Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: giL2vS2p/Vy920b/SLFbUTihEJMyp1bd35Gq4vAEyK4=
Subject key identifier: C3:AA:2B:BD:DA:64:96:FA:7A:E5:D7:AB:C1:6E:07:D0:13:DE:A3:72
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 019D29293D24CBF1D400860B765CF2F3A3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 08:01:01 +0000
Manifest this update: Thu 26 Mar 2026 08:01:01 +0000
Manifest next update: Fri 27 Mar 2026 08:01:01 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: ONWPW2ex7oaHwWZp6q6LaEja1GsDXlnhSKUx1lX/YTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3d:24:cb:f1:d4:00:86:0b:76:5c:f2:f3:a3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Mar 26 08:01:01 2026 GMT
Not After : Mar 27 08:01:01 2026 GMT
Subject: CN=c3aa2bbdda6496fa7ae5d7abc16e07d013dea372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:a6:94:b5:11:1a:c0:4a:df:81:03:af:3d:
6f:c7:a9:9d:63:e2:84:d1:b8:7c:bc:de:57:62:3d:
46:04:9e:ac:59:f0:92:b2:f4:6b:e3:04:a7:d8:77:
c1:d1:23:57:b0:48:d3:46:aa:9b:34:e4:fe:69:90:
cc:55:47:57:5c:b4:05:2a:34:38:20:e1:b7:c9:d9:
40:6e:16:14:54:46:32:11:e8:f6:d0:f8:9e:a0:09:
98:4d:a2:42:ac:ed:42:26:5b:f4:04:5c:94:98:5b:
92:74:ca:fd:29:65:47:81:c2:df:93:ad:08:fd:e6:
40:b9:c2:20:5f:f1:f7:29:fb:dc:96:08:52:e9:c6:
92:6b:ce:38:fd:6f:d7:4e:c9:fc:8a:e9:a3:b0:ec:
b5:05:93:da:12:e0:6c:97:26:59:0d:5e:44:5c:49:
a5:f0:5e:14:c1:f2:d6:01:ba:bf:cc:86:a9:04:e5:
bc:4f:71:99:03:91:f8:02:ab:03:5a:24:da:a6:90:
ab:97:d5:45:d5:93:0e:05:5c:d8:02:fd:57:19:92:
6d:88:35:a1:78:a3:d8:6e:27:66:fd:ec:96:51:a2:
d9:1c:13:10:06:19:f8:99:74:96:66:3b:95:e7:84:
e6:5c:88:77:22:31:8b:14:e1:42:c5:bf:6c:79:cc:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:2B:BD:DA:64:96:FA:7A:E5:D7:AB:C1:6E:07:D0:13:DE:A3:72
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:60:62:a4:59:c8:49:93:8b:56:9d:86:6b:bb:f0:8f:8e:29:
5e:36:ee:6c:68:88:7e:17:c3:9a:14:fe:89:68:91:bb:7c:dc:
05:e6:1d:92:5a:86:ae:f2:7d:c8:64:ab:6a:09:94:ef:80:70:
cc:94:f6:fc:54:a6:51:ec:7e:17:30:72:7f:f5:25:8a:7b:09:
02:a2:b5:d5:88:20:f8:d5:5c:8b:0e:af:72:52:07:c5:59:58:
84:6c:d1:f8:3a:a4:21:25:92:e0:8d:5d:6e:64:d6:84:8d:d6:
1c:a9:88:dc:dd:83:d3:44:11:64:92:57:84:b0:bd:f8:14:10:
a6:1a:29:20:4e:4a:27:6f:0d:2e:e5:52:a9:75:b0:bd:5d:01:
9e:b7:50:e2:3c:a6:07:7a:00:23:5b:c1:e5:45:6c:ea:04:ff:
68:14:51:1c:2f:61:62:b2:bd:8f:ac:13:e5:c5:46:f6:4c:ea:
a4:c2:17:2a:e3:f6:2b:b3:10:d2:e1:f9:88:fa:7b:6f:7b:4c:
d5:6f:5c:d9:89:42:3c:58:8c:9f:63:22:55:8e:e4:62:eb:81:
87:28:eb:eb:f8:ec:7f:9e:9e:9e:a8:c2:e7:9f:b8:c9:bb:fb:
cb:79:f5:ad:b3:9b:c5:73:b6:00:60:0c:f3:2b:a8:e4:86:61:
02:ea:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:15:46 2026 by rpki-client