Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: ju75xLOaHLNLeOXxNBPrGEHA/Vs/8k6zKIyUhNHimgc=
Subject key identifier: 27:3C:F4:F0:8D:13:55:5A:4E:E3:68:84:65:94:2C:B3:23:5E:1B:74
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 019CADFE7B76DA70E49D57EB28BE52ED0BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 07CE
Signing time: Mon 02 Mar 2026 10:01:01 +0000
Manifest this update: Mon 02 Mar 2026 10:01:01 +0000
Manifest next update: Tue 03 Mar 2026 10:01:01 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: NyVmFBe1S2WMj5qPUnicd+VbzLWOAoK896HxfnR/s0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:7b:76:da:70:e4:9d:57:eb:28:be:52:ed:0b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Mar 2 10:01:01 2026 GMT
Not After : Mar 3 10:01:01 2026 GMT
Subject: CN=273cf4f08d13555a4ee3688465942cb3235e1b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bc:58:2f:54:5d:93:d1:9e:61:a0:83:c7:ef:
c5:b7:9d:e0:2e:b2:33:98:36:05:d6:13:37:ed:f6:
73:77:bf:f7:41:c7:72:dc:d9:c2:0d:c4:80:44:fa:
d9:61:11:24:4c:17:13:74:43:8f:6b:0e:33:2d:97:
10:c6:bc:23:8b:6b:e9:a4:ea:06:c8:f0:51:b0:8a:
6d:d1:9e:3f:59:bb:67:09:38:2c:49:ad:f8:d6:3a:
a2:41:28:bb:24:92:27:aa:47:15:42:3a:52:06:c6:
f0:4a:cf:4e:3f:3c:a4:f6:a4:dc:81:fd:d5:eb:ec:
62:4d:d8:9c:1b:b6:39:d6:72:8d:cb:58:86:d7:70:
61:e5:e4:08:31:d1:ef:0c:39:f0:4d:45:6e:c7:98:
bc:39:bb:c7:1d:f7:ba:99:85:bc:2a:82:5c:01:f9:
c2:48:f3:9a:c2:2c:9a:14:f2:90:d6:d8:87:f0:b5:
ed:2f:f4:42:15:50:bc:81:f9:c9:3b:86:9a:85:f7:
c9:75:3e:bc:63:0e:d0:e8:9e:66:b8:27:a1:2c:54:
81:41:c0:1a:99:53:1e:2a:3e:f8:27:4e:ca:32:a4:
a0:80:c9:d7:a5:b4:a5:bf:15:67:2d:63:ab:43:a1:
bd:2f:4f:60:c9:7c:7b:86:58:36:23:cb:36:15:a8:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:F4:F0:8D:13:55:5A:4E:E3:68:84:65:94:2C:B3:23:5E:1B:74
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ef:57:30:31:10:a2:22:6a:89:e5:1e:a2:e0:90:e0:29:90:
b7:75:72:6d:b5:47:00:de:4c:4a:a5:5f:f0:c6:f0:1b:10:e7:
45:67:73:38:31:40:f4:ab:1b:3b:af:96:10:42:85:f0:37:b6:
2e:9a:91:c7:c7:1a:f1:b3:6c:6c:18:ee:7a:22:d0:d4:af:80:
c8:7b:fa:25:94:ad:09:44:3e:c9:91:67:99:9a:29:4e:5f:96:
80:ef:9e:ad:6e:ae:45:e9:24:34:f1:62:99:9e:84:c8:44:7b:
9a:27:38:18:c6:6c:73:e3:59:f1:17:79:52:b8:d3:18:6e:3f:
f5:97:79:95:0c:bd:73:35:5c:39:44:38:3f:02:f4:ac:52:7e:
68:49:7a:72:91:cd:b8:f1:b3:7f:4d:07:db:f1:42:9f:0e:2e:
b9:40:ab:e1:43:e2:c9:dc:19:df:67:84:0a:c8:45:f9:40:b0:
74:7c:6a:b7:f4:87:db:c3:b9:20:23:e2:6d:4f:c3:44:e1:c4:
81:fe:98:64:ce:33:0a:11:f1:ff:b3:e2:3d:4f:9d:c1:a6:7f:
cd:72:55:5b:ac:28:14:83:86:fe:98:9a:d5:fd:0d:c1:41:bd:
9f:4a:11:c4:29:99:9b:39:44:b5:18:6d:dd:4b:66:1f:b8:02:
f9:e3:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:40 2026 by rpki-client