGMTBNKue24=
Subject key identifier: 29:3D:1B:7A:2C:1A:01:7B:07:81:50:73:AE:61:E4:19:20:74:2F:FA
Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Certificate serial: 019D2AE09AEF26EF87557257113E05CB505D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
Manifest number: 0C7F
Signing time: Thu 26 Mar 2026 16:00:55 +0000
Manifest this update: Thu 26 Mar 2026 16:00:55 +0000
Manifest next update: Fri 27 Mar 2026 16:00:55 +0000
Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: 8bK2dR0kz4KApkIgZjlKTee0BYmdbCc8p8yQ2jttalk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:9a:ef:26:ef:87:55:72:57:11:3e:05:cb:50:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Validity
Not Before: Mar 26 16:00:55 2026 GMT
Not After : Mar 27 16:00:55 2026 GMT
Subject: CN=293d1b7a2c1a017b07815073ae61e41920742ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:e4:4c:1f:aa:63:46:af:55:19:c1:3a:18:
3a:65:b2:10:a3:48:d6:39:27:50:72:23:97:43:e2:
c2:10:78:6f:e9:77:84:87:cf:59:74:d8:da:6e:af:
13:b4:57:74:c0:35:f7:09:be:96:ac:de:af:5d:55:
b4:0d:eb:19:6c:b1:39:aa:c3:c4:f7:fe:e5:7e:6a:
4a:89:3f:7b:0b:b3:d7:88:53:22:d3:f5:ad:0a:83:
43:de:1f:26:a7:38:a2:cc:7b:e2:dd:de:fc:95:46:
49:d4:6c:24:b8:1a:42:40:ed:da:cd:e7:28:cf:ab:
5d:8e:3f:54:d4:cc:19:1b:62:c0:9b:8a:48:55:2f:
13:eb:f2:c6:f0:a9:c7:7f:a9:24:64:00:8a:6a:78:
e4:bd:8d:f8:d7:ae:66:3f:c0:39:4f:9b:3c:b0:55:
c8:b4:36:dc:ee:be:ff:61:06:da:9e:a0:3e:c9:fe:
88:d1:03:14:fa:b9:db:10:28:81:83:60:dd:34:a3:
85:78:67:11:28:7a:62:36:8d:a6:3c:5a:e3:c3:93:
60:96:62:11:71:07:10:c2:34:96:04:aa:36:4a:97:
62:3b:75:b2:f6:ba:82:9f:e1:5a:63:26:cf:22:76:
b0:70:f5:d8:3a:14:55:bb:59:22:b4:a0:de:a7:0d:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3D:1B:7A:2C:1A:01:7B:07:81:50:73:AE:61:E4:19:20:74:2F:FA
X509v3 Authority Key Identifier:
keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d7:a9:69:cc:8b:b6:99:16:cf:9e:27:0f:02:49:39:a2:90:
77:41:9e:48:b2:72:ec:4f:b0:20:b2:3e:81:78:0c:3b:30:18:
98:13:a0:89:8e:29:91:fc:69:41:f9:00:0a:75:7c:d5:48:ce:
53:61:aa:53:35:59:f0:6d:90:83:27:94:d1:0c:f0:4d:e0:d4:
a1:84:c0:66:4e:06:07:21:22:09:f9:3d:88:2f:6a:5d:28:ec:
fe:a3:db:22:f6:fe:9f:04:c0:30:f1:68:69:ea:7e:99:7b:15:
10:4e:a7:3b:4a:6d:e6:53:be:9e:9d:d6:e6:84:30:23:82:a7:
ec:00:ea:0e:53:dd:5a:fd:f0:42:ca:8b:2b:d7:b6:4d:61:d5:
45:84:9f:1f:80:c8:df:1d:d6:d5:db:85:0e:59:b3:52:33:e4:
2d:97:b1:5b:2a:6f:b7:60:a3:07:0b:92:2a:48:a9:fe:4d:0f:
29:d0:16:ed:c2:38:93:cd:7f:da:21:11:14:e8:f4:df:18:72:
c3:7e:0e:b6:55:ee:af:7e:c3:5d:6d:6c:42:d4:95:09:3a:07:
f9:25:1c:15:fe:fd:4d:d5:b3:54:83:e1:43:8b:32:40:e7:8d:
46:f2:03:5c:a7:29:3d:da:13:66:db:cb:d7:58:84:18:46:5a:
a9:83:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:28 2026 by rpki-client