Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: u0N3bBsCoNJi0DG3vw7GAJQLVe9QBrsIiICyyR7EjDQ=
Subject key identifier: CE:13:94:AE:C5:ED:BF:3B:21:9A:49:7E:99:A8:8B:32:B1:B7:91:0B
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 019CAB6AD8BE6A930724F19F2EEBE7354732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 22:00:32 +0000
Manifest this update: Sun 01 Mar 2026 22:00:32 +0000
Manifest next update: Mon 02 Mar 2026 22:00:32 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: U5k+LFgfgpzyLJFCoveBFhU73wth4vOEuNr58NbzL7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d8:be:6a:93:07:24:f1:9f:2e:eb:e7:35:47:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Mar 1 22:00:32 2026 GMT
Not After : Mar 2 22:00:32 2026 GMT
Subject: CN=ce1394aec5edbf3b219a497e99a88b32b1b7910b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:a1:d2:20:70:73:21:83:a2:85:ff:16:67:
bd:d9:fb:14:3d:4c:6b:e4:64:8c:be:0d:03:5a:dc:
bf:51:c5:a3:90:91:a3:7b:4d:31:59:83:28:53:1f:
0d:61:ab:63:7f:2b:ec:1a:07:83:16:36:18:f1:34:
14:27:59:3c:8a:9c:6d:d9:72:fe:d3:6a:ec:5f:c3:
df:b1:d4:57:6f:c1:d7:1a:e8:a8:9c:67:43:1c:ba:
65:08:a0:7a:0e:43:e1:e7:2b:2e:34:ec:4f:5f:a8:
83:f6:12:39:73:88:d7:f1:cc:c1:65:f9:a1:82:b2:
af:b4:1f:d7:94:1f:3f:81:12:2b:05:55:fc:03:aa:
8c:7f:fe:a9:90:9b:8d:ca:70:eb:6b:bd:ea:ed:a7:
a9:00:ea:2e:61:3e:bf:e8:13:19:48:8d:6d:61:f4:
8f:ef:ce:8a:2e:3f:dd:25:98:30:1a:37:2f:f2:57:
2f:db:72:6b:7f:8b:e8:16:e7:ba:37:49:e7:9a:e0:
57:ec:49:fe:de:f9:4d:ba:f0:21:28:a5:d8:80:d6:
01:78:81:1b:29:2f:52:93:fd:bf:09:7c:61:ec:9c:
c7:95:7e:6d:06:10:15:c5:2c:79:65:6a:ba:18:3c:
5f:89:5f:64:14:3f:2f:6b:6f:76:f8:f3:22:46:03:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:13:94:AE:C5:ED:BF:3B:21:9A:49:7E:99:A8:8B:32:B1:B7:91:0B
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1e:3d:1e:54:4f:a3:c5:bc:ed:ac:0e:4f:b6:ea:85:0b:38:
76:3d:65:2b:a5:d1:01:61:c4:c4:9a:a6:be:23:4c:93:5f:72:
c8:a4:7b:20:99:93:f3:80:ae:e8:be:d2:56:c2:19:7e:dd:cb:
48:91:de:a4:c0:79:eb:df:90:ec:16:90:e4:3c:aa:0c:ed:ba:
ac:c5:d2:a5:9b:dd:ba:64:b9:9b:08:94:09:40:57:d3:44:1d:
3f:3e:24:03:c9:80:97:26:c5:5a:68:25:61:35:16:56:e4:3d:
39:95:fc:4a:bb:09:66:41:04:e2:14:6d:05:a3:a3:b1:3d:e5:
01:10:fe:5f:33:55:05:c7:67:30:e6:ae:ed:23:85:bc:d4:aa:
c0:fe:17:19:40:8e:a6:bf:30:4f:a6:29:49:bb:55:4e:37:53:
1f:1a:72:e7:c3:f6:eb:6d:9f:92:3a:3f:09:85:2e:1c:73:56:
52:35:d5:ec:a7:4f:7a:24:7e:07:f2:a4:5c:88:44:99:5f:2d:
03:fc:bb:dc:4f:c1:17:fb:d0:ad:cc:5c:f6:fb:81:32:da:19:
76:d5:5f:3e:48:8e:0b:f1:07:46:51:fa:95:c3:61:86:8a:51:
3a:29:7f:b4:60:e4:19:2e:b9:c6:4c:49:b4:e1:a0:57:07:ec:
5f:cd:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:27 2026 by rpki-client