Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
File: _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json)
Hash identifier: XlizfMRXdaJYUCl9QWUXaWmQPyJ+u3++Czh3jgHeg3k=
Subject key identifier: 18:47:C9:9D:50:81:8A:22:2D:2D:50:54:EA:75:B8:18:8C:96:8E:8B
Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Certificate issuer: /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Certificate serial: 019D37F75B8321835FA67A0FF6E74848781B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: u4XEDZ5WcJYanvmDg/qJlWhl3JX6GI2VrlNK1F9lM/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5b:83:21:83:5f:a6:7a:0f:f6:e7:48:48:78:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=1847c99d50818a222d2d5054ea75b8188c968e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:c9:08:18:36:a2:e8:1e:e7:ad:7b:44:3b:
98:33:da:53:d3:6f:b9:f0:06:5d:a4:ab:8e:1d:56:
8e:76:bc:d2:3f:a0:d3:75:ed:c2:c5:15:87:fa:35:
2c:71:cd:7d:3c:2a:e6:0e:6b:e0:e2:2e:17:6b:95:
60:1b:41:fb:da:bd:2a:f2:47:f9:25:67:b8:cc:ac:
16:d8:d4:80:82:cf:35:7a:98:16:4c:05:1a:60:a4:
03:67:68:a5:3e:fc:a0:b7:31:92:b9:c0:f0:68:3f:
e3:1c:e2:a4:e4:50:19:22:39:79:4b:0a:57:00:85:
56:f6:5f:02:62:9c:73:12:3c:63:c1:2e:a4:53:21:
b2:21:08:ae:1c:ec:f2:90:56:b7:fd:cf:86:8c:d9:
9b:f0:36:2f:78:bb:3d:c8:35:33:2b:21:0f:ab:65:
3b:e5:d7:9c:c5:a6:a5:c6:65:ad:e2:30:c7:b1:84:
9d:6d:17:90:58:e2:9f:b7:9e:64:eb:04:b2:74:1e:
bf:bb:64:ef:72:5b:22:b5:3e:66:2e:ae:73:4a:7a:
c5:4c:28:b1:cc:95:71:dd:12:d5:80:a0:2c:18:53:
5f:b3:77:d1:6c:b1:22:fc:d3:a5:5a:0c:0a:2c:39:
cb:35:29:eb:f5:23:fa:11:d3:fc:c4:76:86:aa:02:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:C9:9D:50:81:8A:22:2D:2D:50:54:EA:75:B8:18:8C:96:8E:8B
X509v3 Authority Key Identifier:
keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e1:e9:ea:76:19:a1:6e:9e:79:e3:b6:2d:5e:10:31:a1:87:
53:e5:fd:3a:71:d1:1d:2e:69:39:e7:15:38:94:e8:71:0e:7d:
88:c0:f2:70:5b:0a:9c:b1:74:2c:74:25:77:a8:53:80:0a:bb:
db:c8:56:30:f1:f0:c6:07:1a:ea:7f:12:af:e2:45:6d:ae:27:
32:33:4b:b6:7e:f2:06:36:e2:d0:08:2c:06:a5:f2:37:aa:d1:
fc:2e:a3:cc:56:f6:6b:bb:ba:75:e0:58:69:be:6c:f0:ca:81:
e0:d0:a0:06:46:65:4f:37:b2:72:dc:ce:8c:d2:c1:49:eb:52:
43:76:76:f7:1a:fb:91:0c:12:d7:55:35:81:97:d5:ce:81:52:
63:99:7d:9e:89:97:69:e6:8b:18:bd:ac:87:f2:15:02:0e:09:
93:f3:85:18:cf:e9:eb:41:32:15:c6:e2:9d:41:12:d0:46:ec:
15:45:4e:3f:ac:5a:79:2e:0a:73:0e:7d:f2:d9:2a:dd:cf:5d:
66:d1:3b:9f:f5:e7:00:7f:5d:52:9a:71:27:dd:c0:3b:15:2e:
03:a6:a9:6a:f0:e9:1b:2a:6e:df:9b:21:04:ca:58:38:22:05:
0f:c5:e0:41:a7:c0:e2:00:72:a5:66:ab:f5:c8:05:88:73:75:
c7:24:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:18 2026 by rpki-client