Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
File: RDNmA3i76zplxtyp7Qp3b70gRhA.mft (raw, json)
Hash identifier: GQo2DSMU4sV53ZGxz4FaW443ppvHoWD53NKMwfX6OSs=
Subject key identifier: C5:6F:19:EC:39:6F:2C:6B:5F:AE:37:E3:9C:A4:B4:B5:A5:F6:7F:87
Authority key identifier: 44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
Certificate issuer: /CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Certificate serial: 019D3940C2856C5A2085A6394D2419110969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
Manifest number: 05CC
Signing time: Sun 29 Mar 2026 11:00:38 +0000
Manifest this update: Sun 29 Mar 2026 11:00:38 +0000
Manifest next update: Mon 30 Mar 2026 11:00:38 +0000
Files and hashes: 1: RDNmA3i76zplxtyp7Qp3b70gRhA.crl (hash: /jCAdbknmsg8YUXDsShKbnnnNDcABpPtbMqxue8Nfco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c2:85:6c:5a:20:85:a6:39:4d:24:19:11:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Validity
Not Before: Mar 29 11:00:38 2026 GMT
Not After : Mar 30 11:00:38 2026 GMT
Subject: CN=c56f19ec396f2c6b5fae37e39ca4b4b5a5f67f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:2a:91:f3:00:eb:a3:25:2d:08:cf:70:b4:
d3:1b:90:80:a6:9c:0f:99:60:7f:85:9b:dc:81:6f:
12:b4:58:0e:2a:0f:41:e7:d7:07:28:04:b2:5f:fa:
4c:e2:b4:33:e5:e4:4e:7a:f5:54:05:91:14:ac:fd:
30:79:bf:71:81:0f:90:46:13:4d:4b:0d:06:5e:8c:
7e:be:bc:de:61:bb:5e:c0:6c:f0:e3:57:86:14:97:
98:d7:ee:6d:ca:32:91:cb:88:46:13:9b:df:e4:a6:
27:fd:77:3a:49:d8:cb:77:94:4d:e0:5d:51:f3:d7:
de:97:31:ee:e7:e4:42:f3:af:6a:6d:80:91:d0:48:
b6:c5:06:6a:db:43:97:21:b8:0b:0a:04:ef:9d:23:
e6:5c:f7:db:09:f9:19:c1:c7:ce:11:65:06:af:ca:
10:bf:a7:ed:d8:29:55:cb:3c:58:04:0b:e2:4b:03:
38:c4:cc:f6:0c:ea:63:9a:b5:76:51:1a:b7:1e:f1:
48:e2:84:55:ba:00:1e:23:f2:40:91:50:fb:97:fb:
3b:55:3d:c5:cb:65:34:40:f5:b3:37:78:9e:24:61:
f7:92:ba:0d:8f:59:7d:28:3f:e6:0e:40:76:83:ca:
85:b1:2b:5f:1e:da:c8:8d:64:51:0d:40:d8:56:39:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6F:19:EC:39:6F:2C:6B:5F:AE:37:E3:9C:A4:B4:B5:A5:F6:7F:87
X509v3 Authority Key Identifier:
keyid:44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7f:b8:bb:39:6e:f0:a8:a6:f5:b7:59:25:53:20:26:dc:45:
37:13:18:17:43:5e:ed:08:a6:79:67:ca:c4:72:74:57:44:f2:
6d:99:9b:60:60:20:62:1a:16:d2:ac:92:fc:df:30:31:33:bd:
10:ad:7f:95:ad:56:e3:03:be:72:8f:73:86:8c:33:49:0b:7c:
3d:c8:9f:83:1a:ce:da:70:c0:3e:b6:8d:bd:3e:62:2a:70:e1:
16:fe:8a:cb:5f:e5:32:50:3d:54:36:ab:c3:fa:d0:e2:b0:73:
99:63:38:7c:97:9b:4a:8d:47:66:21:3d:55:03:31:e6:01:70:
76:33:25:b2:4e:00:57:78:ca:ea:95:1c:07:fb:5b:98:6c:62:
22:39:c1:0d:93:dd:45:91:b8:1f:d9:80:4e:1a:24:f9:d1:6b:
d4:7c:96:80:a8:47:7e:3e:f0:83:eb:81:a7:95:e7:48:b8:9d:
04:93:ad:a4:38:18:d8:af:1b:6e:b5:f9:13:c4:33:a6:83:6b:
80:21:da:12:3b:a3:87:d8:e4:51:3c:5e:18:89:a8:b9:e1:7a:
08:71:82:01:71:4f:82:6a:f1:4b:8e:2d:23:0a:17:be:fc:37:
b8:30:29:ac:93:0f:39:3d:f4:93:d2:44:69:84:4d:2f:85:7d:
3f:87:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:09 2026 by rpki-client