Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
File: t3FF0lazJRKdNodQzr9JIhtrV8I.mft (raw, json)
Hash identifier: b3QP60MaXwaDz+uPPaOgh0KST4Ljh508KgL54joeCng=
Subject key identifier: D6:A8:BA:43:FF:21:2F:84:8A:11:1E:C2:F2:F0:34:14:3D:96:00:0D
Authority key identifier: B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
Certificate issuer: /CN=b77145d256b325129d368750cebf49221b6b57c2
Certificate serial: 019D25F2601F1ADA2CE387FF16A485560B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
Manifest number: 01
Signing time: Wed 25 Mar 2026 17:02:14 +0000
Manifest this update: Wed 25 Mar 2026 17:02:14 +0000
Manifest next update: Thu 26 Mar 2026 17:02:14 +0000
Files and hashes: 1: t3FF0lazJRKdNodQzr9JIhtrV8I.crl (hash: DYnptOyqj0baUhhHfWFi9nD8QP0LpzkmuyuOjZyx8B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:60:1f:1a:da:2c:e3:87:ff:16:a4:85:56:0b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77145d256b325129d368750cebf49221b6b57c2
Validity
Not Before: Mar 25 17:02:14 2026 GMT
Not After : Mar 26 17:02:14 2026 GMT
Subject: CN=d6a8ba43ff212f848a111ec2f2f034143d96000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:31:75:b7:e2:ee:e6:b4:f5:0b:b4:a3:03:
04:42:bc:d7:d3:9c:8b:49:c2:9b:20:eb:8b:e0:e9:
f1:b0:28:45:a7:a5:a3:0e:08:11:fa:f5:9f:92:7e:
91:9d:08:49:55:bf:9f:6b:31:d3:c9:69:3e:ac:02:
6f:52:39:ba:58:63:75:73:48:e8:a0:0f:53:f5:94:
f1:fb:5a:1a:49:1b:03:f9:1a:a5:39:08:cc:11:1c:
df:1a:7f:24:42:c3:84:ab:a3:ce:c7:ae:93:ec:10:
d7:82:33:70:69:b5:d5:b2:39:d9:1d:a9:d8:f1:31:
d7:32:e2:f2:5d:05:3f:2c:54:6e:a6:32:d7:70:fe:
3c:76:8e:78:7f:74:42:9d:5b:ae:64:84:a2:12:07:
a4:58:06:6f:ea:af:90:66:d4:83:07:f5:38:5e:19:
c8:34:83:69:42:bc:58:7a:19:37:d8:86:d0:4e:4e:
c2:4a:a4:46:01:7d:24:1d:39:35:a2:49:e5:25:d5:
96:ed:9d:75:81:a2:ed:80:c7:d4:1c:8f:f0:5b:5d:
9e:5c:e8:6e:a2:1c:de:c3:d7:c3:7e:79:3b:0f:41:
3a:b2:38:df:11:9d:6a:b1:2b:ae:d1:42:31:ae:ee:
f6:90:b3:fa:78:5c:10:48:90:91:c9:4e:af:26:81:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A8:BA:43:FF:21:2F:84:8A:11:1E:C2:F2:F0:34:14:3D:96:00:0D
X509v3 Authority Key Identifier:
keyid:B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5b:a2:eb:65:1c:70:62:52:27:8e:65:7b:27:d7:33:18:34:
48:3b:f8:23:6f:db:ce:fc:90:58:96:10:a6:f1:27:f1:3b:50:
7a:e1:57:72:ad:bc:92:39:9d:24:6f:f0:b3:28:af:54:1d:59:
cd:be:2b:ad:81:4c:fe:fe:2b:7d:55:23:9f:f3:3b:3c:9c:d5:
0c:b1:fe:7b:c7:f5:0c:1f:ae:ac:cd:d5:50:24:42:80:31:a1:
f8:65:98:3c:43:de:5e:48:db:31:24:b7:2f:98:21:14:0a:d4:
ab:fd:90:8a:c8:b8:3a:4d:6a:e7:8e:46:df:43:40:5f:4e:96:
02:1a:57:e3:86:a1:38:c2:01:7b:34:6d:63:51:91:d8:29:cf:
59:e9:87:07:cd:d6:fe:b2:20:1c:ee:95:16:88:3a:69:e8:7d:
0a:76:dc:42:ef:17:41:1b:22:57:71:f4:ae:a9:aa:c8:7a:f5:
5a:00:3e:64:81:9c:82:4b:60:7b:bd:f2:f6:4e:96:4b:c9:4f:
52:64:6e:52:ab:e6:41:5e:3e:da:bf:fc:c1:86:0d:b2:2c:8a:
94:28:95:63:93:83:58:c9:31:a3:d0:90:11:8b:7f:4d:92:47:
c6:07:3e:ac:d6:fc:f6:94:58:3f:d8:54:93:2e:9b:0a:a1:24:
a7:45:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:00 2026 by rpki-client