Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier: vDqiMh12pe1Qt9WW62eW4SPA/fP/wf29CE2LrkUMyfs=
Subject key identifier: F9:B8:39:8D:DF:20:3A:81:D6:F4:C7:90:30:FB:2E:90:54:24:8F:5C
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial: 019D386610ACE3E00FDDA4C800B0E129229C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:46 +0000
Manifest this update: Sun 29 Mar 2026 07:01:46 +0000
Manifest next update: Mon 30 Mar 2026 07:01:46 +0000
Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: q6Q3GedcNgCUQyTOcidauz8zVVPWsUlAjDnJ1kNBBaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:10:ac:e3:e0:0f:dd:a4:c8:00:b0:e1:29:22:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Validity
Not Before: Mar 29 07:01:46 2026 GMT
Not After : Mar 30 07:01:46 2026 GMT
Subject: CN=f9b8398ddf203a81d6f4c79030fb2e9054248f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:9c:e2:64:85:d3:5e:0a:eb:c1:c3:8f:ec:
27:c3:ee:13:4b:5c:fe:4f:f6:5a:c1:d3:44:aa:aa:
34:d2:45:ff:ee:49:5d:36:4a:61:27:7c:30:55:0d:
e7:2c:6d:8c:96:ca:2a:bf:f1:2b:52:c0:f1:0c:d6:
a6:9f:d5:fb:f9:db:13:c4:89:93:2c:d0:cb:02:5e:
44:1b:a5:7c:cc:4c:63:b8:06:a1:0f:03:2a:d5:f0:
89:76:2b:d3:17:5d:87:83:5c:ad:7e:bf:cf:fa:d9:
3b:97:92:ca:37:0f:2f:da:84:64:c2:91:04:45:4c:
ad:e0:a4:e5:58:60:b6:05:d4:2b:2b:38:f7:08:e3:
a4:42:e7:0a:be:84:d1:a9:4d:3c:42:7b:77:43:14:
17:3d:b1:54:06:9b:e1:32:b9:9d:f5:2f:25:6d:31:
35:c2:44:09:cc:95:c9:84:25:c8:4d:90:d7:51:1c:
7c:d8:8a:4b:6e:92:7f:e6:62:43:14:5d:f1:6d:96:
d0:b1:a0:4d:cc:6f:16:c2:b8:26:11:b8:2a:88:88:
d3:31:57:c3:0e:1c:84:c7:f9:c7:1a:6c:26:a4:d0:
e4:ea:4a:01:52:f5:43:82:7a:ee:9c:53:ac:02:8e:
fe:65:2f:71:d4:47:97:a9:40:67:96:91:af:e9:95:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B8:39:8D:DF:20:3A:81:D6:F4:C7:90:30:FB:2E:90:54:24:8F:5C
X509v3 Authority Key Identifier:
keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f6:83:5b:b3:87:a2:6e:07:9d:6e:99:97:4c:d6:ab:da:9f:
a9:4c:96:9c:f4:df:4a:e7:97:e8:63:73:24:48:14:c1:de:3d:
85:a5:27:71:d8:36:bf:72:d5:e1:43:f1:a0:7f:52:0c:bc:62:
1d:d2:f3:04:dd:d7:3d:b4:80:0f:08:a6:33:31:5f:3c:48:d9:
45:21:24:67:40:93:be:c3:88:13:a6:60:cd:82:fd:bc:78:02:
08:6a:e2:f4:00:32:41:66:2d:87:da:7f:77:fb:9f:5d:a4:86:
43:7a:86:7b:f7:89:1f:d7:63:b6:8f:cf:aa:6a:85:57:37:08:
dc:ee:9c:87:4f:bd:e7:49:7d:c9:45:f8:fc:06:72:01:47:a7:
98:63:60:48:93:12:d9:d1:f2:27:75:ca:50:68:4d:cf:2c:b6:
57:1d:87:f1:f5:e5:9c:15:63:d3:67:c2:69:7b:8b:13:fa:25:
7e:9b:b7:af:34:aa:1f:80:29:33:23:4b:09:d0:f9:f0:64:9c:
c4:bf:2b:71:2f:68:8b:b7:3c:37:6b:35:03:00:0a:67:d1:32:
a9:23:3e:41:7f:a4:49:ac:9c:34:ce:92:2b:da:89:dc:8c:6c:
0b:f5:ca:b0:64:a2:05:00:58:80:89:d8:78:35:72:d4:2e:32:
8f:93:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:38 2026 by rpki-client