Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: Q/w80v+nUg+BsUe0MX9kV/cvx9UqXas9qJkdr8akQIw=
Subject key identifier: CE:F3:0E:49:DF:86:AE:7B:69:C1:F2:13:EB:03:DD:49:20:62:90:A6
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 019D3865A9325674F9E00510E9FC5201328A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: 23WMuYnfDoehWlunBEeA2d34PcXwcA2B03C1b683w6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a9:32:56:74:f9:e0:05:10:e9:fc:52:01:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=cef30e49df86ae7b69c1f213eb03dd49206290a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:8d:de:bd:ea:1c:b8:aa:f8:f7:be:51:2b:
26:c8:4f:e3:91:75:d9:fb:bd:85:bf:04:e4:bf:38:
96:19:4a:8c:84:58:ea:f3:20:f2:c5:a6:86:12:3c:
7f:bc:35:92:0c:fe:c4:8a:80:f3:2e:02:99:06:97:
10:88:ee:03:55:2a:04:2f:63:cd:76:52:df:e7:f6:
fb:6c:e9:df:f1:e1:f2:24:52:82:21:f8:62:e2:7d:
7c:05:ef:a3:03:ed:e1:9d:ff:44:19:0b:59:ee:0b:
1c:28:7c:08:2a:cc:59:60:2b:1a:92:a5:96:81:b2:
cc:cf:d6:e0:a5:c8:4f:bf:3b:4e:f7:1c:ce:89:20:
f1:87:be:ea:cd:4b:55:3c:4a:09:17:12:1e:98:8d:
c8:08:80:1e:3c:5e:b7:d2:93:71:ba:2e:e4:e3:42:
88:11:f4:10:06:e6:23:e3:eb:b9:27:b8:ca:e1:da:
77:de:c6:45:ee:6b:ba:bc:c0:74:5b:87:c4:fe:94:
2e:1f:3d:56:c1:92:68:0e:ae:b6:b7:22:2a:69:df:
d3:a4:3d:0e:a7:ef:ea:f9:20:e6:a0:df:61:34:79:
2f:52:c4:89:1c:26:03:65:a4:8c:87:9c:d1:de:a9:
a4:b2:a0:1d:de:da:33:6c:b1:73:0d:d4:a7:2f:83:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:0E:49:DF:86:AE:7B:69:C1:F2:13:EB:03:DD:49:20:62:90:A6
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5b:4d:17:81:c6:85:6e:3e:44:ed:bc:ba:a4:89:d4:af:a3:
88:cc:58:92:c4:b9:c2:c2:7a:9c:c3:f2:76:69:51:41:26:4f:
e2:23:27:25:50:d8:66:26:01:f0:45:9b:ff:c2:fe:00:82:5d:
e9:57:bd:27:96:70:08:4e:7d:1b:ee:12:52:47:f8:51:04:b1:
10:42:9b:d1:7c:01:bf:2f:2c:78:76:bf:09:78:3f:aa:23:bd:
63:73:fa:42:2a:36:a1:fa:e5:15:66:b0:f9:95:92:6e:27:49:
ae:ae:44:c0:2a:a0:df:32:b2:7d:98:c3:de:91:a1:b1:e7:72:
4b:0b:25:2a:e7:d7:cf:e7:e6:6c:cd:51:8b:b0:28:83:29:b1:
91:21:04:37:5c:d2:8a:1e:32:71:9b:7a:89:47:c4:78:bc:39:
43:ff:9c:e3:b0:c8:cf:11:d4:c3:66:71:50:df:6f:ff:19:04:
62:a8:cd:5b:b8:21:80:13:8e:42:95:cb:99:b2:31:36:91:3f:
79:11:04:32:57:19:a9:c1:97:41:b3:72:92:a3:b2:d3:82:28:
0c:63:00:e7:af:86:62:ed:22:42:95:9b:e4:71:c9:7b:dd:46:
60:3a:b9:53:ba:e1:7b:89:a5:92:39:37:b2:1a:09:6a:02:c7:
fe:1f:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:08 2026 by rpki-client