Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier: BoND1gECJi/impjb7vhN7rjuNYgc+6URL8a1c+5C0DM=
Subject key identifier: AF:AD:5A:F7:D1:77:08:88:1B:D8:40:41:83:30:14:2C:14:80:A4:E8
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer: /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial: 019CAC475DDCAD5D32CB7FA1B688F3B2ED17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number: 0872
Signing time: Mon 02 Mar 2026 02:01:24 +0000
Manifest this update: Mon 02 Mar 2026 02:01:24 +0000
Manifest next update: Tue 03 Mar 2026 02:01:24 +0000
Files and hashes: 1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: P+M2EjRXVJWslAzv/SuLEifYG1B9l/q+hCAz6RltwRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5d:dc:ad:5d:32:cb:7f:a1:b6:88:f3:b2:ed:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
Validity
Not Before: Mar 2 02:01:24 2026 GMT
Not After : Mar 3 02:01:24 2026 GMT
Subject: CN=afad5af7d17708881bd840418330142c1480a4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:9b:9a:92:8e:ce:25:39:f2:2a:d8:88:36:
8e:e9:57:74:db:51:ad:8d:0e:5b:f6:73:33:16:f7:
c0:76:b2:97:c3:27:72:61:f6:7b:58:b3:94:9e:87:
f3:52:19:d0:e2:80:ec:b9:81:ef:46:9f:56:ac:ae:
93:50:d7:e0:dc:fd:9a:6b:46:ed:9b:1c:9c:5d:93:
7b:8a:19:46:cb:ab:35:fc:0c:01:a2:d3:f6:b8:86:
8d:62:52:6b:40:9c:e5:d8:16:56:80:d0:ad:09:ad:
3e:4c:35:3f:50:63:80:23:95:f4:da:2b:51:ca:43:
aa:97:25:74:32:16:b7:31:67:0b:1b:68:b6:5e:c8:
0c:11:ae:e0:35:2a:5c:8d:df:98:45:44:7e:c4:f2:
5b:a0:ee:75:f3:21:dc:b4:40:50:40:b9:1a:0c:e9:
7c:53:1c:f4:52:b7:03:0d:bc:aa:43:2d:df:14:f7:
8a:59:e1:49:18:87:05:c4:19:08:a7:e3:92:01:fc:
da:50:0a:bf:d7:16:14:2a:3c:32:71:0f:4d:f4:0c:
44:ff:af:2d:ee:ff:3f:cb:56:ab:52:00:52:bd:78:
7c:8b:b0:24:5d:c0:52:20:16:95:f1:48:bc:c2:97:
09:3c:7f:c3:f0:25:8a:84:e5:f1:06:81:ed:85:ff:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:5A:F7:D1:77:08:88:1B:D8:40:41:83:30:14:2C:14:80:A4:E8
X509v3 Authority Key Identifier:
keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0c:c1:60:8c:0b:71:ea:f1:19:a4:39:d0:6b:61:e1:2b:d9:
21:44:4e:ca:a0:cb:38:94:b0:a8:0d:5a:8f:92:d6:4d:b7:25:
d6:3e:a4:e0:02:17:b0:ce:ac:0d:e0:cf:0c:da:96:c2:79:f6:
55:9c:90:2b:33:34:0d:35:a0:5c:3b:95:cb:fa:2a:c0:ba:c3:
df:6b:5a:91:e6:00:2c:7a:88:4f:9f:69:42:f4:b7:4f:25:72:
58:d3:0c:b6:15:85:fa:c7:d8:1b:9f:96:e7:43:78:a5:a7:fa:
6c:ab:bf:2b:66:92:5c:6c:06:e8:85:00:43:6e:f6:9d:ad:ce:
82:f3:35:a3:33:af:c5:7b:d4:a2:bf:af:ad:c9:0f:6b:8b:ee:
18:52:54:a2:d9:46:cb:08:a5:2a:24:a1:48:6e:0d:40:98:a6:
12:8e:ed:62:14:f6:15:2c:9d:c3:cc:95:ee:94:16:5a:d4:95:
ed:a5:38:5b:12:f5:dc:77:47:64:1f:da:ee:1e:16:7c:05:d8:
10:b7:08:26:89:8e:49:ef:8d:4f:39:6b:a6:c9:b9:d7:7c:28:
ec:48:89:ae:3f:4e:f3:5b:1e:c2:08:be:c8:61:0d:48:71:74:
c8:67:3b:50:53:d1:25:eb:ba:f7:c0:16:f3:8b:48:b3:75:d4:
94:50:ab:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:46 2026 by rpki-client