Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json)
Hash identifier: tmlK+nqKdsR/Xyi/KK90nTqe227To5jhM6gsE3q9yA0=
Subject key identifier: C2:7D:85:AE:26:5E:77:BA:95:06:36:CD:94:EB:51:01:8B:46:EF:3A
Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Certificate serial: 019CAD5A26701415604C33705166F9EA52F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
Manifest number: 0B0D
Signing time: Mon 02 Mar 2026 07:01:32 +0000
Manifest this update: Mon 02 Mar 2026 07:01:32 +0000
Manifest next update: Tue 03 Mar 2026 07:01:32 +0000
Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: bCJszHzX6djKUR6GEeZ/YVHHEsqTJYbLKhav2KCR0+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:26:70:14:15:60:4c:33:70:51:66:f9:ea:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Validity
Not Before: Mar 2 07:01:32 2026 GMT
Not After : Mar 3 07:01:32 2026 GMT
Subject: CN=c27d85ae265e77ba950636cd94eb51018b46ef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:25:8c:23:99:a5:0f:a7:18:05:e7:90:f2:
e6:9b:c4:46:3a:7c:d1:94:8b:a2:43:50:5c:ae:14:
28:25:64:6b:e2:35:bf:4b:30:f7:21:7a:50:ad:b2:
2b:35:fc:55:97:54:aa:c8:a9:a8:ca:6b:1d:a9:c3:
3a:4f:a4:6e:28:f2:9a:1c:a6:ce:a3:b8:49:45:f8:
ad:9e:97:d6:1d:d9:a1:18:48:e9:61:4e:a5:5a:09:
e8:ca:36:f4:01:3a:70:79:49:2d:f8:9a:4c:d4:5c:
58:21:2e:5a:79:36:e1:78:81:c8:8c:39:45:c0:4c:
39:22:47:ff:28:de:2f:9a:6d:97:cc:ce:2c:7c:05:
84:b5:7e:7e:73:d1:f6:d4:8c:1e:97:56:88:4f:75:
d3:ea:ec:12:99:90:e9:8f:fa:75:93:84:e0:f4:31:
8b:d7:63:2e:95:64:e9:6c:27:99:1b:ee:e0:d6:65:
a8:4d:5e:c0:9c:b4:0a:ea:0d:cd:94:ca:9d:3f:51:
69:99:11:b8:73:cd:08:bf:01:28:c4:d8:66:ee:0b:
60:ca:a8:08:21:79:52:ec:c9:ff:83:e4:1c:60:fd:
f2:2c:b5:08:42:ae:01:bc:6d:c0:a9:7b:6f:59:4d:
5d:d7:5a:a8:53:d6:2b:2c:8b:31:5b:2d:09:33:82:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:85:AE:26:5E:77:BA:95:06:36:CD:94:EB:51:01:8B:46:EF:3A
X509v3 Authority Key Identifier:
keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:81:b6:87:35:be:67:47:ad:b7:b5:b1:11:7b:9c:e4:c7:72:
06:e9:45:e7:c6:b5:f0:40:f1:2c:c9:d1:1c:f0:4d:db:09:0e:
d2:a1:74:97:c1:b9:7b:7f:5b:3a:18:11:f0:57:b6:34:41:fc:
9c:22:ad:64:d2:df:f6:df:e0:82:c5:12:c7:3d:00:fd:27:41:
16:f2:3e:1b:1a:4f:e6:ae:96:24:1d:29:a1:1e:5f:77:3a:6f:
0e:3b:5a:99:ee:d5:29:a8:f5:5a:a1:fc:f7:f3:6d:5d:6c:c9:
ce:65:5c:5a:1a:56:2a:2a:6e:7e:8c:18:bf:be:08:a9:73:92:
e3:46:1c:5f:28:ce:97:2c:ca:5e:e0:2b:2f:79:b7:4a:0c:5d:
23:b3:1b:d6:12:b3:49:8d:93:c6:63:24:65:d1:ed:86:11:c9:
88:be:2e:28:a1:cb:94:83:6c:de:c2:b2:c7:aa:8b:16:ad:5a:
b1:91:6e:db:2c:28:9e:f9:47:dc:78:85:2d:2e:91:28:b4:aa:
01:5b:71:cb:8f:92:52:82:6c:41:a2:a8:cc:79:39:04:f9:b1:
57:8d:ab:8f:ec:fc:d3:01:d7:94:5b:44:c4:d9:4d:0a:e1:79:
a3:63:8a:30:65:18:27:60:37:19:f5:9c:5f:5c:08:db:b9:dc:
b2:a6:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:13 2026 by rpki-client