Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
File: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft (raw, json)
Hash identifier: YyO1R1TptQgTssM5ZtQRcongs20FghAk0BWazvgimhk=
Subject key identifier: 64:DA:B8:D3:5E:D5:D4:04:2F:42:D1:3B:FD:A1:71:1B:23:8C:DA:AD
Authority key identifier: F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
Certificate issuer: /CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Certificate serial: 019D39E5AC1C620D64CD606653BF67EA7B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
Manifest number: 92
Signing time: Sun 29 Mar 2026 14:00:46 +0000
Manifest this update: Sun 29 Mar 2026 14:00:46 +0000
Manifest next update: Mon 30 Mar 2026 14:00:46 +0000
Files and hashes: 1: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl (hash: oq5mD5zqH8D7UHM4AgTpXuY6okKo0CAfy/jIfTKCDIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ac:1c:62:0d:64:cd:60:66:53:bf:67:ea:7b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Validity
Not Before: Mar 29 14:00:46 2026 GMT
Not After : Mar 30 14:00:46 2026 GMT
Subject: CN=64dab8d35ed5d4042f42d13bfda1711b238cdaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4c:4d:d5:e5:4e:ef:09:07:5b:c0:9f:9f:e5:
a1:db:c1:31:89:3d:bc:db:72:a6:4d:28:3a:6b:51:
d4:52:37:b8:b8:87:46:08:d2:af:aa:4a:82:d4:29:
bc:cd:e4:d6:80:9a:a8:ef:e7:e2:12:25:7f:c0:ea:
54:d2:20:b4:c3:9a:c7:2b:3e:34:4e:76:bd:db:4d:
27:27:9e:c1:c6:cf:43:ae:fa:2b:54:0b:20:ef:bc:
9c:90:d2:56:66:47:50:7b:1e:6c:df:ee:79:2e:98:
40:18:68:3b:bf:69:78:3a:aa:57:d8:95:1e:97:1f:
32:0f:1f:03:b9:77:25:ac:03:d9:8d:50:a2:09:ff:
a1:89:f9:93:c8:10:87:58:73:e5:81:21:e9:e7:93:
59:52:95:af:55:44:7b:05:77:56:4f:57:f0:a0:2f:
ba:6c:56:6e:91:4b:8a:89:49:d9:38:ad:e1:c5:f1:
ed:b6:8f:33:f0:51:fd:26:87:39:9e:e6:b7:45:e4:
c5:0d:4a:de:55:6d:70:ff:40:31:c4:42:42:08:2d:
84:d1:d7:9a:40:61:ee:bb:7c:a3:ae:7e:13:90:c5:
9a:cd:23:bb:c6:0c:3e:20:2c:f4:a2:f2:d8:f7:d5:
1b:a7:c0:1e:10:b8:cd:52:22:23:f4:89:25:b4:b0:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:B8:D3:5E:D5:D4:04:2F:42:D1:3B:FD:A1:71:1B:23:8C:DA:AD
X509v3 Authority Key Identifier:
keyid:F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:54:07:16:da:11:00:04:4e:80:91:bb:69:33:0c:a1:18:7c:
81:45:f5:b2:f2:52:46:87:01:dd:03:b7:0f:e3:48:f7:64:df:
39:4f:91:12:4b:29:f0:18:f3:2c:ce:56:7b:dd:91:a3:2a:a8:
b9:52:2f:8a:6c:89:22:a2:1a:10:ad:43:f9:5e:a9:78:1d:f8:
41:ac:26:cb:40:65:85:d9:92:a2:8d:29:a0:a6:a6:8c:68:e4:
d6:79:df:85:17:a0:65:3a:5c:1a:bf:c0:bb:68:ec:0d:1a:31:
42:a5:be:cb:65:74:54:54:26:c0:17:f3:3e:b1:48:2d:91:3d:
b6:1b:73:aa:65:79:97:68:2a:d9:9d:93:5c:8e:d8:0a:2c:af:
6c:fc:f3:3b:85:04:7a:ff:06:6f:1e:78:1f:f7:db:7c:10:3e:
7d:43:2e:99:a2:23:ae:46:48:10:81:75:6c:72:ae:42:6d:19:
2d:8d:c8:37:3c:68:d6:4b:08:59:3d:8c:d5:ba:4e:15:b3:94:
c9:76:65:95:d9:21:98:0d:26:97:02:56:77:ba:7a:04:12:c3:
f4:f0:fb:f7:d1:e3:5b:a7:2b:07:72:d8:e7:a2:a4:ac:4a:16:
52:aa:92:4d:cb:00:0a:3e:53:56:75:ec:16:af:21:59:53:b1:
4a:3a:26:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:05 2026 by rpki-client