Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c02bb-a4a5-4fc4-9db3-1948267472de/1/RIjdC2q9M32PzGIEd-bo1SiS9xQ.mft
File: RIjdC2q9M32PzGIEd-bo1SiS9xQ.mft (raw, json)
Hash identifier: zsViqzu7g0PeOFtfHrEbSEJSDw4kGZwTqMMd665Gl2Y=
Subject key identifier: 52:AF:A3:21:1B:A7:DA:E8:0E:E8:E6:E8:E2:14:7E:B3:52:E5:D0:B8
Authority key identifier: 44:88:DD:0B:6A:BD:33:7D:8F:CC:62:04:77:E6:E8:D5:28:92:F7:14
Certificate issuer: /CN=4488dd0b6abd337d8fcc620477e6e8d52892f714
Certificate serial: 019D3909A9E5AC64842FDEBF71F1C4C2FAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIjdC2q9M32PzGIEd-bo1SiS9xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c02bb-a4a5-4fc4-9db3-1948267472de/1/RIjdC2q9M32PzGIEd-bo1SiS9xQ.mft
Manifest number: 7D
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: RIjdC2q9M32PzGIEd-bo1SiS9xQ.crl (hash: xIlLZGo6UvPH93ealbXVqCnTWy5h6MjSJMhLWhEivOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c02bb-a4a5-4fc4-9db3-1948267472de/1/RIjdC2q9M32PzGIEd-bo1SiS9xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/5c02bb-a4a5-4fc4-9db3-1948267472de/1/RIjdC2q9M32PzGIEd-bo1SiS9xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIjdC2q9M32PzGIEd-bo1SiS9xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a9:e5:ac:64:84:2f:de:bf:71:f1:c4:c2:fa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4488dd0b6abd337d8fcc620477e6e8d52892f714
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=52afa3211ba7dae80ee8e6e8e2147eb352e5d0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:36:56:d1:d7:3a:d7:25:2e:dd:3b:4d:cf:
4c:f1:07:b9:a9:ed:19:f7:fa:67:24:18:04:4a:71:
9d:aa:8b:12:0d:ed:a6:77:36:2d:01:c0:77:9e:3a:
4f:9f:66:a7:3e:69:1c:df:36:8c:db:f1:5a:0d:fb:
aa:01:0c:46:a5:c9:ba:db:cc:2b:b8:e1:b7:52:30:
2d:02:b2:11:00:9e:0d:1b:fd:8f:dc:94:cd:43:3e:
01:88:f7:d6:75:90:5d:f8:cf:3a:0e:90:eb:7b:c8:
a3:f5:38:7a:16:ae:27:50:d2:0e:14:5e:f3:fa:80:
b1:5f:12:1b:40:c7:76:e3:dc:b1:15:79:9d:87:53:
10:92:01:b0:cd:b9:c8:67:73:1d:25:ce:67:50:ac:
8d:17:4b:43:f9:74:df:b9:01:cc:17:dc:8f:8b:e0:
fc:6f:15:df:dc:94:91:59:0e:6d:92:cf:af:c4:77:
e5:4d:19:6f:14:68:6d:00:3a:2a:8b:69:9f:6d:5d:
a4:d1:cb:09:f6:ac:c5:09:33:1c:79:4b:6e:c6:7d:
69:a3:64:77:60:29:53:f6:2d:5d:4b:0b:24:71:d7:
75:6c:66:55:bc:e7:61:dd:94:7e:80:ca:4c:96:61:
b2:6f:68:83:86:03:d5:f9:12:79:1f:39:b7:af:dc:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AF:A3:21:1B:A7:DA:E8:0E:E8:E6:E8:E2:14:7E:B3:52:E5:D0:B8
X509v3 Authority Key Identifier:
keyid:44:88:DD:0B:6A:BD:33:7D:8F:CC:62:04:77:E6:E8:D5:28:92:F7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIjdC2q9M32PzGIEd-bo1SiS9xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c02bb-a4a5-4fc4-9db3-1948267472de/1/RIjdC2q9M32PzGIEd-bo1SiS9xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c02bb-a4a5-4fc4-9db3-1948267472de/1/RIjdC2q9M32PzGIEd-bo1SiS9xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a1:8f:7d:90:1f:de:86:6b:dc:29:37:0f:ed:ea:63:aa:02:
e3:a4:1c:ac:1c:54:da:6d:fb:2a:d9:9f:cc:98:3f:bf:76:f8:
da:1f:4c:2a:b9:94:69:89:24:e5:a1:8d:9b:be:54:b4:72:4f:
60:9a:98:d6:6f:07:76:8c:ed:3e:be:78:3c:07:dd:59:5e:09:
87:12:b6:67:87:69:80:62:a1:c6:c1:85:e4:1f:5a:39:81:c8:
6b:b7:7e:ed:d8:3c:91:ac:9d:56:83:64:64:f2:50:8a:27:ee:
e7:26:65:73:af:82:f4:eb:10:ac:8b:0e:d4:3e:13:e4:ba:bb:
f0:88:37:23:02:56:ce:ae:1b:12:47:a0:f0:06:8e:cc:a0:5a:
b2:d8:02:56:7f:bc:95:b0:cf:4e:af:51:7d:ab:8d:f0:95:57:
69:4e:78:a5:d0:6c:e3:1f:06:75:25:47:0b:fa:cb:10:02:5b:
dc:50:f9:d3:da:5c:97:14:b8:66:d4:48:5a:e6:66:24:b4:49:
f3:3c:c1:b5:af:52:c6:56:73:09:f1:2c:d5:64:d1:3a:95:e2:
17:ee:9c:57:97:a8:52:b0:4d:9c:3b:8e:13:95:2b:d5:fa:da:
ee:f8:57:52:ad:c5:6e:52:17:35:22:ee:c5:51:db:4b:6d:fd:
1e:92:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:32 2026 by rpki-client