Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier: pFpWGlRh5DAoMMN2iswnD56qZi+IFCDbrPNLibzJgj4=
Subject key identifier: 5C:21:15:9F:D4:82:26:E1:64:7B:90:94:FF:A7:97:A5:86:63:B7:F8
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial: 019D382E4626C2641D79053CA0997D017678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: hHDpfCU92PYyGrgETYVNqBIFo/uvEYgr0u5FbjN+Fl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:46:26:c2:64:1d:79:05:3c:a0:99:7d:01:76:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=5c21159fd48226e1647b9094ffa797a58663b7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:d9:d4:88:21:98:f2:f3:b6:90:37:9e:57:
40:1d:f2:d5:14:8d:a7:d7:b6:14:88:7b:53:4c:a1:
5c:4e:47:2d:65:30:7a:e7:dc:37:4f:e3:c3:f9:b5:
f2:3e:c1:aa:ea:3e:f9:a5:37:1d:66:53:10:ac:52:
d5:05:87:ca:cd:20:64:34:d6:b6:7a:ae:68:b6:ca:
54:aa:71:91:63:78:62:2e:e9:88:a7:41:1b:99:2f:
7a:74:f8:92:20:7d:e9:e8:47:a2:40:4f:08:ae:82:
0c:3b:ea:4f:81:8d:ad:c3:4f:41:42:fe:50:84:2c:
24:6b:95:14:5f:5e:15:6f:b9:35:db:b4:7f:a8:6f:
69:ca:bf:96:2a:bf:90:c4:09:78:ec:67:35:9d:7c:
68:88:bf:05:b0:2c:44:42:05:11:94:b1:ba:13:83:
b1:4b:59:31:f4:28:8c:33:1a:8a:f9:fe:85:0d:e2:
8a:d4:fb:54:3e:93:f3:96:c0:0e:7e:ce:76:ab:b0:
1d:59:92:f4:f7:33:98:2e:f0:d3:98:bd:2b:cf:99:
28:28:93:77:86:03:80:8a:d7:b9:da:97:0a:52:b5:
4c:79:eb:3a:a9:58:bf:c5:42:7e:df:0d:7b:0d:6b:
d6:43:3b:68:05:4c:8b:52:36:fd:39:39:af:b6:b0:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:21:15:9F:D4:82:26:E1:64:7B:90:94:FF:A7:97:A5:86:63:B7:F8
X509v3 Authority Key Identifier:
keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fa:6c:b3:59:ea:ac:5a:e9:53:aa:b6:ec:4b:3f:f1:ff:43:
7f:fc:27:23:f9:45:7e:2e:5c:9b:84:a3:40:1b:5e:72:f2:0e:
6f:08:eb:62:59:9c:b9:1a:4d:5d:76:bc:a3:74:5c:5b:03:2a:
6e:c6:84:33:bc:d1:bd:c6:8a:91:46:6f:b0:e0:83:3a:73:19:
b7:61:8a:e9:0c:53:d8:b1:04:8c:50:82:bf:14:4b:f3:6b:17:
7a:fe:a1:e4:5f:e4:14:23:30:8c:b1:b9:f8:54:7c:5f:20:49:
1a:26:cd:a7:86:ec:22:49:f3:2f:b3:35:ce:07:ef:44:87:31:
75:0b:4d:47:78:7d:fb:34:76:5d:c2:d5:1a:74:e5:46:72:55:
5a:16:be:92:11:83:82:ab:04:3f:2c:15:ba:37:19:e5:ab:71:
7b:fa:94:2f:d9:6a:ba:88:6d:23:b6:f2:06:67:4c:ba:7f:a2:
3c:f0:cf:18:3a:35:59:af:47:5a:4c:d9:d8:1e:5f:ae:9b:27:
7c:c6:6d:4f:a0:4a:36:af:cc:c8:b8:ed:0f:97:13:bb:c9:53:
02:6f:5d:a1:e7:e7:22:6f:d1:8b:fa:13:8a:f4:4b:02:12:c3:
22:d4:f7:92:4f:e7:e4:2e:96:b5:c7:48:66:d6:2c:c0:79:02:
ed:cd:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:56 2026 by rpki-client