Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: lL0OZli6xz6vbL1OvowEMBe8rW+vwQ4so7fGQbeYqE8=
Subject key identifier: 36:4C:D9:28:5D:E3:F0:42:99:0E:D9:7F:2A:54:EE:CE:F3:A0:F6:F0
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 019CABD997F62D433AD19C9A94153994ECC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:30 +0000
Manifest this update: Mon 02 Mar 2026 00:01:30 +0000
Manifest next update: Tue 03 Mar 2026 00:01:30 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: 8XyeQpxX55hyLI5HOXDc6Ww7yrl8WuSNoMcRXJXSTUE=)
2: ptXyrgVvtRP3D7VtVmhZM3FWVhU.roa (hash: PoyEOK64ZRkHmMkkLoFS8S4R0VxZJdJWksZdI9vklg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:97:f6:2d:43:3a:d1:9c:9a:94:15:39:94:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Mar 2 00:01:30 2026 GMT
Not After : Mar 3 00:01:30 2026 GMT
Subject: CN=364cd9285de3f042990ed97f2a54eecef3a0f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:d7:3e:79:4c:74:c1:4e:bd:6c:44:8d:f1:
5b:ab:c0:19:7c:78:c2:d4:a3:7c:62:70:bb:03:85:
d4:fd:20:58:23:e2:20:67:d8:dc:c8:4c:dc:66:56:
d4:69:bf:42:ed:1e:b2:91:3a:f6:bf:b8:5b:3a:f0:
30:87:fa:f0:31:c9:e0:0e:55:a8:a4:4c:19:52:c4:
b6:9f:95:3b:bc:3a:0e:35:12:c0:57:04:30:20:26:
b1:74:78:a0:01:5d:9f:17:7b:61:10:9e:a5:31:61:
1e:74:c7:d2:37:b7:95:f6:89:14:ad:90:45:7a:ca:
2c:d2:43:c2:e9:df:ce:b1:ad:bd:3a:d3:0f:98:2d:
51:52:f8:57:a1:e8:8e:ca:01:8d:9e:ff:41:09:c8:
60:1f:d1:45:4a:9c:23:8a:b3:8e:88:82:6b:7c:3a:
29:00:1c:c6:8a:8c:e0:c5:e4:5e:d1:2c:29:86:33:
44:01:fe:90:fd:f9:66:26:2f:33:6d:96:08:7a:21:
84:72:75:0f:f3:70:b1:53:eb:01:0d:6e:60:9a:b5:
2d:72:33:00:47:48:c3:c2:17:06:be:8a:8f:35:cd:
21:99:67:bf:e9:7c:57:48:2d:9b:94:5e:8d:06:ae:
4f:f9:db:fa:30:f3:9a:de:a6:09:c7:64:c3:ca:00:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4C:D9:28:5D:E3:F0:42:99:0E:D9:7F:2A:54:EE:CE:F3:A0:F6:F0
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:57:6a:d3:7e:bb:9e:88:0c:b0:25:a2:7f:41:7a:f6:be:3c:
4d:9e:be:c5:9f:c3:24:54:05:12:0f:0d:3a:45:43:ae:f4:05:
95:6c:37:dc:fe:02:bb:70:ff:a7:16:da:18:17:30:58:6f:a6:
b1:34:86:75:93:39:79:6b:2e:9d:c0:92:ee:54:bb:f3:97:da:
ea:55:46:02:9c:63:dc:0b:c3:eb:61:c8:0f:fe:38:f5:52:f4:
59:a8:31:ae:f9:64:4b:36:41:6d:b0:26:34:f3:3c:82:8f:d9:
70:e8:ba:db:08:50:d5:c5:ae:dd:25:93:e7:7e:f0:70:91:cb:
a3:02:80:9b:01:81:8f:6e:77:19:6c:7a:5c:8f:24:24:09:6e:
47:b5:46:97:be:75:34:2a:ed:d5:92:4e:5a:36:8c:eb:27:78:
c5:1e:16:9a:c4:0f:d8:0a:15:e3:1b:23:54:97:4d:be:6c:7a:
37:92:49:a7:88:6b:a5:ef:39:55:30:78:aa:86:c4:d4:96:a2:
37:2c:eb:9e:01:88:6b:7e:7f:1e:e8:40:f9:ca:d8:b8:0b:7a:
0f:f3:7f:16:c8:a2:c4:7d:fd:2a:fb:d6:bf:40:99:c0:82:c8:
c8:1f:ad:c0:35:78:3e:47:84:c3:eb:86:8a:d3:02:3f:b8:b2:
fa:76:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:24 2026 by rpki-client