Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: qS7KAW2qHHgtAJVWN0sqKCwHPxAyARlQscCDgMJ28Bc=
Subject key identifier: 12:74:7A:AC:A4:8C:1B:C2:FA:3D:09:3E:F3:DF:C6:59:53:38:F8:22
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 019D38D303D3BF9ABB46D118A257E38AF0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0E69
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: REAfRpuRUhvWAJkDyxe3dcaGdcGsblqs1KIgTIjlGJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:03:d3:bf:9a:bb:46:d1:18:a2:57:e3:8a:f0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=12747aaca48c1bc2fa3d093ef3dfc6595338f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:f9:69:1d:5f:08:bc:7f:1f:ef:a0:e6:d8:
5b:58:8f:36:20:f7:72:b1:c8:5c:90:8d:69:26:7a:
7e:79:af:79:91:b6:40:d4:a8:d9:2d:63:9b:32:24:
ec:8e:d6:22:82:40:09:9b:3f:0a:d5:f2:27:a4:c9:
e1:a0:6b:25:60:08:06:60:49:c1:5e:d1:af:f6:e5:
04:24:dd:67:28:7a:d4:00:3b:0a:88:d6:da:19:ae:
bd:87:98:2f:7e:e0:85:f7:1f:1f:19:5f:a5:1b:f1:
de:3f:4f:ff:ba:74:e6:cf:f7:2c:3a:35:95:4e:8d:
c9:3c:11:28:73:3c:55:e5:f7:cd:ee:e1:63:91:46:
f5:27:06:04:bb:86:95:c3:1e:3b:4b:5e:58:95:e2:
61:67:0f:96:df:80:44:3b:ab:19:a3:66:83:2c:0d:
b4:77:23:40:50:bd:9a:96:e5:c8:29:95:61:a3:96:
ad:c1:fc:15:4a:71:f8:2a:a7:9a:da:3f:a6:15:93:
b1:6b:da:06:b2:f6:8e:24:19:1b:bc:1a:52:38:ea:
c4:08:14:44:55:1c:fb:ff:4f:5b:27:1c:8d:f2:61:
68:55:9e:aa:e4:6d:f9:79:de:cd:ef:f5:dd:ef:f7:
72:38:c4:7d:76:aa:69:fb:64:f4:13:f4:2c:57:6f:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:74:7A:AC:A4:8C:1B:C2:FA:3D:09:3E:F3:DF:C6:59:53:38:F8:22
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7d:f5:74:43:de:a9:55:c7:e1:bb:ef:57:79:d7:75:4e:11:
c7:9e:a2:ee:d8:cf:35:05:26:4d:9f:f7:90:da:96:3b:d5:75:
51:21:41:46:37:3d:a8:e4:1d:1b:56:1b:39:0c:c9:97:7f:61:
2c:57:e5:9e:e7:36:59:5c:eb:95:9e:8d:1c:49:f0:80:1b:b2:
75:dc:d4:9a:76:d1:5b:ec:9e:99:48:bb:36:35:71:7d:38:1e:
e9:43:3b:e3:30:d6:d6:57:bc:04:67:f6:af:18:e8:49:60:c8:
bd:c8:e8:c8:3d:c0:fa:e0:83:3b:01:b6:0f:b6:89:be:73:e4:
1f:f0:e1:30:6c:52:9f:0b:83:a6:44:2f:5f:4d:fd:9a:1e:0c:
96:67:89:85:bb:05:ff:d8:98:d2:4c:70:ce:69:ce:ca:c7:e1:
5d:55:7b:66:5e:13:08:bd:ef:df:fe:8e:e0:02:97:71:93:88:
18:38:f3:a6:28:13:7e:de:44:38:da:29:98:4f:04:c8:3d:2f:
52:f2:5f:83:71:0b:2d:d3:08:44:54:8d:a7:af:0b:7b:7b:30:
21:a6:2c:ce:02:d4:c8:58:24:53:0b:5a:6e:8a:ba:f4:14:47:
6f:e5:04:a5:4a:a0:11:4a:22:cf:a6:c0:e0:45:2b:98:7e:b5:
c9:f8:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:27 2026 by rpki-client