Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: CHlDw0skYWpu6WiAStbW+jkAlFxl+Hq55iWwGuMalzo=
Subject key identifier: AF:39:AA:64:D7:54:B1:C4:30:12:45:F7:54:73:5A:B2:54:25:AC:B8
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 019D27041BD12D00CB612794038F57CB75FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 075C
Signing time: Wed 25 Mar 2026 22:01:13 +0000
Manifest this update: Wed 25 Mar 2026 22:01:13 +0000
Manifest next update: Thu 26 Mar 2026 22:01:13 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: LlQ+OcrXs4gB2fJyS4XCfVsgO7EKtZ62ool8vHIRF1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1b:d1:2d:00:cb:61:27:94:03:8f:57:cb:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Mar 25 22:01:13 2026 GMT
Not After : Mar 26 22:01:13 2026 GMT
Subject: CN=af39aa64d754b1c4301245f754735ab25425acb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:60:e3:01:c4:e6:78:90:83:6a:46:8c:ac:
94:2c:f6:36:7d:cf:2b:30:be:fc:fb:bf:89:79:1c:
38:fe:8b:6f:bc:91:6c:64:15:6d:27:3d:17:28:c4:
77:ba:39:2c:3e:12:8a:09:c6:da:e4:62:70:83:98:
9f:5a:59:68:7e:a6:53:5a:e1:bb:bc:bd:9a:47:a6:
1e:fd:c8:b5:d6:0f:70:53:31:3d:e4:81:c5:98:a2:
c2:2e:9f:ac:43:eb:e4:a6:82:a0:3e:23:1e:8b:67:
a6:0f:7e:5f:1b:c1:35:a0:16:6d:91:2b:b8:61:95:
89:27:65:51:10:d5:5e:27:92:85:2d:b3:fe:b7:74:
70:3d:3a:b4:bd:c6:50:ac:e4:01:5b:5c:dd:e3:42:
aa:10:9b:ad:d9:e9:1c:53:6e:09:b2:8d:b4:52:31:
69:1c:72:ea:52:1a:e5:74:66:c4:bc:80:1f:c8:67:
eb:0f:d2:49:c0:8a:77:a5:dd:3e:e0:de:2c:9a:f0:
67:83:24:21:62:b1:1e:d5:88:d4:3b:f3:9f:92:1c:
e6:9b:65:5c:b0:17:39:b5:06:a7:d8:55:cd:16:aa:
d8:bc:c8:45:6d:da:50:c0:a9:2b:d9:34:a0:d2:a6:
04:ec:58:02:14:ff:29:e2:79:a4:f9:1d:49:2b:1a:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:39:AA:64:D7:54:B1:C4:30:12:45:F7:54:73:5A:B2:54:25:AC:B8
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:38:8f:aa:eb:6f:c7:46:c2:63:2f:46:19:17:d8:34:2c:37:
2b:30:40:56:3b:d4:c9:df:bf:b3:76:0d:b9:38:dc:9d:a1:23:
96:a7:c4:e4:58:7f:c2:cb:78:19:8d:f5:1b:8d:52:28:b7:be:
31:d3:72:8e:6b:58:6b:bf:f1:a2:50:36:ef:8a:34:36:2e:67:
b2:b9:3e:c1:bc:9c:ef:ea:da:bf:4d:31:9b:af:1d:3b:8c:de:
53:0c:ad:58:d8:65:54:99:d5:55:ab:a9:12:d0:72:dc:8a:a8:
a5:18:66:aa:7e:f4:a1:fa:74:7e:d0:a0:68:ed:49:64:3a:df:
12:df:db:3e:a0:97:36:65:58:73:c3:2d:0a:c9:9b:f2:ec:4b:
6f:a4:c6:18:ef:fa:2c:14:75:0f:a5:e3:bd:81:d8:a6:ce:e6:
a9:a6:7f:b6:c9:b9:6b:7d:60:70:48:97:7c:19:31:cb:f4:0d:
27:e2:53:f4:cf:33:ae:8f:16:62:84:76:83:fa:b0:3b:31:9a:
28:c4:2b:cd:6e:8a:d4:2b:d9:10:11:16:3e:ad:f5:21:a9:2b:
ac:0d:d1:ca:52:2c:c7:d9:67:94:6f:ad:4d:02:d0:18:26:39:
39:4e:59:87:1d:c7:08:21:79:fe:9d:78:3a:c4:ea:be:5a:19:
dd:62:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:35 2026 by rpki-client