Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json)
Hash identifier: vaPSXlplDokpV4VnNiq7zCJKrg8fpu5abPSdRe09fcg=
Subject key identifier: FD:3D:5D:BE:41:F9:C3:CF:94:DB:EE:0F:6F:7D:75:29:41:AD:FF:56
Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Certificate serial: 019D2AE0B56A2D562819CD78562CD564C414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
Manifest number: 0B4E
Signing time: Thu 26 Mar 2026 16:01:02 +0000
Manifest this update: Thu 26 Mar 2026 16:01:02 +0000
Manifest next update: Fri 27 Mar 2026 16:01:02 +0000
Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: G3dakHlkOLV+Gz1tPxuDsi3lZ5yg9QrnPXtPiDz60sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:b5:6a:2d:56:28:19:cd:78:56:2c:d5:64:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Validity
Not Before: Mar 26 16:01:02 2026 GMT
Not After : Mar 27 16:01:02 2026 GMT
Subject: CN=fd3d5dbe41f9c3cf94dbee0f6f7d752941adff56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:57:3a:84:7d:ac:e0:92:f7:60:f1:30:33:
c3:c9:28:a3:3e:62:d0:3e:43:fc:04:ea:21:c5:e8:
53:a9:25:dc:5f:43:04:0d:a6:6c:d8:fc:04:9b:69:
d7:4b:fa:6f:94:6d:ac:c2:d1:10:1f:4b:6a:db:ac:
7c:ba:3d:ab:79:33:a6:ca:88:18:c1:60:3a:f9:c0:
94:7e:a5:e8:21:f9:16:6d:57:9d:9e:43:e8:c6:f5:
66:79:19:30:85:ea:21:41:c1:95:bf:67:7e:4c:6d:
3d:8f:de:8b:a3:12:2c:7e:09:57:30:0e:42:67:fe:
c7:0d:93:fc:9e:3d:a5:ad:c4:41:65:a3:5e:13:68:
c2:47:22:7e:20:07:e4:6f:58:35:94:2a:4f:b4:40:
70:bd:69:9f:5e:70:4c:68:be:96:9f:6e:7b:34:5b:
bf:bd:3b:04:9d:17:3f:fb:f4:51:d6:42:f2:29:e1:
60:2a:de:88:24:58:fd:54:53:32:9c:ad:e0:30:f8:
de:4a:53:9e:29:84:93:97:a2:7b:03:c8:41:29:c0:
fe:2a:ac:80:9e:25:3b:14:bd:87:7f:62:f0:d7:31:
4b:53:be:3e:7c:21:ce:97:ae:73:38:d8:94:f6:33:
ad:c6:a0:fb:fd:b1:06:85:a0:d6:32:76:15:13:08:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3D:5D:BE:41:F9:C3:CF:94:DB:EE:0F:6F:7D:75:29:41:AD:FF:56
X509v3 Authority Key Identifier:
keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:63:39:42:dc:9a:2c:0e:0e:5e:37:0d:3a:28:c7:90:0a:f6:
ff:fa:d2:1e:7b:c8:60:2e:e9:cc:e8:e8:bf:2c:c1:0c:27:04:
55:ae:b1:07:49:e3:59:5e:82:6c:c6:fe:2c:da:4d:a0:c6:11:
3e:75:0e:53:65:4b:1e:e8:16:f6:a3:6d:59:c0:8c:49:fe:c3:
36:05:d9:44:58:7f:8c:0a:08:24:a0:cb:03:91:0c:f2:a9:0e:
53:d5:6c:27:f8:c9:2d:8c:42:86:4e:2e:f5:1e:10:87:a5:b1:
61:d5:2a:92:5f:3a:2d:f6:b9:66:a5:43:66:62:8f:0c:2b:c1:
ee:54:d0:25:ea:71:0c:70:b9:a4:e8:46:0a:ec:ee:5e:9c:01:
97:ff:1f:18:96:1c:9f:d1:a2:92:c1:39:9f:54:ae:b5:bb:18:
2e:4e:21:6a:36:54:f6:74:bf:30:88:b7:49:f2:29:04:3e:5d:
c5:be:49:94:cf:78:79:58:54:8d:15:ff:d8:2e:6c:c9:78:08:
38:94:f7:5e:e2:0c:f0:e0:a0:87:8f:e4:c5:0b:2d:41:73:66:
54:e0:39:6b:db:47:a8:31:a2:ab:ed:fe:7d:4f:05:e5:f2:2f:
f0:92:4c:e0:71:b8:95:d4:7c:3b:fb:4a:a4:f9:4c:3e:30:52:
f6:75:3a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:00 2026 by rpki-client