Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
File: RjED8MVPLKupUVZ61E0zwvv58gY.mft (raw, json)
Hash identifier: mR28nMeZKWwC1TDqlr9zHVa9rO6r8OwpOmVYE2Le5uw=
Subject key identifier: D7:AF:B8:3D:F4:8D:F2:14:FA:8E:66:E4:9A:CD:5C:31:CD:45:4A:B6
Authority key identifier: 46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06
Certificate issuer: /CN=463103f0c54f2caba951567ad44d33c2fbf9f206
Certificate serial: 019D281647F0ECE32A893DB146D2568F29C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
Manifest number: 0A55
Signing time: Thu 26 Mar 2026 03:00:41 +0000
Manifest this update: Thu 26 Mar 2026 03:00:41 +0000
Manifest next update: Fri 27 Mar 2026 03:00:41 +0000
Files and hashes: 1: RjED8MVPLKupUVZ61E0zwvv58gY.crl (hash: WDRj3JAu51zMSUbKElWXsQtWe3pQ3xkpkIJDPyyRW8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:47:f0:ec:e3:2a:89:3d:b1:46:d2:56:8f:29:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463103f0c54f2caba951567ad44d33c2fbf9f206
Validity
Not Before: Mar 26 03:00:41 2026 GMT
Not After : Mar 27 03:00:41 2026 GMT
Subject: CN=d7afb83df48df214fa8e66e49acd5c31cd454ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:31:a1:6d:0d:62:8c:f8:21:4a:d2:7b:9c:
fa:02:10:4d:3a:e2:89:7c:35:66:2c:be:70:1e:a2:
b9:a6:af:3e:f7:66:cb:e6:7d:f2:ab:10:88:6b:4e:
e9:3f:c8:e3:c7:fd:e7:51:e4:67:cd:42:60:58:ba:
90:4d:4f:e9:da:d5:ee:55:51:79:75:06:b0:64:06:
d7:ef:fc:82:2b:d1:9c:0e:a4:47:1c:84:88:07:d4:
b2:2c:c4:fd:34:bd:fd:3d:dd:02:fd:63:8b:26:92:
c9:af:bc:e7:8f:a4:15:b7:65:51:61:e8:70:e8:e7:
9a:92:64:d5:04:c6:fe:6a:48:bb:5e:21:b9:07:57:
1f:cd:8a:82:f2:41:78:1a:a5:ce:12:2d:3f:ea:87:
e6:50:73:a3:1b:43:5c:93:95:24:1f:fd:11:1b:47:
12:34:12:d5:19:5c:92:61:f9:1a:b4:d6:80:cc:b9:
4f:7b:bb:83:8d:c1:b0:7a:ab:a7:c6:06:cb:c2:b8:
08:63:5c:24:c6:32:6b:f8:f0:2c:39:80:d5:0a:76:
e9:54:52:80:28:87:3e:6c:c5:e4:cc:3f:2f:7f:14:
6f:b1:cd:02:fe:a9:51:fe:0a:ab:de:a6:0b:ad:40:
b4:c7:e1:af:f3:8d:b7:c5:de:c2:c0:92:99:a5:14:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AF:B8:3D:F4:8D:F2:14:FA:8E:66:E4:9A:CD:5C:31:CD:45:4A:B6
X509v3 Authority Key Identifier:
keyid:46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3b:be:91:5c:c4:e2:83:d0:90:14:f3:af:2d:db:80:61:7e:
a8:7e:79:58:fa:e0:97:d3:24:07:e1:62:b9:3d:34:23:c1:61:
28:48:d7:98:f4:c2:77:14:d4:77:42:94:81:37:03:c5:88:29:
80:46:ae:66:7d:7a:e9:2b:60:eb:df:3f:2d:a2:db:8d:29:0d:
23:ae:66:54:fa:6b:a1:1e:33:eb:de:a8:67:4f:66:39:a6:42:
8d:07:74:7f:7b:19:6c:c1:70:b5:68:96:0e:46:7b:32:23:4e:
61:23:46:1c:82:c3:12:f9:1f:53:88:ba:5f:ed:bf:2e:ad:21:
34:96:49:a3:1b:61:86:c1:d6:16:2e:3c:fd:23:a3:c6:81:fc:
f8:63:93:4b:1c:71:54:ef:c8:c3:d2:97:e8:d5:04:95:ca:46:
36:f2:4d:01:66:9b:67:23:c7:49:03:20:02:0e:8f:a9:23:97:
04:fa:fb:ee:ae:d4:eb:ee:12:c8:38:ae:5e:a4:d0:5c:fe:96:
f0:07:19:43:92:b5:8c:e9:86:c0:33:ef:41:76:d8:05:5d:ad:
a6:da:d2:a1:22:49:b1:7c:34:75:b7:44:66:7e:2e:d9:34:34:
d1:e2:c1:d1:a5:cc:ac:78:55:97:63:b5:83:65:ae:38:58:87:
6c:6c:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:17 2026 by rpki-client