Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: MKAdfRQJYZTgHD7sCu2nLG2x6EyiZEg4EG/CJHMMdBg=
Subject key identifier: 5B:FF:B7:67:E5:DF:88:9C:6E:3B:A0:23:11:BC:CB:42:30:00:3D:7E
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 019D3941358C7118D213FD1B058E03057426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 099E
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: p+9Ah/ADtoK+l6xlMGk84Ib1ZaNgNwHgl4K77YzIYeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:35:8c:71:18:d2:13:fd:1b:05:8e:03:05:74:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=5bffb767e5df889c6e3ba02311bccb4230003d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:5e:4f:46:94:50:17:0d:63:72:82:dc:96:
a4:12:b2:44:5d:ba:7b:c1:be:8e:0f:4c:0b:92:70:
75:ac:b7:22:d4:5f:8f:7f:b9:c1:7d:bb:f2:d8:d0:
ef:77:54:1f:4e:c2:8f:19:f4:ab:8e:9c:ae:53:90:
ad:91:4c:4d:61:50:f3:64:50:0c:13:b0:f5:49:a1:
05:95:c1:6f:fd:9a:32:c8:36:a4:1c:1a:96:e8:4a:
41:9a:b3:f0:54:ff:98:27:16:6b:e1:49:ed:e7:1c:
f2:57:6c:16:0e:a9:f2:49:2a:57:a2:90:75:9a:6c:
ec:d1:08:0d:bd:ff:21:19:34:75:7d:c8:25:6b:2d:
d1:fe:62:ae:67:31:f1:ac:25:ae:4c:45:0c:93:8e:
de:47:08:83:2b:e3:8e:04:8d:41:36:de:6a:5b:58:
ef:5b:e2:9a:f0:e7:93:18:1e:27:b1:99:30:b2:92:
82:2e:77:2e:50:94:f4:7e:14:72:b2:c0:60:02:d6:
a6:31:4f:b7:d2:69:fd:03:78:34:1d:e4:26:b1:e8:
0c:c9:f5:e7:f5:5d:86:8e:8b:f7:70:c5:2b:72:da:
07:bb:f5:7c:1e:5c:b2:09:c7:3a:33:03:ed:73:5b:
8a:82:02:07:ca:df:a5:46:7c:5a:6b:a9:93:19:80:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:B7:67:E5:DF:88:9C:6E:3B:A0:23:11:BC:CB:42:30:00:3D:7E
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f2:1b:05:51:1e:2e:88:46:a7:a0:28:1c:11:37:00:6a:34:
1c:af:d3:a1:13:a9:74:24:55:62:b3:39:b8:01:18:dd:d0:37:
2b:44:50:5e:f7:38:cc:71:f7:49:24:81:86:de:c3:59:1a:ca:
b1:82:89:98:a2:60:ac:bf:e8:d6:49:bb:92:94:30:07:ff:ef:
78:75:d6:9b:24:f3:8f:12:0e:28:51:5a:63:91:0b:40:b3:e9:
37:de:17:e0:45:f6:c5:ce:88:a8:fc:e0:bd:56:3b:9e:4d:8d:
4b:1e:c2:fe:42:6a:26:94:2c:a7:0f:4f:db:0f:96:00:9b:2e:
8c:6e:4d:dc:cb:0f:bf:88:3a:dc:70:aa:f2:5f:b2:8b:6c:49:
44:63:85:2a:fa:03:e3:77:18:70:6d:1a:2f:e9:d8:4a:9a:db:
be:d8:35:9c:01:ca:f8:55:5a:63:56:a0:c8:38:f5:e1:46:a2:
ab:35:bd:89:38:8b:e6:83:78:3b:7c:5b:9b:a8:2f:7a:2d:41:
60:3c:e2:8d:3b:3b:27:e2:21:e3:8d:70:cd:c9:29:27:e3:2a:
31:af:95:68:3e:2a:8b:63:fb:d1:a9:0f:81:de:88:f0:9e:ca:
c8:21:15:bc:20:b5:69:8c:a2:b2:88:5e:2b:1b:dd:f8:d8:70:
0f:95:36:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:15 2026 by rpki-client