Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File: j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier: QYDhw53SutXa2tKJJLGmqco8wUiLPdda8fGQXWD40B8=
Subject key identifier: BA:7C:D7:56:D3:55:77:76:2D:36:3A:BE:29:B6:01:BD:A1:9D:A9:08
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer: /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial: 019D25F0FA419B3AB40F64E7FA85C97DDB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number: 1853
Signing time: Wed 25 Mar 2026 17:00:42 +0000
Manifest this update: Wed 25 Mar 2026 17:00:42 +0000
Manifest next update: Thu 26 Mar 2026 17:00:42 +0000
Files and hashes: 1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: GS1GOUFNpdZPQS70cvVkISbLivjID1kSiR4noTNjcZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:fa:41:9b:3a:b4:0f:64:e7:fa:85:c9:7d:db:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Validity
Not Before: Mar 25 17:00:42 2026 GMT
Not After : Mar 26 17:00:42 2026 GMT
Subject: CN=ba7cd756d35577762d363abe29b601bda19da908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:aa:23:ae:13:c9:34:ef:af:87:f5:62:14:
9e:af:35:08:20:e1:6b:5f:6b:76:15:01:37:9e:a0:
33:fa:83:e5:19:3b:b6:59:78:30:78:34:69:0e:b8:
59:a8:ee:64:aa:b0:e9:ea:57:8d:51:21:31:e8:b8:
d8:4d:fc:13:b6:69:fb:6d:d0:75:e0:19:c9:3a:49:
c7:3b:33:52:48:e3:fc:87:6e:a2:69:f2:ba:16:a3:
5b:6b:68:14:33:a2:e8:0e:7f:01:e5:75:d7:3f:72:
3c:7f:53:37:7f:4c:28:5e:bb:ee:fc:a9:11:94:08:
f4:3d:91:e4:07:95:d5:e9:97:97:dd:21:26:be:61:
a7:95:76:38:70:d8:ae:e9:1f:3f:ad:bd:d1:db:71:
33:04:23:0a:9b:19:f2:8a:7d:a8:29:dd:4e:e0:32:
4a:24:89:cb:13:69:96:ca:a7:07:15:63:ee:fe:6e:
05:5e:3c:61:df:23:3e:ed:c4:04:7a:c0:db:19:13:
e8:27:d4:6c:75:47:27:7a:34:54:b9:78:05:13:09:
0a:21:71:ea:d6:f3:aa:22:86:02:77:2e:6f:ac:a8:
10:80:97:32:50:33:2e:b4:bf:7d:52:a5:5f:3c:9e:
58:cd:4e:de:cd:11:e8:af:c1:e3:6b:d8:ba:54:b1:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:D7:56:D3:55:77:76:2D:36:3A:BE:29:B6:01:BD:A1:9D:A9:08
X509v3 Authority Key Identifier:
keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f4:7e:fc:71:c9:f1:d9:27:e1:d3:6a:9b:68:7b:43:f2:ca:
ac:32:8d:e3:af:eb:e2:9c:fd:fc:94:8c:c2:10:34:0c:98:d2:
22:2d:43:10:34:d6:fa:f7:da:9e:3f:e8:45:c7:f3:a2:36:25:
31:59:f8:0b:89:b8:e8:9a:ec:89:0b:03:12:08:f1:9e:42:8b:
89:24:ef:25:e7:70:df:6d:4d:15:52:bc:87:fb:a6:97:ef:9a:
1e:be:8a:ae:41:95:f9:a0:3a:a6:b7:6f:32:fc:f6:8d:e0:16:
07:42:96:6b:a8:c4:a1:91:8f:2d:cf:96:eb:83:52:20:a3:b0:
8b:c3:a7:1c:24:ef:c4:8e:02:2c:a0:da:38:df:6a:61:fc:c4:
fc:0a:4e:83:31:ed:6c:8c:be:26:3c:e7:cf:82:3d:a1:ff:6a:
30:c7:88:28:c5:89:ce:37:66:35:a4:16:0c:0a:c1:de:ca:54:
04:70:08:4f:dd:ba:bf:29:d9:5f:07:fd:1d:6d:cd:df:40:b7:
df:ea:fd:8d:0d:e4:f4:f8:0a:7e:db:b9:46:c0:81:62:5c:42:
87:56:30:8a:90:2b:08:53:f9:6c:ce:64:17:6e:66:83:74:43:
c8:c3:bb:9b:77:5b:f1:eb:26:a7:3c:6d:b3:f7:56:06:51:92:
23:2d:3c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:12 2026 by rpki-client