Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
File: Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft (raw, json)
Hash identifier: PMCHcdCY/0FaOvKmcA/SG55xQaCPG2wmC5k1qU0xscE=
Subject key identifier: B5:4C:DA:27:5A:14:D9:4E:C0:82:DB:1E:C0:6A:EC:8C:83:E9:CF:A2
Authority key identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
Certificate issuer: /CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Certificate serial: 019D2816F7832786511F17F0A5934E90B193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
Manifest number: 020F
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl (hash: GF2jHb3c8gB639r4mQsD2PV8C/TVmu8DVtAfhPuH2rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f7:83:27:86:51:1f:17:f0:a5:93:4e:90:b1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=b54cda275a14d94ec082db1ec06aec8c83e9cfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:14:ae:2d:27:a2:50:bb:ba:d2:6c:c1:6b:
95:ef:7e:cc:08:d8:0b:ce:37:f2:7b:d6:12:c1:2d:
43:a1:c5:2b:4b:06:45:75:ba:29:3e:1e:d1:89:9d:
bc:e6:99:60:dc:4b:a2:ae:a3:62:81:d1:b9:68:af:
3b:6c:96:10:b5:51:56:8f:f2:d6:30:2a:0f:66:e8:
c8:6a:29:58:38:54:3e:90:8a:5d:77:3c:35:1a:7e:
f7:c7:52:07:7f:35:b7:b3:aa:1f:e8:9b:53:59:77:
04:60:6b:93:57:21:98:27:54:73:39:58:a3:8b:94:
c7:f4:bc:e5:71:d4:e1:0d:8f:84:f8:e7:64:bb:39:
58:2b:b2:81:62:eb:c6:b9:0c:8d:83:50:b1:a1:ae:
58:49:ca:ae:76:c1:5f:81:e7:95:2a:89:91:98:7e:
db:ee:ae:10:04:06:94:22:c1:32:eb:a5:28:b5:ab:
90:43:8e:a6:77:e5:5a:fd:92:39:25:e5:e2:a8:aa:
4f:78:4d:4f:d1:0a:d2:d1:fe:c3:c0:80:aa:d0:64:
0c:75:d0:61:d3:9e:90:e3:95:3d:9f:70:b5:ef:9e:
30:22:1c:f9:43:bd:de:3a:0c:43:02:d8:34:2a:8b:
44:55:d0:35:3c:9e:3f:cb:35:e9:74:97:62:21:04:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:DA:27:5A:14:D9:4E:C0:82:DB:1E:C0:6A:EC:8C:83:E9:CF:A2
X509v3 Authority Key Identifier:
keyid:21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:95:47:e5:64:f5:62:ca:fd:04:52:99:3a:ed:9e:ab:95:85:
14:24:6e:87:00:f0:31:b2:73:11:e3:8d:ba:82:03:f3:67:ab:
8e:49:73:54:ef:ca:28:49:37:da:83:1e:5e:64:4c:06:b3:0a:
9d:28:26:e9:e7:9c:49:23:40:c2:3d:d2:86:9a:b6:9b:c5:46:
b5:36:14:6b:b8:46:37:37:52:71:ef:26:4b:3a:5e:f4:e2:a1:
f4:7f:1a:8a:04:fd:03:d5:d5:d3:9d:ce:61:15:01:80:83:20:
74:91:f3:91:c5:41:bc:47:41:ea:23:fa:e6:f4:d7:7e:98:a5:
39:82:fc:29:15:c5:c3:e1:fb:cb:fb:34:99:a4:55:69:cc:56:
4f:8c:04:09:92:52:33:c5:ac:a4:81:df:ed:fb:0f:92:d9:32:
5c:bf:c6:40:52:76:72:a4:26:94:fd:4c:59:50:03:ef:db:df:
c0:4c:7f:75:ab:d5:d1:59:71:79:25:ad:3f:9d:35:7e:73:33:
71:24:67:33:d8:07:b7:1b:3b:25:e1:e0:83:7e:0c:08:92:57:
84:f4:f9:ae:7c:f0:b0:4d:54:49:ad:c0:5a:53:53:1f:dd:b0:
38:a2:9a:f8:cc:2b:c9:78:ef:04:e0:0d:a2:45:be:36:22:aa:
05:34:a6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:25:41 2026 by rpki-client