Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: Dz8kMgx96BjLXnkLx9N5cPHHF4RpjqPhpYq4Q0T1+nw=
Subject key identifier: 31:02:3A:66:BB:51:D2:71:71:B7:58:6D:A5:C8:93:EE:05:BD:71:81
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 019D25BAC37C60A7318CE8F841D3B51C88DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 080C
Signing time: Wed 25 Mar 2026 16:01:29 +0000
Manifest this update: Wed 25 Mar 2026 16:01:29 +0000
Manifest next update: Thu 26 Mar 2026 16:01:29 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: hIt1eHbr6Hvv/2oFKPIJV1VOiFpeovELNkhmHTu9U0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c3:7c:60:a7:31:8c:e8:f8:41:d3:b5:1c:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Mar 25 16:01:29 2026 GMT
Not After : Mar 26 16:01:29 2026 GMT
Subject: CN=31023a66bb51d27171b7586da5c893ee05bd7181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:a3:a9:20:b1:73:8b:90:1e:e3:ea:82:55:
ad:b6:a5:09:f9:40:01:91:73:71:97:91:fb:e0:b6:
69:57:93:f2:b7:47:cf:da:82:09:4e:18:8c:f1:01:
db:b0:8a:0a:ed:e5:f5:09:87:52:47:23:f1:26:40:
93:c2:89:56:8e:ca:fe:00:67:2f:c5:97:9d:61:92:
d4:97:7e:4c:f0:97:97:c4:97:7a:a6:34:a7:20:3a:
06:94:d5:db:4c:98:2e:b8:7c:9d:55:ca:9f:5c:4d:
cb:f4:d7:de:94:e8:07:85:8c:eb:0f:67:83:13:a0:
7b:24:1f:12:cf:a2:e3:89:89:bb:4a:2b:3c:42:fc:
85:d8:29:2b:03:8a:9c:40:77:94:9e:fe:30:5a:d1:
7c:5f:56:ab:a7:59:64:2b:cc:bf:7b:72:66:4e:68:
d8:57:c4:4f:50:9d:33:12:79:6b:14:20:56:1d:ff:
aa:33:ee:13:5e:d3:6c:67:41:ed:a5:15:c2:c7:49:
fe:2f:40:87:ed:e7:59:b6:e5:89:2e:98:df:c9:1c:
41:0c:44:73:af:0c:8e:3d:0c:2e:96:48:f7:e6:e5:
fb:db:51:c1:e7:c6:f4:a8:f6:78:b6:ce:81:29:32:
b9:77:fc:9e:fe:3a:a0:e3:4c:93:a8:0e:ca:7b:d1:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:02:3A:66:BB:51:D2:71:71:B7:58:6D:A5:C8:93:EE:05:BD:71:81
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dc:f5:ae:3c:89:7c:10:72:3a:60:9b:54:d0:07:72:79:4e:
f2:32:42:8b:a0:bc:4a:61:10:e8:3c:db:47:68:8b:e1:0f:9a:
f5:e9:fa:8f:62:23:a0:32:b6:9d:9d:c0:e9:a7:8e:e0:6f:c9:
b6:92:c1:e0:06:f9:2b:72:50:66:db:43:e7:97:ff:dd:32:4f:
57:0d:68:0d:d9:29:db:c4:88:7c:17:d7:c1:6f:be:0b:5b:8e:
76:2f:1f:b4:6f:ec:ce:61:f8:0a:31:b2:ac:a6:ec:21:e6:7c:
76:fb:e7:2b:0f:96:2a:b7:5d:38:ec:a5:5e:8c:f9:79:c3:19:
5b:40:34:67:9a:52:53:18:fd:58:85:ca:51:1e:b5:8b:2d:d3:
02:1f:6a:01:48:52:16:e0:ae:35:67:97:f7:07:cf:3a:89:cd:
56:e5:fa:f9:0f:02:9c:4b:bb:cd:9a:6f:36:4c:ca:3c:c0:53:
4a:65:85:63:e0:09:dd:42:4c:db:fd:c3:01:fb:7d:44:f7:1f:
b9:0e:83:a2:33:22:fc:a2:e1:96:1b:80:70:8c:8c:37:9b:a4:
5f:64:a6:1e:8d:98:73:f7:34:84:54:51:d3:44:bd:e7:a9:e5:
14:e5:47:aa:52:cd:08:4c:a3:7c:d9:a7:3f:f1:82:69:8f:7b:
01:10:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:04 2026 by rpki-client