Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: 5OoLHOsNhV/e+QygkdpEAZog/5ZsxtnM2VL8XJ6kXog=
Subject key identifier: 8B:A1:15:0A:28:A9:00:29:4E:B5:65:80:DF:08:30:23:2F:DB:8A:B4
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 019D3A8A94B8EAFFECE11EF72B24B703FBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 180B
Signing time: Sun 29 Mar 2026 17:00:53 +0000
Manifest this update: Sun 29 Mar 2026 17:00:53 +0000
Manifest next update: Mon 30 Mar 2026 17:00:53 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: KcGLSFo/D2EdtSjJV800siJsMrzsqUyQXPrQlU0/Lwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:94:b8:ea:ff:ec:e1:1e:f7:2b:24:b7:03:fb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Mar 29 17:00:53 2026 GMT
Not After : Mar 30 17:00:53 2026 GMT
Subject: CN=8ba1150a28a900294eb56580df0830232fdb8ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:80:d9:20:a6:2e:56:43:44:cf:bf:11:ef:
36:4f:c0:1d:da:ee:07:71:df:02:82:44:a8:7f:ba:
e0:49:bc:25:5a:d2:4c:29:82:42:a3:e1:eb:91:cd:
a0:82:91:5c:fc:ca:74:9f:45:04:2e:31:aa:92:b3:
9f:42:5f:66:e5:ba:ab:c5:60:94:53:a0:dc:fb:c1:
8d:e7:1c:5a:58:ea:98:8f:39:1e:e6:6c:7f:64:fa:
d3:2c:71:b2:dc:48:ce:a8:2e:ba:1a:c0:fa:5c:60:
36:30:00:9d:28:ff:50:9c:6d:67:0d:21:d1:6c:53:
0d:e2:b3:2c:f8:22:55:51:33:b8:20:f4:bd:9c:bb:
da:96:8c:1b:3a:4a:de:57:7d:c7:49:06:ab:87:88:
6f:30:5f:7f:40:03:44:3e:d5:7e:c1:01:b8:8f:b2:
c7:57:88:25:51:3d:9f:cd:f6:8a:14:65:9e:0e:c9:
98:85:28:95:b6:ff:46:68:2f:fa:3f:0f:dc:f5:71:
10:35:66:bc:62:94:53:64:f3:54:4f:60:f0:42:34:
a3:a5:7b:1a:d8:45:b2:2b:5c:f5:07:75:ba:e0:4a:
d6:fa:95:d4:b0:9d:90:b2:4f:bd:7b:60:7e:b4:69:
71:a5:2a:cf:bc:dd:6b:0e:96:58:58:fd:70:35:62:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A1:15:0A:28:A9:00:29:4E:B5:65:80:DF:08:30:23:2F:DB:8A:B4
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7b:18:95:59:b6:be:75:43:cb:0c:be:19:33:35:b4:a1:fd:
a5:30:3d:57:45:c9:b6:ec:3e:ce:0e:ac:f2:8e:40:b0:56:25:
a1:7b:49:d0:1c:42:2d:4e:da:60:97:23:89:65:0b:5c:54:89:
b8:a6:94:3c:00:55:93:ed:ca:69:8f:97:99:e4:56:3f:50:c1:
57:8c:0b:f0:8d:f6:a5:32:4a:32:a7:ba:a8:40:dd:2a:eb:e7:
e0:b6:c0:0c:95:0f:a4:13:ac:36:f5:4f:c6:88:0f:08:8c:f1:
c3:4c:cb:5d:f6:cc:e3:d0:50:63:54:1f:35:27:f3:37:ea:d9:
17:81:e2:a0:a2:24:01:06:6a:2b:83:41:cb:83:7e:f2:af:5f:
67:df:cc:6d:f7:cf:d8:a2:73:fa:5b:a7:b4:d6:7b:67:7f:f0:
b6:53:20:76:58:5f:fd:3b:29:69:26:68:f3:84:2a:dd:f6:9d:
e0:4e:64:25:bf:75:d8:95:e8:75:6c:6b:c5:d3:3e:aa:60:94:
57:25:ac:a6:db:79:8b:53:ff:55:92:e6:57:10:47:20:1b:a7:
09:a4:c4:bb:a8:14:89:46:65:98:88:c6:ba:44:28:b6:f0:0a:
81:fe:d5:6b:ad:a4:c7:d0:7c:27:b2:ac:5b:b3:c5:58:8f:5b:
2a:16:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:34 2026 by rpki-client