Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
File: idSzdf1Mr9XfusQG3SWmHSLdNso.mft (raw, json)
Hash identifier: xunK3Py+1BF5vgdqaOE8pVnFwNtUQBL0RKT6Mehyueo=
Subject key identifier: A3:AC:7E:16:12:AC:D2:6B:EB:FB:B6:DC:4F:C4:48:BF:F7:DD:C3:3E
Authority key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
Certificate issuer: /CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Certificate serial: 019D2703D87A0A421446BE122683FD7BD805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
Manifest number: 1403
Signing time: Wed 25 Mar 2026 22:00:56 +0000
Manifest this update: Wed 25 Mar 2026 22:00:56 +0000
Manifest next update: Thu 26 Mar 2026 22:00:56 +0000
Files and hashes: 1: idSzdf1Mr9XfusQG3SWmHSLdNso.crl (hash: LVIYnHXRHFgQF7EpIwWu13o3viUX10AsK5zmWVwRgbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d8:7a:0a:42:14:46:be:12:26:83:fd:7b:d8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Validity
Not Before: Mar 25 22:00:56 2026 GMT
Not After : Mar 26 22:00:56 2026 GMT
Subject: CN=a3ac7e1612acd26bebfbb6dc4fc448bff7ddc33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:e5:f2:85:45:56:c6:ff:0e:6c:b2:58:06:
b0:0b:d1:8d:ca:3b:10:e1:54:70:3d:47:15:a1:f5:
cd:8d:3f:cf:99:1e:fb:4e:ba:28:87:18:f8:bc:bc:
5e:58:53:d3:b8:91:19:76:30:b1:cc:3e:42:9b:c3:
a1:90:84:91:04:3d:25:e0:f9:15:db:e1:d7:66:78:
4a:3c:99:39:c7:f9:5a:6b:04:9d:ba:fe:6e:0b:97:
35:f9:b0:96:3a:e5:bf:a5:1c:53:c7:a9:71:14:2a:
e2:9e:9a:93:f3:e8:34:6e:9a:7c:e3:51:ac:d0:77:
35:de:26:41:7b:de:d6:9f:90:98:67:3d:40:6a:8e:
4a:b1:42:67:03:8f:ae:9d:0e:e6:62:bd:5f:3a:40:
cf:5d:d9:10:98:ca:02:ac:7f:57:fa:7d:07:8e:2c:
9e:54:7b:01:73:b9:d8:9a:29:05:b9:cb:a8:c7:f6:
42:9f:1d:85:e3:87:10:61:ee:43:82:45:02:3d:eb:
61:1e:af:b5:7f:53:74:5d:d5:83:81:e7:2c:9a:c0:
bb:2f:57:b9:1a:da:39:15:6d:53:90:1e:44:7b:fb:
30:d3:7c:bd:2d:b0:4b:26:d5:7d:9c:08:2c:0e:36:
ee:cc:73:61:1e:0d:2c:d3:c1:f3:b5:7d:9b:10:87:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:7E:16:12:AC:D2:6B:EB:FB:B6:DC:4F:C4:48:BF:F7:DD:C3:3E
X509v3 Authority Key Identifier:
keyid:89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:71:00:77:49:dc:c5:b9:46:21:7d:1d:94:91:25:99:af:1e:
c8:e4:b9:1c:08:0d:3a:5a:3e:2d:78:5c:fc:44:d9:93:be:1c:
51:57:15:68:48:46:ba:16:07:a9:95:6f:47:81:a8:a6:5c:b8:
69:74:72:29:dc:98:88:e2:b1:37:7d:61:21:dd:c2:fd:7a:ee:
48:26:20:01:8b:72:2a:27:9c:ef:f6:75:04:b2:8e:74:cd:0d:
5c:ab:23:b5:ce:a2:ea:2f:e2:97:56:d9:c2:95:15:98:67:a4:
5d:d0:f2:60:33:90:15:2b:57:3c:c4:a9:a3:37:8d:91:fa:01:
af:04:ae:48:64:71:9b:77:07:c2:de:50:dd:69:37:af:e4:a2:
ca:18:55:79:55:3e:dc:2e:4a:7f:a6:bf:b4:19:f2:85:fe:27:
69:5b:70:11:cd:7e:87:2b:f5:bf:36:6e:74:ab:98:fb:74:b2:
a3:a9:82:91:4c:da:5d:a5:90:93:c2:a9:3d:4a:f7:a5:63:14:
db:b2:c0:b8:94:fe:f7:c0:dd:4a:f1:c6:01:70:61:a7:e9:e0:
6c:a8:cc:8e:83:ac:7f:f4:d5:92:79:29:eb:e2:9a:12:a1:8c:
b6:5b:ed:e7:de:01:36:1b:a8:cc:a5:a0:50:22:25:95:56:f0:
67:e5:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:27 2026 by rpki-client