Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: mYgy1B6KqMofLn8tUC7+oDSHOU8rYOhz2m8gplzLrlA=
Subject key identifier: 8B:9F:1B:1F:AF:BF:0C:DA:94:82:1E:DA:CE:19:6B:95:08:04:7B:5F
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 019D38660E455AAE13734D1639BFD36DD956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: eyHlPyOzU7fKkw1+DGTVI8GOMqehFN3MaMl7LNgzGTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0e:45:5a:ae:13:73:4d:16:39:bf:d3:6d:d9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=8b9f1b1fafbf0cda94821edace196b9508047b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:8d:a6:4b:d0:3a:1b:f4:f8:29:4b:d2:ef:
84:fa:88:05:99:a2:c0:34:10:1b:4c:27:f7:c5:81:
9b:2b:2b:ef:c3:f3:c4:b1:3f:0b:0e:33:be:e5:7c:
e3:ec:70:8c:68:2d:44:73:da:e4:dd:b5:d8:af:85:
b3:b7:cd:a5:dd:6a:50:40:c9:36:2f:80:c8:2a:3c:
ee:80:84:7e:84:25:a1:3c:80:23:72:fc:5e:79:cd:
64:72:e4:2c:f8:98:ca:90:89:7c:a8:37:73:5b:fe:
1f:ee:16:d1:1e:9e:8a:d2:56:d6:20:2b:98:f7:34:
64:37:cd:55:be:86:12:8f:ab:66:06:c8:91:64:fd:
e2:af:2f:af:9a:5a:41:23:17:92:00:4c:52:fa:1b:
b8:43:da:90:8c:ad:cc:4b:cc:ec:77:b1:f9:c7:fa:
9e:fa:b4:bb:07:be:95:1d:5c:62:f9:20:58:6b:e6:
43:88:07:57:a5:e0:ac:81:eb:83:d6:32:45:00:38:
a8:ca:ea:a8:8e:e1:67:27:97:c4:db:72:81:18:3e:
1a:bf:8d:12:81:ce:dc:1f:57:79:f0:04:b7:4b:93:
b6:3d:5a:41:61:26:b0:55:c0:30:47:62:7e:3f:d3:
e4:41:85:05:12:8e:a9:66:e9:dd:9e:b3:62:e4:55:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:1B:1F:AF:BF:0C:DA:94:82:1E:DA:CE:19:6B:95:08:04:7B:5F
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:49:5d:d1:62:53:c8:89:eb:32:c5:49:db:94:ba:cf:39:
7b:5b:65:49:69:69:ea:25:3c:81:af:7e:3c:21:e7:19:a9:f0:
72:5d:81:41:bc:7a:85:e9:c6:bc:d4:46:4e:89:68:b9:d5:f4:
20:ac:b9:2f:ba:42:8f:bd:27:55:7b:ed:49:06:49:32:d3:25:
c1:28:fc:42:bb:dc:06:ae:24:e3:6b:98:1f:c2:e8:f4:a5:fd:
5d:ff:68:e8:09:43:27:b9:6b:82:b6:a9:e5:ac:9b:20:73:34:
2f:78:32:85:11:59:19:a4:26:93:b8:e8:9f:bf:a3:ef:8d:0b:
4f:ee:d0:47:70:93:20:6e:fa:23:2d:88:57:65:1f:8f:8d:53:
93:17:83:a3:fd:74:d0:66:04:20:8e:bc:63:1a:3d:74:1a:7b:
1e:4c:e4:36:0d:1d:f0:29:68:f7:6f:4f:bb:ee:ac:9e:9e:60:
71:98:fe:5b:84:b0:84:9f:ac:f3:f8:98:d3:c7:73:bf:26:c0:
ff:c9:e6:2a:94:c6:83:8b:46:dc:18:79:47:21:eb:5d:d3:9e:
9d:bc:a6:04:04:37:7b:b6:15:95:0c:75:7b:80:18:17:a1:95:
50:c2:20:32:5c:30:9b:7e:fb:7c:bf:ce:be:bc:b4:1e:b9:9e:
78:75:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:13 2026 by rpki-client