Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier: rXlnNdvqVANZqCne9NIVZGsmjUDZGx3ERWjMekZKD90=
Subject key identifier: 4D:82:7D:2D:17:9B:FA:C3:14:B0:5E:61:36:94:9A:01:1B:10:36:AF
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial: 019D37C025FF5E8A85D9AB635746A29084C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number: 0A4D
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: VL9/xP62gm1EXOCB1t3jxZh9rWUmdGTHGxyuHTtq5/c=)
2: _ve7f_eKRxTXvAdLhrojJgOcPWA.roa (hash: CPmTvOiaDxy3JYxjp63taRHI0Y6d1z0nn8MiWd6BcsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:25:ff:5e:8a:85:d9:ab:63:57:46:a2:90:84:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=4d827d2d179bfac314b05e6136949a011b1036af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:da:28:d1:e3:a2:2f:39:08:5f:cf:43:2e:
03:4a:14:cb:b0:e5:bf:a7:8e:8b:93:4b:21:2f:85:
c2:c2:37:ad:2c:46:08:0f:39:c1:bc:67:a4:62:c7:
8f:79:48:80:b7:44:6d:5b:df:ed:80:d8:7b:89:39:
e7:bc:56:35:8f:79:45:91:f6:08:92:c1:68:ae:4b:
3b:b4:9e:ea:c0:46:7c:1b:3a:96:d7:13:73:2f:09:
82:81:1a:7b:3d:0d:b7:f8:56:5a:83:f5:6c:cb:77:
73:32:ce:cd:2e:3c:6e:3b:95:5d:e3:ef:8c:d3:9e:
bb:ac:f4:bc:73:fd:d3:25:9c:34:38:ee:a7:aa:8e:
2e:f7:b9:0b:26:20:38:df:cf:4f:ef:16:b2:b5:d2:
70:a0:c6:d4:32:47:84:95:b4:2b:39:c0:fc:d6:c3:
a7:81:22:58:e4:27:73:83:1b:18:9a:02:94:f1:37:
c7:ec:72:57:32:b4:03:da:fa:44:eb:45:6d:bf:d8:
3e:1a:e9:2b:29:62:b0:01:95:1d:8a:79:b0:5e:cb:
ab:06:a8:26:e8:a0:d5:58:99:4b:ac:5c:60:d4:dc:
d3:34:53:d3:01:78:b7:34:fc:e4:db:f3:50:d0:e8:
91:ee:9f:25:f0:17:d0:e0:9d:2d:1c:63:9c:6b:41:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:7D:2D:17:9B:FA:C3:14:B0:5E:61:36:94:9A:01:1B:10:36:AF
X509v3 Authority Key Identifier:
keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d5:ca:a6:f0:63:93:06:1b:f4:c1:ce:ab:56:30:14:3a:d4:
4f:36:05:5f:22:e5:de:5d:9f:bb:23:bc:2a:60:1d:0d:c3:af:
df:55:cc:50:a7:f7:3c:71:6b:fe:d3:0d:f8:7c:3f:35:a7:61:
c9:f9:02:d4:dc:3a:0f:3e:cc:9d:ed:24:cc:f9:93:70:71:d1:
fe:f4:84:ea:45:66:cb:3f:76:95:50:88:bd:60:90:07:38:58:
59:07:36:ac:f3:77:0b:64:07:85:63:0c:1f:9c:f0:ed:75:a0:
b1:bf:3b:d9:44:37:8a:0c:77:3f:e5:60:00:de:c0:26:06:79:
74:d6:13:fb:01:8c:9f:e7:a5:44:b1:de:de:a0:c5:b3:3a:5f:
ed:c7:c1:c1:5b:ae:5c:b0:bb:29:89:69:e4:7d:27:15:27:96:
1a:fd:71:dc:54:30:9a:96:63:38:bd:5d:49:74:3f:cd:05:a7:
5d:ed:b3:de:43:bc:ca:58:be:e1:d0:aa:48:e5:61:cd:86:84:
3c:18:5d:c2:d4:d0:32:98:21:74:42:87:98:28:fd:04:72:5d:
c5:92:7a:99:fa:31:da:db:c0:0d:a9:e8:00:31:c8:d5:5e:9b:
a0:0d:9b:e3:ee:58:bb:bc:59:38:b2:29:f5:84:9e:b8:57:49:
ae:77:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:17 2026 by rpki-client