Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: Ox6Xk6oesyXkEgOu2+ZKgZLTEpF6sUd5wKol1ohBc+0=
Subject key identifier: ED:38:87:8C:82:1A:E9:70:CD:A3:4B:B2:36:BB:94:AE:BD:58:09:A9
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 019D3AC1C46A1D51785E37BFBDD039CBCE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 0D33
Signing time: Sun 29 Mar 2026 18:01:10 +0000
Manifest this update: Sun 29 Mar 2026 18:01:10 +0000
Manifest next update: Mon 30 Mar 2026 18:01:10 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: XPM3P0UJSZAD4deIkYBssQmjWjgb706h8tcJb6dr6ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:c4:6a:1d:51:78:5e:37:bf:bd:d0:39:cb:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Mar 29 18:01:10 2026 GMT
Not After : Mar 30 18:01:10 2026 GMT
Subject: CN=ed38878c821ae970cda34bb236bb94aebd5809a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:d9:11:8f:7b:ec:dd:2f:65:f9:ec:58:fd:
40:e0:5a:fb:dd:11:f8:83:a5:4c:05:9e:76:07:ec:
c9:a4:e9:d8:bd:6e:fe:d7:26:8d:59:46:06:76:7c:
5a:4c:08:92:87:84:1a:cc:0e:38:99:b8:e0:2e:02:
2c:cf:7f:ac:24:2d:85:c8:58:9b:bd:57:fb:92:8e:
31:0a:ab:31:f8:bd:e7:d1:af:98:ad:4b:5b:64:5b:
71:ca:3e:dc:ed:fd:59:a2:26:9b:20:41:4b:26:54:
1e:4c:60:17:62:c1:cb:17:f0:8d:37:55:33:81:3e:
87:cd:51:fa:74:30:da:14:dc:4c:ce:45:e4:a7:64:
9f:4c:fe:e0:c5:8e:cb:62:3d:d5:40:d2:ec:7c:58:
ca:d1:13:fb:2d:0c:75:d8:ed:99:a9:44:0f:d4:3c:
64:aa:93:86:62:97:59:a7:5a:43:f8:04:81:a1:06:
c3:a0:c8:a4:0d:a3:dc:8c:78:f0:4f:6f:43:e3:ca:
4b:03:84:57:0e:d5:03:96:b1:b9:85:7d:f5:63:51:
9f:23:93:48:30:ef:18:0a:3b:8c:e3:68:e2:be:7b:
2d:ef:63:26:d9:dd:fe:2a:24:95:f2:ce:54:eb:14:
26:e6:95:f2:eb:82:f9:07:ca:a9:bf:b1:77:27:3a:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:38:87:8C:82:1A:E9:70:CD:A3:4B:B2:36:BB:94:AE:BD:58:09:A9
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7e:a2:dc:9a:ad:fc:80:c9:58:97:f6:7a:49:74:d8:11:37:
ce:83:ed:d8:89:de:b5:b7:32:03:a5:0f:7e:a7:db:9e:e9:22:
c9:3a:36:40:5d:5c:9a:74:29:7e:98:4f:bb:a0:33:0c:70:75:
6d:62:83:1e:19:72:4d:db:62:08:9c:35:52:a5:a2:ef:d2:42:
f4:72:fa:5f:23:55:17:a2:a5:30:a4:9b:f7:bd:54:5a:a0:d5:
21:4c:63:8a:27:ad:33:a6:05:98:86:b3:78:ae:38:c6:83:03:
31:5d:34:ff:bf:b0:b4:cf:f4:a8:d9:52:0c:56:f9:77:e0:14:
32:85:0b:35:90:24:0e:5d:c7:9b:7e:dc:17:f9:e5:f0:73:60:
fe:68:23:a3:ec:ef:24:db:12:f3:49:e4:63:89:25:08:6e:ef:
7e:08:b9:46:39:5b:83:21:56:ec:ae:bc:42:34:f1:3a:2e:39:
9b:61:be:1c:3a:87:98:b7:36:bc:c5:e4:77:36:30:f2:ac:c6:
f2:33:89:33:00:f7:0c:42:fb:9e:f7:64:35:f3:13:05:ec:a5:
35:97:3f:a2:1c:f1:5e:3b:ec:1e:4b:d0:83:07:d4:7d:13:a6:
14:db:a7:75:1d:b8:65:46:96:5e:70:ce:f0:81:69:aa:de:d1:
f0:e4:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:44 2026 by rpki-client