Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
File: Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft (raw, json)
Hash identifier: cT1tnlk06Vkt6SjM0sQlHyvmcch5QzftIiz0dQmvm3k=
Subject key identifier: 62:2D:C7:43:47:34:57:65:08:D7:06:E9:95:F3:F2:50:C9:7D:64:E0
Authority key identifier: 46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
Certificate issuer: /CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Certificate serial: 019CAA21D890FE67AE8816F90C9CFB4994FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
Manifest number: 1502
Signing time: Sun 01 Mar 2026 16:01:10 +0000
Manifest this update: Sun 01 Mar 2026 16:01:10 +0000
Manifest next update: Mon 02 Mar 2026 16:01:10 +0000
Files and hashes: 1: Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl (hash: BCrVs5HGzwy1onuGBJC2Q71CsfSyjRxtuNL8L8QC60A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:d8:90:fe:67:ae:88:16:f9:0c:9c:fb:49:94:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Validity
Not Before: Mar 1 16:01:10 2026 GMT
Not After : Mar 2 16:01:10 2026 GMT
Subject: CN=622dc7434734576508d706e995f3f250c97d64e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:ad:1d:5e:3d:f3:75:9b:39:82:67:87:36:
05:ba:20:d7:08:3a:a9:c5:81:41:dc:d6:fa:e1:76:
64:35:a6:d1:a1:33:cf:36:b5:3d:8e:10:9a:28:8d:
89:a5:f0:53:c2:eb:f5:8a:e0:c9:4b:5c:0b:59:e8:
9b:45:2c:f4:75:8a:99:e9:68:8c:8f:71:59:72:2a:
8e:9d:88:b7:33:c4:2f:6e:d9:7e:52:94:bb:89:68:
f6:93:61:24:12:4f:b0:70:b2:24:72:55:41:b8:2c:
e1:d9:16:cb:a1:45:26:f2:9e:ec:b3:e0:04:9a:b7:
03:a2:22:8f:30:a3:2e:69:d1:58:e2:ab:8b:e8:a5:
2d:e1:0e:3f:95:a3:d0:8a:5e:d2:64:1b:c9:25:1c:
05:af:25:87:8c:27:7e:d6:a7:23:57:50:48:b7:07:
bf:3a:75:8d:79:71:80:c2:56:53:78:0a:4b:93:39:
7b:71:75:50:7d:11:8f:1c:e9:3a:52:79:7e:9f:d6:
d8:a7:69:26:90:ab:92:24:62:14:f6:f0:e6:bc:6f:
62:a9:ea:74:b5:9f:a1:7e:dc:8b:e5:c5:10:36:16:
83:a0:1b:94:90:3a:ff:76:6c:19:3c:fe:79:6d:60:
ca:28:64:75:9c:f0:64:3e:23:01:50:40:cd:54:e1:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2D:C7:43:47:34:57:65:08:D7:06:E9:95:F3:F2:50:C9:7D:64:E0
X509v3 Authority Key Identifier:
keyid:46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e6:c7:54:94:1b:e8:b0:f2:92:2a:84:92:5f:95:9d:64:be:
46:fd:07:b0:a1:d0:f7:84:14:e0:dc:ea:19:4d:a6:59:f3:fd:
01:00:0a:42:be:a2:23:ab:1e:10:80:f0:95:81:07:17:e0:df:
0e:40:9c:57:3e:a0:13:af:f9:2b:ad:51:ca:76:9d:0c:85:ab:
7e:08:71:96:21:e0:0f:0b:ae:7f:72:da:78:fd:1e:6e:d3:38:
74:aa:fe:30:80:ed:4a:50:f7:e4:de:48:50:8a:49:af:e2:a7:
eb:6e:68:18:b4:59:ce:39:cb:3c:1c:1e:41:53:0e:b3:2c:8f:
27:5b:17:3f:ca:b1:f7:bf:5c:fd:8e:a3:d5:9e:77:51:88:be:
7b:a6:0e:bc:32:cd:04:7b:b8:ec:d1:92:1f:59:74:87:c3:ed:
6d:29:88:35:13:16:b5:4f:a2:c7:7d:35:7a:6e:cf:02:a7:02:
7a:70:6a:03:d0:0e:4b:ac:0d:c6:14:0a:1c:24:f3:24:d2:f8:
d4:e8:18:d1:36:61:a9:7e:6f:ee:b0:e9:74:da:aa:8e:06:ac:
b4:75:55:4a:d8:4a:78:42:e1:ea:af:8e:42:05:11:b3:40:9c:
50:46:a6:5d:96:3e:b7:12:e4:f4:65:c4:ab:39:b7:28:43:6c:
aa:0b:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:47 2026 by rpki-client