Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: 90NdxlZGOovWbtO7Qc/YpoxRD1b/PO6LzQYM9SHPFeY=
Subject key identifier: A8:45:0D:BB:C9:45:50:66:07:4D:24:4F:3B:AC:AD:8A:10:C0:25:BE
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 019D284E4854738CAE6DB89B73E09BFF1070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 04:01:51 +0000
Manifest this update: Thu 26 Mar 2026 04:01:51 +0000
Manifest next update: Fri 27 Mar 2026 04:01:51 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: l6zZuQp8/zgmTuQZLCMawDJVrTRHEYotQCb2RiN40Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:48:54:73:8c:ae:6d:b8:9b:73:e0:9b:ff:10:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Mar 26 04:01:51 2026 GMT
Not After : Mar 27 04:01:51 2026 GMT
Subject: CN=a8450dbbc9455066074d244f3bacad8a10c025be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:af:c1:92:5e:23:c4:ed:9d:06:2a:82:3d:
77:7d:4f:bb:05:7d:b9:59:23:a7:aa:55:a9:23:03:
27:b1:5c:b3:e6:d5:e7:18:a3:b7:ad:d8:8b:2c:a1:
fd:d8:50:5c:af:b9:1a:f1:94:b1:5e:0d:34:96:8e:
69:21:1a:66:3c:29:c8:aa:9a:0a:c5:a6:2f:aa:12:
64:3b:a9:de:f7:53:e5:82:cd:58:c6:3b:16:de:01:
51:0b:8e:0c:73:00:e7:66:33:46:85:4b:50:da:b5:
ff:73:e4:29:7f:41:ef:9f:1d:bd:64:0d:bc:ea:ce:
d2:ff:b2:43:ab:f0:f8:c0:86:bc:d5:63:70:64:5e:
37:3b:d8:ca:c6:18:08:f0:67:54:ad:97:0e:9c:a3:
9a:d2:e5:53:a5:8b:0b:d2:0f:2d:24:86:93:f8:bc:
49:ae:96:0c:48:5a:42:aa:13:ee:44:92:a7:49:bc:
e7:1e:98:7b:a8:c6:44:ba:e3:fc:f9:36:e8:b8:6d:
bd:82:f9:94:28:1c:02:c2:92:8e:49:45:66:35:4f:
19:5e:f5:e7:c9:95:ff:85:bc:32:92:32:50:6b:da:
16:bc:88:ea:26:16:ee:ba:88:c1:a0:6b:6f:9b:17:
6e:95:a0:2a:aa:b5:44:82:b1:58:0a:58:b1:5d:40:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:45:0D:BB:C9:45:50:66:07:4D:24:4F:3B:AC:AD:8A:10:C0:25:BE
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e1:ac:63:a6:41:f8:33:68:c8:63:3a:29:4b:ec:be:95:18:
71:e8:f1:80:cc:49:95:1f:5f:ea:ca:eb:33:37:93:00:ff:4b:
e9:7b:6f:f1:0b:c3:5e:56:74:c2:d7:f3:88:00:4b:c3:07:ef:
f0:c1:7e:59:50:ea:0a:6c:b6:5d:0b:28:68:2d:3e:2e:3d:93:
ce:19:24:79:db:6c:fd:f2:6f:45:e0:e3:6b:00:7a:1f:72:5d:
b6:5b:67:d6:32:93:43:c2:57:49:67:e7:72:43:54:f4:e5:b6:
12:64:cb:99:d9:64:d5:af:aa:61:24:ab:cb:f7:6a:59:f1:dd:
f6:6c:43:3e:b8:0b:4d:e2:17:c8:dd:e6:40:c3:68:3d:37:18:
09:35:da:74:72:71:52:c2:c8:bd:c8:54:4b:8b:64:25:6b:b8:
66:39:e2:31:e9:c1:1f:84:98:5b:fe:cf:51:6b:88:57:d2:5a:
d3:9a:14:28:bf:ca:b8:f5:12:fe:4f:5d:fd:75:47:c8:ec:7c:
ff:98:50:af:41:55:2f:76:85:c6:d0:34:7f:27:77:a0:37:a8:
4e:e6:32:de:0a:9e:9c:79:bb:57:b6:c7:a0:53:30:83:33:ac:
60:91:a4:4f:43:a5:31:5d:a4:02:13:0a:e7:74:71:4c:56:f2:
19:48:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:51 2026 by rpki-client