Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: ZNpeLRjJeLQEYzK6e8LKJtr9F+Lx3n8cAwCB/pS7/lw=
Subject key identifier: EC:5D:A6:58:4E:04:2E:C2:87:38:39:BC:F1:87:8C:4F:D4:70:48:BF
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 019D329AD10C816891B6CADE12498EB3A8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 0A9E
Signing time: Sat 28 Mar 2026 04:01:40 +0000
Manifest this update: Sat 28 Mar 2026 04:01:40 +0000
Manifest next update: Sun 29 Mar 2026 04:01:40 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: 3lCbIdktd8qDEbBZvnG+uOO1R7X3OqqiBo/YqB8UWFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:d1:0c:81:68:91:b6:ca:de:12:49:8e:b3:a8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Mar 28 04:01:40 2026 GMT
Not After : Mar 29 04:01:40 2026 GMT
Subject: CN=ec5da6584e042ec2873839bcf1878c4fd47048bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:a0:bd:09:c8:11:12:82:83:91:c3:e9:6b:
73:c4:df:62:7b:83:ad:da:d9:b7:a7:3f:fa:52:6d:
80:c9:e4:d6:85:fc:9f:cf:da:7f:a5:bd:ee:9d:0c:
aa:ef:54:e5:b0:03:8b:7a:20:dc:dd:b7:4f:b2:3b:
e9:22:df:ed:91:ef:5b:7d:d2:3c:89:8d:7a:cf:5a:
5d:e4:37:44:5c:32:c5:4c:d1:e2:d2:65:da:48:5b:
92:33:d8:df:b1:f5:1b:90:4a:29:79:21:4d:00:f3:
c7:ad:18:98:18:2d:57:ec:6f:ac:64:bf:eb:23:98:
a4:e3:65:46:6a:1d:d6:53:47:eb:fb:33:02:64:e0:
74:f9:40:e9:d5:1f:67:cc:e3:e4:b7:02:70:8e:60:
1d:84:f5:66:57:1d:6b:74:af:7b:9e:42:00:2f:9c:
f1:0d:f0:af:ea:e3:be:02:5a:39:0e:ec:ba:cb:aa:
f7:ea:3a:c6:68:d6:6c:59:21:cc:86:91:b8:96:42:
67:83:e3:1d:40:bb:2f:99:14:3f:24:99:7e:f6:76:
6c:d9:9f:fc:10:98:61:b1:80:19:98:08:40:97:de:
50:f8:42:f4:87:93:8c:2e:90:46:26:f2:61:04:0a:
76:d8:32:84:e7:51:10:a1:2f:62:63:79:04:e9:47:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5D:A6:58:4E:04:2E:C2:87:38:39:BC:F1:87:8C:4F:D4:70:48:BF
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:61:bb:28:2d:0c:62:8e:15:b4:3b:1e:70:3b:c6:33:bd:e9:
cb:3b:ba:68:c2:32:8b:b0:d8:30:72:c4:7c:ec:e7:93:50:85:
c1:73:2b:7b:8a:89:89:30:36:20:45:6b:0c:8a:d1:46:73:90:
cb:69:a6:97:7e:8b:61:fc:31:cd:a4:30:e5:15:71:f5:c4:5e:
e7:a4:22:d5:94:a1:41:76:7b:a9:1e:2b:1f:20:e5:39:24:e8:
09:d9:79:01:90:27:12:c3:d7:c0:9f:35:30:10:b8:9a:a4:f7:
56:84:60:a4:50:89:0f:14:ed:9a:b1:39:76:ac:9e:f4:fb:a9:
3e:e2:62:d2:81:90:ac:95:76:a6:ac:38:88:82:53:19:65:48:
94:a1:82:92:f1:12:d5:b5:cd:bb:95:3d:ee:38:85:23:7d:92:
70:8e:c1:5b:be:02:c4:ef:e1:98:91:a7:79:54:16:ed:68:86:
ab:1a:0f:96:8f:3b:75:47:bb:29:89:46:c0:8e:a6:97:a4:9f:
57:16:a7:ed:76:ff:5b:e3:27:1f:7b:b9:f2:4c:be:94:ca:1d:
83:2f:49:05:15:95:d7:bd:58:a3:78:b9:1e:3e:ab:39:f5:f4:
39:6c:97:5c:c4:08:67:35:e3:24:fe:43:47:00:52:5c:02:08:
3f:24:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:05 2026 by rpki-client