Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
File: V25aWVM8ptDwtIgH0Md-FWhgTl4.mft (raw, json)
Hash identifier: lVILbOJ+bEaxAHQ681oBwCeH2C9k5yRb+3EoO8HKPmc=
Subject key identifier: 38:3F:B6:3D:C8:7A:AB:24:B1:3B:36:18:00:66:F8:83:85:A7:79:7F
Authority key identifier: 57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
Certificate issuer: /CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Certificate serial: 019CA9EAEEC09DAD744C31368D9070343D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
Manifest number: 0886
Signing time: Sun 01 Mar 2026 15:01:11 +0000
Manifest this update: Sun 01 Mar 2026 15:01:11 +0000
Manifest next update: Mon 02 Mar 2026 15:01:11 +0000
Files and hashes: 1: V25aWVM8ptDwtIgH0Md-FWhgTl4.crl (hash: EQdUkPK0b44wMseMovu/yzPA3QUZpkFQ2gupWD1VjQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:ee:c0:9d:ad:74:4c:31:36:8d:90:70:34:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Validity
Not Before: Mar 1 15:01:11 2026 GMT
Not After : Mar 2 15:01:11 2026 GMT
Subject: CN=383fb63dc87aab24b13b36180066f88385a7797f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:09:fb:8a:2e:3e:a8:23:89:41:40:8e:ff:
d0:1e:6f:31:7f:2b:de:33:16:89:b2:4c:c7:2f:7a:
b2:03:cb:bc:85:ce:99:43:f0:1b:3b:12:f1:78:32:
b6:ca:37:58:1c:cf:06:f0:61:84:c3:82:8e:bf:a5:
9f:bb:9e:97:57:4d:79:d4:de:90:ff:29:62:c3:88:
4b:b6:36:af:f1:05:e5:44:0d:3b:72:3a:e5:2a:5b:
64:8b:86:3d:df:1b:28:a9:29:83:13:e8:51:53:af:
65:9a:19:93:12:b2:39:8b:68:c6:71:53:cb:e3:ce:
14:22:22:12:b7:f4:38:bf:14:c7:a4:89:3a:da:e8:
46:3c:24:e4:ac:26:6f:41:1a:cb:20:dc:7a:b7:bb:
30:10:71:10:e5:0f:50:1d:63:20:da:e4:68:a0:53:
1b:fd:c9:c6:ba:3c:8d:8a:26:04:90:48:a4:2f:1c:
2f:18:41:e2:98:32:c3:8a:e8:ad:b5:f1:4a:72:21:
1f:f8:a0:56:b5:85:7c:21:ee:9f:62:50:05:5d:37:
73:b3:aa:54:d8:c3:3e:e8:a3:93:40:c0:d8:fd:f6:
d2:33:b1:75:a7:c0:8b:f7:c4:c5:a2:92:93:dc:d2:
4c:08:83:96:90:26:45:f2:9a:83:39:d5:c9:d4:6c:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3F:B6:3D:C8:7A:AB:24:B1:3B:36:18:00:66:F8:83:85:A7:79:7F
X509v3 Authority Key Identifier:
keyid:57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:24:c9:75:a0:34:17:47:91:7b:80:51:6e:fe:5d:e9:9f:9c:
55:52:f9:13:1f:05:ef:71:ee:35:a6:3c:60:c7:c5:80:a2:55:
58:87:e7:23:11:be:25:7a:e9:90:4e:33:2d:9c:f3:17:f4:2c:
76:d6:88:05:ff:b1:f1:72:14:24:89:83:81:ee:d0:31:ae:0b:
34:39:ad:50:24:04:49:fa:a5:c5:19:62:3d:9d:9f:9c:95:34:
5f:2d:8d:de:bc:22:3f:7f:7a:01:c3:79:98:e0:fd:8b:c9:2b:
91:69:61:76:a8:73:24:b3:14:79:4f:f1:4a:87:f8:33:b2:33:
13:bb:e7:cf:eb:5f:34:3c:de:a7:fe:e4:0b:a4:cc:d1:97:52:
ad:db:a9:51:71:65:bd:2f:51:79:c8:6d:25:af:38:5a:55:0d:
21:fc:4f:66:0e:fa:4e:e7:ab:dc:6b:fe:af:0a:a0:a0:b5:58:
2e:70:c3:ef:1a:c1:f3:42:0f:ea:16:f4:ef:f8:3d:11:48:3d:
d8:f6:34:c7:e4:6d:29:f6:f3:60:3d:cf:7e:b1:bc:de:a6:2f:
85:94:46:61:e6:2b:90:32:02:ac:0b:4d:54:e0:bb:62:27:6e:
13:83:15:2b:b6:54:88:6a:f3:62:81:bb:ac:2d:96:de:95:58:
ff:f5:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:57 2026 by rpki-client