Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft
File: RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft (raw, json)
Hash identifier: Jzx9S3bbNNtDvcAQmcOSwNlmzlcgpjiqST1l93NN3EU=
Subject key identifier: 85:50:2C:B6:37:82:74:65:CC:8C:5D:17:1A:F6:68:53:66:91:93:0C
Authority key identifier: 44:3D:4F:95:73:29:DF:31:49:8F:A8:54:3C:23:F1:2C:87:4C:C6:0D
Certificate issuer: /CN=443d4f957329df31498fa8543c23f12c874cc60d
Certificate serial: 019D2704CB34643C3CE6E242B2CC08183812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD1PlXMp3zFJj6hUPCPxLIdMxg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft
Manifest number: 02F2
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: RD1PlXMp3zFJj6hUPCPxLIdMxg0.crl (hash: YKIMNj0OPEhbFSJIgaVpxSPm0zB8UYOqiSsYryBiaZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD1PlXMp3zFJj6hUPCPxLIdMxg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cb:34:64:3c:3c:e6:e2:42:b2:cc:08:18:38:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443d4f957329df31498fa8543c23f12c874cc60d
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=85502cb637827465cc8c5d171af668536691930c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:2b:e1:16:41:1e:f0:19:0c:ae:c8:e4:d3:
be:53:a5:55:95:db:c3:a7:1c:6a:87:e6:07:d8:6f:
30:e5:45:c0:fc:2b:48:31:1a:47:53:af:53:aa:ff:
63:10:fd:d7:6d:17:0a:56:91:b2:88:af:f5:f9:27:
d5:6f:e7:80:a1:e5:68:6d:69:a7:96:d5:c9:66:1b:
73:bb:ae:c2:2a:71:c2:c0:3e:fe:2c:57:5f:e3:64:
09:d6:91:3b:ef:25:05:b8:fd:ea:98:f9:1e:d9:a5:
9f:87:33:3a:74:31:02:ee:46:04:ca:85:10:4d:12:
97:0d:5c:c2:eb:66:bb:2d:3f:a7:71:f9:f6:7b:1c:
9a:76:f1:84:d5:65:40:c5:c0:45:7f:6b:64:30:49:
a7:b8:b4:8f:0a:ed:e5:e2:87:15:b4:2a:dd:b1:1c:
5d:09:3b:5d:7c:79:e2:23:f2:d3:e4:a9:c9:f1:78:
cd:ef:47:80:54:ac:fd:53:22:f7:c8:59:91:85:a8:
11:ee:a9:00:b8:7e:fa:a9:07:4e:0e:21:aa:bf:20:
1a:67:6f:9c:d7:25:0b:00:16:e1:ea:7f:00:15:73:
a7:cf:e9:1b:d6:11:dc:b8:73:c9:e8:6f:5c:6f:ac:
03:16:2a:04:c5:b1:2c:b1:fb:65:d5:29:5f:2a:b5:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:50:2C:B6:37:82:74:65:CC:8C:5D:17:1A:F6:68:53:66:91:93:0C
X509v3 Authority Key Identifier:
keyid:44:3D:4F:95:73:29:DF:31:49:8F:A8:54:3C:23:F1:2C:87:4C:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD1PlXMp3zFJj6hUPCPxLIdMxg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c4:2a:67:87:3a:ff:09:15:d4:c5:4c:15:e9:00:97:3a:f4:
fd:91:c0:75:70:50:29:66:d3:47:5f:0b:a4:53:4f:dd:90:14:
a7:ad:64:28:b6:49:6a:d3:b6:93:98:fb:61:5e:bf:e7:1d:c8:
30:a7:6b:d0:fb:dd:ef:6e:96:43:08:f5:76:36:f0:3d:d1:ff:
d1:26:21:8e:9d:d0:01:4d:c0:ea:97:53:fe:fd:a0:27:a8:17:
f5:70:78:ff:7a:d1:c0:e1:e9:e7:31:64:25:cd:0a:7c:bd:d2:
82:ad:8e:cd:4d:61:11:9f:eb:96:37:cb:29:92:a8:ea:23:52:
27:f4:a6:30:1e:e0:2f:73:2a:24:1f:05:d7:8a:0f:60:bd:8d:
fe:d9:82:09:ec:ce:27:11:86:66:d0:a8:ca:7a:d0:b1:38:24:
3e:ce:87:b0:89:7d:63:53:16:85:48:bf:ae:f2:ab:e8:bd:f7:
2a:b8:44:81:8c:2a:54:50:72:d0:e7:79:69:82:1f:c6:70:87:
8b:b1:d8:94:79:fd:fd:99:40:96:50:cb:66:97:d5:ad:a2:99:
2f:a9:0d:c7:f8:54:2f:48:13:74:64:80:0c:72:f8:37:1d:03:
b8:98:55:87:7a:17:9c:b6:26:2c:77:31:c9:0f:d6:63:0f:5f:
d8:b6:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:23 2026 by rpki-client