Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: AlhrVo3tN4qn60tUw942evfOqQ47bcFvW57wk1D90wI=
Subject key identifier: 55:B1:89:E9:03:AE:28:35:6C:08:C3:95:71:D0:E1:33:D4:43:B3:38
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 019D38668656A8118BB056488974FC3E325C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 08CD
Signing time: Sun 29 Mar 2026 07:02:15 +0000
Manifest this update: Sun 29 Mar 2026 07:02:15 +0000
Manifest next update: Mon 30 Mar 2026 07:02:15 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: w1p/ERFi0Kjj30bzP6rXlud7OPGuKlzGaRR/RSPTCkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:86:56:a8:11:8b:b0:56:48:89:74:fc:3e:32:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Mar 29 07:02:15 2026 GMT
Not After : Mar 30 07:02:15 2026 GMT
Subject: CN=55b189e903ae28356c08c39571d0e133d443b338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:17:73:d1:62:55:6d:be:06:a2:98:b4:fa:
2a:87:71:9a:03:86:a9:36:e4:27:51:c3:4f:c1:55:
de:ab:86:c8:29:3f:af:03:f4:25:c6:4b:be:80:04:
87:d5:df:57:1c:7e:8d:68:79:0d:8a:b1:4c:ce:f1:
6b:cb:db:bc:62:5d:1f:07:2d:df:96:f5:6f:40:60:
1a:63:eb:34:f2:5a:9f:92:7f:32:d4:65:c4:64:40:
4b:64:26:07:40:f7:23:d2:05:59:f9:fd:6a:01:a4:
36:f0:8e:3f:63:fb:3e:1b:b4:7d:f7:b8:3f:1a:2a:
5b:b0:02:f5:54:cc:08:34:5d:b6:60:80:12:76:da:
9c:c6:a6:b6:0a:3c:e2:08:bd:56:2f:d1:2d:60:a5:
37:e7:f0:5d:34:86:a3:99:da:d7:a2:82:f1:d5:b1:
b4:d5:dd:77:64:ef:04:8c:96:e1:d8:96:55:8e:de:
c5:77:03:32:87:34:d8:7a:c5:c8:fc:aa:b9:0a:96:
a7:39:9e:f9:93:93:5f:57:97:17:76:4b:4a:bc:36:
a5:71:d0:98:de:4b:17:69:19:9c:2a:b9:1d:97:05:
2e:a2:a0:c4:9c:6c:aa:81:7c:b4:08:75:e4:dd:7d:
8b:95:7f:69:fc:1a:4f:f5:35:db:b1:ff:2e:7c:47:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B1:89:E9:03:AE:28:35:6C:08:C3:95:71:D0:E1:33:D4:43:B3:38
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5e:c6:2b:c3:c8:fa:1e:68:64:ea:3d:0e:cf:fa:f6:3b:52:
a5:b7:d4:a1:d4:af:91:3b:85:41:8e:60:ca:9e:7c:32:2f:18:
ce:e6:95:8c:ca:d7:0b:0d:f3:49:cd:f9:35:71:4e:96:ef:e7:
fc:cf:17:46:bd:7c:60:a8:a4:62:b9:f8:6f:b3:65:e9:9f:a6:
b1:7f:df:b8:09:b4:f4:4e:81:2a:04:ed:aa:92:04:8d:95:41:
ae:69:dc:3c:31:40:3f:4d:ce:3d:2e:5a:5b:82:a3:73:f3:e0:
ff:86:dc:fa:a3:df:0a:9c:1e:8a:bf:99:d4:d5:98:02:9f:ab:
eb:c7:c9:f5:eb:6d:b7:f6:66:99:24:0f:a9:6a:9e:d7:bf:cd:
cc:54:70:aa:77:b1:e1:6a:79:50:72:4c:21:47:47:78:2c:a1:
a8:5f:14:0a:bf:87:c4:cf:0e:2c:a0:46:9a:a3:1f:91:97:54:
35:2b:b8:bd:30:cf:4a:72:f9:54:bd:b6:c3:f7:2a:f0:13:10:
3a:99:3b:9e:6c:ba:c4:03:a2:b6:0d:1b:81:76:0f:13:eb:37:
b8:74:4a:df:54:08:7a:5f:76:b6:a5:41:76:5c:fe:5b:73:70:
61:8f:44:d0:7b:41:b2:68:53:42:53:72:4f:91:1e:fb:46:7e:
64:4b:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:22 2026 by rpki-client