Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
File: _D39VAG24EhxYrQuBDdnosKTGnc.mft (raw, json)
Hash identifier: D+lZUhKiSe7flBbTk4AsQ/6NcaIqESL3NNgT1hDyx58=
Subject key identifier: 26:87:CC:AF:4C:88:37:77:87:F9:82:A4:09:BE:EA:EB:EA:F8:5D:68
Authority key identifier: FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77
Certificate issuer: /CN=fc3dfd5401b6e0487162b42e043767a2c2931a77
Certificate serial: 019D2704733431EA0B50482108943A50C442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
Manifest number: 0C08
Signing time: Wed 25 Mar 2026 22:01:36 +0000
Manifest this update: Wed 25 Mar 2026 22:01:36 +0000
Manifest next update: Thu 26 Mar 2026 22:01:36 +0000
Files and hashes: 1: _D39VAG24EhxYrQuBDdnosKTGnc.crl (hash: yTdPcQ7pK2M5Ca2KrIRuXbsSwQcvlGAV4ms+GNDE2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:73:34:31:ea:0b:50:48:21:08:94:3a:50:c4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3dfd5401b6e0487162b42e043767a2c2931a77
Validity
Not Before: Mar 25 22:01:36 2026 GMT
Not After : Mar 26 22:01:36 2026 GMT
Subject: CN=2687ccaf4c88377787f982a409beeaebeaf85d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:8c:68:d4:d9:6a:9b:2e:e1:fd:c2:dd:f7:
23:e6:55:22:d1:91:8c:63:39:37:f2:5f:cb:41:d0:
d1:6f:dc:42:bf:cd:5f:02:f2:e7:5b:b5:75:a5:72:
16:1b:1a:51:51:a0:02:2d:f0:6a:b1:b6:0e:f8:60:
8f:86:de:39:81:63:09:2a:65:86:da:db:ea:40:27:
96:f4:12:69:27:c2:ca:e4:11:ba:4b:01:44:10:86:
d2:3f:2f:7d:5b:bc:56:d1:82:e9:58:5c:92:92:6a:
38:25:d7:76:c1:d7:7a:45:cf:d3:a2:67:d9:2c:8f:
e4:05:73:d6:a4:a8:cb:c6:38:36:7f:b3:5a:ef:26:
a4:89:85:f9:b4:5b:ca:ca:01:34:17:94:dd:95:df:
49:f2:54:cd:82:2e:c1:f9:9d:1b:f9:60:f1:14:ec:
10:02:b2:81:60:43:3d:49:6e:31:52:89:4f:45:ae:
60:91:c5:32:4e:7f:49:ff:33:99:eb:51:72:33:6b:
f1:66:ea:02:3a:29:37:00:1d:30:79:97:ff:b5:10:
0f:af:b9:3a:5d:91:ea:d9:81:93:8f:5c:05:11:93:
93:80:7f:d4:9e:ed:eb:d1:03:21:36:e2:2a:04:3b:
a4:14:cb:7c:bc:3f:4e:20:51:59:be:e1:c7:73:f8:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:CC:AF:4C:88:37:77:87:F9:82:A4:09:BE:EA:EB:EA:F8:5D:68
X509v3 Authority Key Identifier:
keyid:FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:05:db:60:18:a7:c1:66:26:d8:82:47:69:02:f0:4f:17:20:
5c:8d:3c:3b:aa:4e:ec:f3:bb:ed:b4:5b:23:0e:cd:27:b4:18:
1e:70:89:18:d3:94:63:3c:12:52:c2:8a:ec:9d:92:fd:c9:b2:
15:70:29:4f:cf:c1:cd:a7:db:42:d8:8c:95:d9:47:a9:af:be:
70:8f:69:01:21:36:00:ce:c3:07:c2:f0:d4:08:6d:25:c3:ce:
da:a4:19:0d:1e:ed:fb:b6:d6:cd:00:d5:f5:16:ed:8b:ea:98:
9f:2e:7a:27:7f:dd:fc:0b:2b:c3:2e:22:b1:0e:18:fe:21:99:
48:3c:8c:d3:24:db:24:cc:f6:68:55:43:12:1b:a7:a5:7d:e2:
4c:c8:ee:2d:58:05:62:7d:fe:db:f0:40:1b:5d:17:e7:a5:97:
f8:8d:ca:d5:54:9c:f1:00:5d:8d:3c:87:5f:4f:c9:59:99:4a:
c0:ef:14:fa:9e:70:28:a6:74:cd:1a:8c:8b:d2:3e:98:b2:61:
8f:fe:b0:25:02:0f:a3:6f:74:8e:bc:28:a0:ee:ce:14:e8:b5:
80:96:15:84:66:4b:87:9d:bd:c1:4c:81:00:af:4b:12:22:a2:
b8:91:66:79:bf:8b:28:ab:11:3b:c4:f2:8b:8c:54:18:a3:ae:
d8:8a:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:40 2026 by rpki-client