Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: LTufscr+bniUGiuCQT9HTf3A6lT/+Kj4f8xfgwSH+Mk=
Subject key identifier: B3:4E:63:DE:A2:BD:41:0F:FE:E5:F8:29:3B:B5:72:07:42:06:8E:7B
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 019CAA591A31A36BDCB0D82A45A3B9E1C21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0E6C
Signing time: Sun 01 Mar 2026 17:01:31 +0000
Manifest this update: Sun 01 Mar 2026 17:01:31 +0000
Manifest next update: Mon 02 Mar 2026 17:01:31 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: olIsLPv4Bu7NSFoYRS5i1InSiwmv3Hqr5kzbcPVjL8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1a:31:a3:6b:dc:b0:d8:2a:45:a3:b9:e1:c2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Mar 1 17:01:31 2026 GMT
Not After : Mar 2 17:01:31 2026 GMT
Subject: CN=b34e63dea2bd410ffee5f8293bb5720742068e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:0c:32:70:82:02:c8:39:8e:a4:f6:d9:7c:
e7:0e:35:f6:a2:d5:8e:94:4b:c5:2f:8b:dd:9c:51:
a4:46:ac:31:fa:83:59:6e:78:f2:1c:cc:aa:a7:36:
1e:99:b7:62:ea:e7:b4:b7:7e:e3:e8:6b:18:33:d8:
19:86:49:6e:7f:bc:91:31:08:98:db:75:90:d8:31:
19:e1:8d:33:fd:85:09:c6:97:7f:b3:80:74:d3:cb:
63:4e:f4:34:94:cf:8f:1e:2f:22:ee:72:7b:ee:28:
46:8a:1f:6a:d5:6e:90:d1:d0:e7:e7:8e:9d:4e:8c:
08:aa:db:0b:31:1d:6a:4d:7e:2a:33:c3:da:32:6b:
c7:e4:2e:8f:12:3c:80:3f:cd:2c:08:71:5c:42:1d:
cd:6d:95:7d:b1:55:8d:f5:de:fa:9b:f8:0e:b3:a6:
d3:ce:97:01:b8:aa:0e:1e:e3:6b:67:50:55:0e:c5:
c2:d7:b3:1a:59:96:db:3b:3d:b1:db:64:7c:a0:d0:
d9:ce:d9:88:0e:22:9c:09:55:33:1d:38:ed:54:46:
73:79:39:46:9e:8c:11:fe:0d:b8:f9:2c:8f:b8:62:
18:3f:e5:50:44:80:ca:62:8d:60:4a:7f:36:d8:7c:
e8:d6:f7:c5:f3:b5:2f:00:01:8c:64:05:c9:b8:6a:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4E:63:DE:A2:BD:41:0F:FE:E5:F8:29:3B:B5:72:07:42:06:8E:7B
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f0:80:45:39:30:57:2d:c9:fc:5d:fd:ae:9a:20:aa:c7:17:
4a:d6:16:a2:37:af:c2:0a:83:36:2a:d0:d5:00:9d:e2:51:c6:
a4:c3:90:ab:38:27:95:cf:36:b4:8f:2e:b6:8a:6a:c3:2a:fe:
2c:89:33:49:a5:3f:ed:17:07:e3:f3:62:bc:2c:48:47:11:be:
11:a4:66:ec:db:de:2e:e2:bc:c2:5d:e6:91:1f:48:23:c5:45:
b3:5e:60:b5:0c:a9:62:a9:59:b7:06:b4:fa:4c:3f:46:0f:32:
c2:3f:2f:73:d1:73:32:8d:70:b8:f9:ca:d4:7d:0f:e3:85:87:
cf:8d:a3:55:01:fe:88:68:e1:1c:21:42:15:6b:f0:25:6f:1d:
47:42:45:03:d7:db:47:d4:11:2d:2e:35:b4:b4:84:bc:73:5a:
24:4e:60:d1:e9:c7:dc:52:0c:0c:63:2d:1d:c3:13:95:78:72:
06:3a:71:37:62:fa:55:4f:4d:ef:72:a4:be:4e:fa:1f:6c:c5:
b0:fe:f5:33:05:ef:e8:3a:4d:b3:ab:7d:b6:99:01:e3:a8:4a:
9f:49:81:65:73:2f:6a:00:bb:f5:64:f1:9d:df:19:57:21:4e:
da:51:2a:a4:57:6b:c0:76:07:87:b7:1e:b2:03:68:3c:c0:32:
d7:b5:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:26 2026 by rpki-client