Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File: t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier: T7pJVt7KE/HcVb7dxxbmBbf0ylkXHgzfYCSDHPoUTLs=
Subject key identifier: 04:80:50:F7:81:C6:3D:27:2D:B7:F3:E8:C5:50:BC:02:E4:4D:8F:DE
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer: /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial: 019D389C0333B63E42DBA969056B82157A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number: 0844
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: dx/BQO+ysONz4VVzYJ4A0qPVAvN0s48dzSS2kqWo++4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:03:33:b6:3e:42:db:a9:69:05:6b:82:15:7a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=048050f781c63d272db7f3e8c550bc02e44d8fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:ea:1c:a9:56:20:bb:41:ff:d3:1d:09:a7:
54:a3:c1:5c:08:de:ee:c4:4a:88:5c:44:87:6b:e3:
f9:36:74:cf:5b:5f:df:1a:2e:23:5a:f5:54:6a:3c:
a7:0b:20:59:78:c6:8b:25:d9:54:17:89:f1:69:ac:
be:1c:7d:83:8c:c8:fe:6f:d5:12:2e:7e:f4:31:fe:
7f:36:b0:0f:2b:dd:da:87:6d:48:6e:63:57:76:7b:
c0:07:d7:de:45:be:0f:ef:83:18:ad:b6:0c:45:6f:
a2:83:07:2b:75:89:9b:46:45:8e:b6:4e:2f:7b:41:
44:07:d6:11:86:3f:40:32:87:68:77:bf:b3:b8:20:
7e:e7:56:c3:df:0b:11:c7:57:7a:9e:d0:ad:e0:a1:
e2:52:a0:56:7c:c0:17:55:98:4f:57:18:5a:d9:72:
26:a9:2a:2c:83:76:76:72:67:a1:3d:00:f5:77:8a:
27:80:f3:17:ef:eb:c1:07:fa:01:dc:81:9a:fc:d9:
6a:04:ad:24:48:8c:c5:f2:14:a7:0d:eb:3a:c9:90:
97:f6:42:cd:be:4d:e1:d5:e1:24:6b:03:52:5e:3c:
8e:1b:93:2f:b2:c2:4c:b5:5d:27:ba:45:5e:33:25:
2f:c1:2f:cc:30:d1:0a:ea:b8:99:97:2d:f2:b7:7c:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:80:50:F7:81:C6:3D:27:2D:B7:F3:E8:C5:50:BC:02:E4:4D:8F:DE
X509v3 Authority Key Identifier:
keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:da:2c:18:7d:95:61:bd:e1:01:78:e7:24:8c:f3:dc:c7:d1:
cf:d3:58:0b:10:e6:4a:34:ea:e0:26:02:90:30:04:aa:4b:9a:
cb:5c:67:c0:69:b6:19:55:79:6d:44:fe:d8:ce:14:12:b5:8b:
3a:bc:c6:21:42:6d:0a:e5:80:14:22:59:8e:6d:82:da:26:be:
e2:ac:2c:48:81:3d:5f:7a:5f:22:c2:62:ad:2a:74:6f:28:7e:
d6:68:1e:ef:9a:c5:6e:59:bb:df:a9:75:56:12:19:79:35:47:
3f:36:d5:8d:ce:de:1a:73:22:33:c2:75:0a:d7:3d:e5:4b:56:
88:cf:37:76:aa:d3:c8:3f:cb:ba:6e:60:98:eb:59:34:56:06:
83:7f:1b:d5:ed:fa:0a:29:5f:5c:3e:ce:6d:12:90:d9:ee:8f:
4b:76:9a:37:f4:f2:f6:05:96:c0:11:9d:93:a9:77:f7:3c:31:
4b:22:06:06:b3:55:f6:42:09:37:2e:74:91:5b:6b:ce:b8:f2:
c0:c1:d1:5b:06:34:13:3c:af:25:3d:00:4f:78:1f:4d:f6:94:
b9:57:b5:9e:85:8a:73:9a:c8:1a:de:da:96:3c:52:57:83:e6:
b2:56:a9:e9:8e:f1:19:e4:d1:76:61:f9:db:9a:12:e7:a3:a4:
79:ac:00:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:46 2026 by rpki-client