Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft (raw, json)
Hash identifier: lCSY73EV0bPKKtoM9bcCWNTx9nppRpMuLNCC/052/IE=
Subject key identifier: AF:6F:1E:D7:7D:F2:4F:23:E6:0D:A1:6E:EC:82:F1:5B:EE:C1:E7:F0
Authority key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
Certificate issuer: /CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Certificate serial: 019D2703E32CFC9146D55ED8C41A1B694A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl (hash: PNEke8Iv4ckiESjCB/Z9oy0pQsoW3IAUIs/ThxCRI24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e3:2c:fc:91:46:d5:5e:d8:c4:1a:1b:69:4a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=af6f1ed77df24f23e60da16eec82f15beec1e7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:69:50:a5:f5:d3:64:02:2e:2d:20:1f:9b:
56:46:43:82:78:e4:09:d7:05:e9:10:25:35:44:09:
51:40:3c:0b:48:b1:42:a2:78:51:e5:21:ff:40:d0:
be:58:80:46:09:cf:7c:f0:2b:4b:fa:8b:71:8c:be:
75:1b:03:86:57:8f:e4:30:47:b6:50:39:4e:30:82:
70:94:58:18:93:f8:93:42:36:00:1e:82:af:56:cb:
7b:18:84:db:cf:9e:59:6d:4c:87:c0:1a:38:f2:58:
02:5a:8a:b2:d1:5b:7b:4c:c3:b7:04:16:33:3a:18:
7b:a0:7c:75:ed:71:5f:b6:3d:a1:a5:f5:70:e9:e6:
8e:ae:74:2d:fa:ea:40:bd:0e:0d:bb:6b:80:03:6b:
f7:20:28:12:61:39:3d:27:05:b0:2a:4c:33:d3:2c:
42:85:76:18:c0:b2:98:2e:86:3e:32:ae:0e:1c:e6:
b1:c7:66:2a:82:08:14:6d:f7:df:de:86:28:8a:aa:
ad:ee:ad:7e:79:33:79:35:c9:39:ea:7f:33:63:c4:
8e:98:b4:c8:84:ef:1f:ba:b8:ce:37:bf:35:b8:ef:
93:03:0b:98:93:00:d8:1e:37:fb:0d:08:e4:a9:86:
0f:bc:cf:e2:e0:b9:d6:d7:c5:6a:fb:93:89:d6:e9:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6F:1E:D7:7D:F2:4F:23:E6:0D:A1:6E:EC:82:F1:5B:EE:C1:E7:F0
X509v3 Authority Key Identifier:
keyid:FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:86:a4:05:d3:a4:2b:fa:eb:f2:bb:d3:a9:bf:b0:3c:fb:07:
16:bc:76:f0:61:75:c6:cb:40:0b:15:34:b2:19:fe:fe:c0:1e:
a0:eb:f5:45:45:c8:77:a9:84:f0:ac:c8:fa:bf:f0:54:19:b6:
92:99:f9:8d:22:8e:2b:03:b7:08:6f:92:f2:c2:e2:c7:06:9a:
cf:a5:ac:9b:8d:7c:ba:aa:c5:6d:26:a0:f4:52:d8:1f:37:bc:
2a:95:7a:8c:45:b1:c0:10:db:ed:48:07:79:7e:5a:09:47:db:
2c:0b:5f:31:21:a5:26:b0:73:ed:5b:cb:4b:92:08:f7:ed:58:
cf:f8:10:4f:27:6d:5e:da:4a:a4:2f:e7:93:c7:e3:73:79:51:
32:94:54:ef:4f:f8:1e:fe:eb:66:0f:49:05:64:af:9a:17:9c:
6d:58:59:cb:ef:e0:1b:37:f0:cb:24:84:54:0b:4d:66:8f:cd:
4c:5a:93:07:62:20:2e:6d:ee:6d:1c:8b:86:57:f9:a5:57:94:
f3:96:f8:ab:e6:fc:84:32:3d:82:5d:9a:3a:c3:b9:72:bb:37:
ab:86:83:41:82:a2:f8:45:8f:60:30:68:25:cb:d8:b8:0b:b8:
47:76:1e:9a:06:a2:09:84:33:18:f0:2c:92:21:0a:56:e8:9c:
46:1b:89:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:42 2026 by rpki-client