Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.mft
File: rLSxpS4serd9FaY8t5ADBKS-gn4.mft (raw, json)
Hash identifier: +DN97ek+Iugeh1CD4GVEcubTOYkXzCE9O/Zc6Vakrp8=
Subject key identifier: DE:BA:37:10:11:69:32:0D:A6:9E:B9:40:33:73:87:3A:F1:72:C6:A8
Authority key identifier: AC:B4:B1:A5:2E:2C:7A:B7:7D:15:A6:3C:B7:90:03:04:A4:BE:82:7E
Certificate issuer: /CN=acb4b1a52e2c7ab77d15a63cb7900304a4be827e
Certificate serial: 019D39AECD054223594D8765CE43DED557A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLSxpS4serd9FaY8t5ADBKS-gn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.mft
Manifest number: 74
Signing time: Sun 29 Mar 2026 13:00:50 +0000
Manifest this update: Sun 29 Mar 2026 13:00:50 +0000
Manifest next update: Mon 30 Mar 2026 13:00:50 +0000
Files and hashes: 1: rLSxpS4serd9FaY8t5ADBKS-gn4.crl (hash: EHTUHZSCaku2pB75rsTkQbCoKNN3ObtlQunXks+LXLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLSxpS4serd9FaY8t5ADBKS-gn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:cd:05:42:23:59:4d:87:65:ce:43:de:d5:57:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb4b1a52e2c7ab77d15a63cb7900304a4be827e
Validity
Not Before: Mar 29 13:00:50 2026 GMT
Not After : Mar 30 13:00:50 2026 GMT
Subject: CN=deba37101169320da69eb9403373873af172c6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:99:04:c8:29:64:78:ce:8a:3a:9f:7f:28:
5d:8e:de:fb:fa:4c:b0:75:94:6a:bc:3e:75:69:6a:
f3:7a:ef:b2:39:f1:bc:f8:1d:cc:ba:e2:b3:54:c3:
2a:09:e4:00:79:e8:22:a2:66:6c:52:f0:30:f3:ca:
f7:9d:87:8b:d0:15:b8:1d:ac:62:3f:e7:92:ec:67:
fd:8b:e0:9e:e9:da:1e:9b:5d:80:e2:83:ee:2e:ab:
f2:d8:76:fe:c0:95:53:a0:b8:c9:b9:25:e7:4f:3c:
2b:2a:1c:da:36:c2:aa:a3:6d:d5:f9:26:40:a0:10:
7c:6e:eb:ac:d2:c0:18:4d:dd:f0:d8:f3:10:79:a8:
86:fb:ae:b6:fd:7f:64:3a:cc:70:5b:20:b7:c5:e5:
bc:ad:54:34:f3:52:a2:6c:a2:14:5b:67:9c:36:32:
4f:20:b7:f6:03:a2:69:1a:f1:76:b3:1a:be:3e:ea:
f6:c5:9b:b1:1a:61:7a:16:63:d8:63:fb:fc:9a:a3:
65:61:09:82:ab:66:62:a6:af:d2:97:16:0b:fe:26:
06:b1:aa:5e:0e:69:28:71:53:0b:5b:54:5a:e1:e4:
a2:e0:4e:01:da:1c:d5:f4:81:4a:0c:b1:d6:c3:66:
3a:6d:7d:e5:5c:ed:70:c6:c1:8b:0a:16:a8:51:2f:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:37:10:11:69:32:0D:A6:9E:B9:40:33:73:87:3A:F1:72:C6:A8
X509v3 Authority Key Identifier:
keyid:AC:B4:B1:A5:2E:2C:7A:B7:7D:15:A6:3C:B7:90:03:04:A4:BE:82:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLSxpS4serd9FaY8t5ADBKS-gn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b0:3d:65:d8:ae:f7:29:71:ea:81:48:5e:19:a1:fd:a8:9a:
9d:48:44:8e:01:cd:19:ef:aa:7d:a9:79:0f:2c:69:11:b5:71:
a5:93:30:b4:15:5a:c9:0d:71:8e:97:2c:3b:c0:4a:9d:fe:2c:
03:1f:0e:3c:70:4e:21:b0:c0:73:15:3c:64:7b:bc:7f:48:a8:
12:2e:fe:3c:ec:69:21:fe:76:ae:6e:eb:56:d9:c2:a0:2b:a8:
9f:ee:01:dd:c6:1c:80:f9:a2:5d:f2:d7:eb:69:23:e0:5a:52:
d2:11:b6:d2:18:11:69:8a:29:33:29:57:79:b6:03:99:ff:03:
1d:52:8f:f6:df:df:3d:e9:6e:77:b5:08:88:ff:ac:7d:f8:40:
65:f0:0e:fe:55:c6:18:b5:0a:de:b0:55:2f:9f:a5:8e:9d:d8:
81:4d:eb:cb:59:0c:c9:cc:fc:29:eb:0d:22:84:42:98:ff:2c:
4d:41:bf:8c:8a:b4:cd:32:c5:25:1b:4c:32:34:3e:1b:69:ab:
4f:80:ce:ae:1b:26:e9:09:c2:56:58:14:9c:ba:7a:88:a1:56:
3a:b0:17:56:e0:6a:0b:6a:3b:ca:5f:65:fa:70:ea:99:6f:a6:
6f:d6:bc:40:d9:18:d6:0f:8f:f6:09:ed:b6:16:f5:6e:26:20:
45:ea:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:46 2026 by rpki-client