Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: t6mPF1SGHWEBbABvnVfnwGvNmnuscRUhnMdUX38+NQk=
Subject key identifier: 8C:18:0A:39:BB:56:41:D0:62:3F:86:64:F8:EA:C8:21:D6:51:AF:CE
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 019CACB4D84169E4F2E7BB38E529A707C549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 1348
Signing time: Mon 02 Mar 2026 04:00:58 +0000
Manifest this update: Mon 02 Mar 2026 04:00:58 +0000
Manifest next update: Tue 03 Mar 2026 04:00:58 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: DiFjtCz6z8d1bWjpV5XMRqQHWgU1p/RYu7vs7ll/CZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d8:41:69:e4:f2:e7:bb:38:e5:29:a7:07:c5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Mar 2 04:00:58 2026 GMT
Not After : Mar 3 04:00:58 2026 GMT
Subject: CN=8c180a39bb5641d0623f8664f8eac821d651afce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:16:d9:50:82:fe:92:7e:1d:32:43:da:04:
72:1b:f0:26:f9:3e:b9:d7:6e:88:3d:a2:ab:02:9a:
6c:4a:96:65:76:0a:0b:91:78:30:3c:d3:cb:ba:49:
ea:b1:27:cb:8f:6b:55:4e:f7:3c:a7:cf:50:ac:20:
da:82:f0:81:1e:c8:e9:ca:11:95:3b:80:4e:4f:cb:
8e:e8:9f:3d:ae:69:4f:df:3e:ce:ca:51:5e:47:42:
c8:bf:23:45:fc:b6:1b:d1:76:0f:97:65:42:40:95:
8c:b0:47:f3:e8:9a:4d:50:9b:40:6c:6e:9b:8d:80:
07:2c:55:14:95:b3:18:ba:9f:76:51:3d:61:c8:31:
71:65:8d:86:75:8c:f8:47:fa:d9:ea:ff:f3:e9:79:
8a:0a:35:3c:c8:d1:c3:08:65:89:d7:eb:6a:7a:98:
28:7a:3e:a8:f8:01:7b:b6:df:e8:b4:46:fb:f8:0d:
91:14:fb:f8:95:27:92:d0:e1:4c:df:79:d1:cd:06:
15:31:6a:58:cd:a8:3e:9b:6d:64:5e:b9:46:b8:7f:
10:cb:d2:06:97:e7:76:58:f5:ad:ea:0d:f0:00:a2:
7a:0f:28:c0:69:f3:18:70:db:11:0c:df:97:72:ac:
43:6c:83:0f:1f:a8:38:6b:ff:85:29:16:b5:79:df:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:0A:39:BB:56:41:D0:62:3F:86:64:F8:EA:C8:21:D6:51:AF:CE
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2e:f4:83:bb:42:df:d6:99:79:cd:21:b8:f1:e9:4f:63:44:
c5:8f:e6:8d:f1:65:67:ff:92:c6:9a:e8:fb:25:03:28:26:3f:
4d:61:bf:7b:74:6e:21:c3:e7:08:4c:26:03:27:4c:3f:4a:95:
77:87:24:02:a2:17:94:0d:9b:14:25:ab:e4:48:5e:77:c9:75:
29:82:04:9f:90:9d:4e:87:bf:55:36:c1:bc:bc:d1:ae:c6:15:
32:a2:df:65:bb:d2:38:67:ec:a6:fa:bd:84:75:c1:1e:c5:ee:
e2:a5:b8:97:de:bc:aa:83:bc:7b:97:7f:70:d1:54:de:81:8d:
80:4d:ef:3a:f1:4d:af:12:c3:0d:a9:21:cb:94:ce:84:f2:76:
83:c7:8f:75:ee:a9:45:86:1d:36:1d:0d:43:f7:d5:50:21:28:
1a:76:53:47:d7:de:71:e5:e2:f4:60:ae:22:ac:81:31:41:3b:
cd:f3:7b:d3:92:42:20:f1:bf:86:a5:70:7a:fc:55:98:c8:be:
fe:68:22:0a:dc:bb:e4:6b:2f:76:62:36:4b:51:27:f5:01:9c:
6e:aa:0a:95:51:16:37:23:c4:73:41:05:c5:7a:a5:69:fa:19:
2d:fc:c5:e2:7d:6b:42:f9:51:28:ec:c0:4f:04:cf:b4:f5:71:
8e:2d:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:18 2026 by rpki-client