Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier: wUyWoo8f7MY3h/Q4yI06gkRIUevjLl55sR/fUD7DFG8=
Subject key identifier: A3:B3:E9:E9:01:F7:8B:AB:82:8A:AA:7D:89:C3:79:C2:AB:08:CB:2D
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial: 019D37C03AE593AE65D66973AF20494DCEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number: 0490
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: /bHFdkAthnJQWKcoC3btW1RltiwJkz8CzSXs6B+LtxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3a:e5:93:ae:65:d6:69:73:af:20:49:4d:ce:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=a3b3e9e901f78bab828aaa7d89c379c2ab08cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:23:94:85:26:00:a7:86:0c:8e:4d:81:a5:
67:8a:50:f5:28:cf:ff:76:56:50:f5:d4:b8:fa:16:
11:81:a9:d1:fd:05:32:d2:fe:bb:2c:48:52:14:c4:
0b:4d:ad:8e:71:7f:1e:d4:e2:ef:48:4c:f2:24:50:
18:b7:b0:aa:45:62:e0:d9:91:28:8f:6b:45:b0:44:
44:72:4f:ae:6f:41:ff:ef:cf:17:c0:66:3f:95:70:
af:1b:cf:80:e1:f0:2b:39:15:aa:81:f9:99:93:cd:
3e:0f:12:d3:51:89:b2:48:79:c7:f6:a0:3f:77:a8:
5b:58:f7:21:7e:07:e4:cf:65:8d:91:e5:6f:87:7a:
f6:95:90:89:55:e1:d9:e3:2a:e0:05:f5:7e:8b:ff:
7f:05:9a:43:c5:c2:a0:8c:52:8f:4e:cd:2e:c6:9a:
0e:2f:2a:60:8f:48:5e:3a:d7:63:4a:46:0c:25:73:
d6:f8:d6:35:cb:03:e9:8b:f5:18:a1:e3:8e:d9:58:
bd:8a:1c:6b:e7:83:b3:3a:1d:cf:3e:6a:0a:66:73:
62:8b:9e:07:ff:71:ea:bd:38:77:e3:30:24:ca:c1:
36:b4:53:62:7b:e2:35:30:85:c0:e0:2d:53:61:1f:
7a:e6:a4:75:17:dc:0b:e1:a8:f8:f3:1c:2b:65:ff:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B3:E9:E9:01:F7:8B:AB:82:8A:AA:7D:89:C3:79:C2:AB:08:CB:2D
X509v3 Authority Key Identifier:
keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d1:8c:67:14:a5:a9:e1:a6:17:83:99:b9:b7:b0:5f:dd:10:
75:60:02:1b:52:af:78:f0:42:33:0b:a5:d4:b5:7b:a0:e4:bb:
63:15:77:4d:5e:a0:06:b1:bf:94:a7:ab:92:cf:29:09:18:95:
d0:e8:94:ad:c2:21:0f:11:af:1e:53:94:34:5a:89:c0:64:3c:
3b:26:94:3f:05:de:77:60:7c:49:9d:05:2d:89:3b:7f:d8:c2:
32:7a:cf:1e:de:8f:9f:d6:e6:62:9c:1f:8f:5b:f4:07:ad:86:
b0:04:65:4d:e8:37:9c:6d:5d:6b:8a:f2:c7:d5:db:83:42:4a:
3e:8f:fb:3c:12:e7:06:81:ff:dc:16:97:21:e1:59:b5:20:39:
52:82:6f:dd:ff:4e:f0:66:e6:47:a0:96:77:22:95:8a:ab:52:
e5:a9:2a:3a:2c:8d:d1:8e:9a:7c:15:4b:e1:4c:40:8e:6d:73:
ee:e6:23:17:8e:74:13:65:a0:18:21:25:d9:73:7c:e9:79:61:
5c:35:c3:5c:8b:69:77:08:b7:84:42:ff:15:82:87:66:25:17:
32:ec:77:34:41:dc:d5:43:29:de:48:9a:db:eb:79:00:96:e3:
8f:1a:05:64:ba:f1:3e:86:34:0c:e9:65:fc:e4:84:54:11:c7:
e9:01:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:42 2026 by rpki-client