Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft (raw, json)
Hash identifier: cY45yP15nqV0XTnswAH7Lk27xLcNCXahez+fKTDBjXs=
Subject key identifier: 98:1E:05:5B:3A:12:59:C4:F7:8D:A1:FB:E2:D0:0E:69:CA:E0:A1:48
Authority key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
Certificate issuer: /CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Certificate serial: 019D3865D4E742653C3A0259DC6244A1A6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl (hash: qFUhXcydeSc9ZMehu6PLGUYxXgh8anP90ZZtADEDGFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d4:e7:42:65:3c:3a:02:59:dc:62:44:a1:a6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=981e055b3a1259c4f78da1fbe2d00e69cae0a148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:65:ee:1e:b3:d5:10:c8:e6:2d:84:9e:77:
38:d6:c3:f1:7a:3a:55:d1:ab:4f:61:14:8d:4e:87:
e3:04:22:2c:05:53:3d:de:a7:0e:bb:02:8e:3d:83:
04:f1:df:96:fb:5a:22:b7:b0:ee:f9:5f:2c:f5:38:
4d:60:e1:23:99:54:99:05:6b:d8:c9:f1:d4:20:26:
7e:76:a4:04:4e:14:da:ab:8d:5c:06:0b:94:b5:12:
26:00:de:57:ef:63:78:a2:0a:25:9d:d4:31:16:df:
4b:7a:2a:3f:f7:9c:2f:73:6e:cb:de:ab:05:ec:e5:
95:7c:58:a4:fd:3f:c5:38:eb:ff:2e:c8:a1:fb:c4:
04:60:c9:53:20:c6:e8:17:35:f2:26:0e:50:fa:e4:
91:ba:26:d4:15:a3:2c:ca:9b:d2:1d:3c:01:af:e5:
55:fe:0f:8b:ac:50:3b:15:86:17:46:75:89:a8:3d:
98:1a:4b:ec:e5:e6:b2:a5:8d:13:59:78:75:45:c3:
dd:52:9d:bb:e6:37:f9:b6:5a:a9:47:10:f4:4b:b3:
12:ea:87:e1:db:21:41:63:eb:ae:bb:7e:7b:49:5f:
fa:d8:e2:98:8c:da:53:ef:35:52:01:2b:9b:e5:63:
b8:6b:62:b8:a8:5f:bd:9d:dc:84:af:42:0f:13:5e:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1E:05:5B:3A:12:59:C4:F7:8D:A1:FB:E2:D0:0E:69:CA:E0:A1:48
X509v3 Authority Key Identifier:
keyid:FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:68:b6:ef:f3:1c:af:a4:97:de:f2:cc:a8:a8:8e:17:68:b7:
6a:25:de:53:eb:95:d5:99:d1:b1:18:1b:1e:3d:38:6c:9e:4d:
55:d1:0f:04:07:4e:aa:ae:4b:ae:d9:9c:9c:98:2f:ba:70:41:
81:b1:c9:9d:b5:aa:98:10:36:a2:64:6f:55:2b:c9:4e:77:e4:
e5:b8:d9:fe:5a:af:aa:ef:91:3b:f3:a6:49:53:37:7a:6e:00:
7a:97:47:2a:42:46:25:11:ad:09:e7:a2:7b:38:13:f5:6f:48:
73:8b:e7:81:72:ca:8c:4f:97:b0:49:06:ae:51:c0:74:a5:43:
0f:3d:25:e2:3d:d1:f3:da:84:95:c9:94:2d:f5:b7:f1:d1:c8:
50:94:f6:44:25:b3:0c:71:4c:fb:c9:9d:6a:cc:10:ef:75:b9:
5c:2a:5f:d5:95:eb:8b:7c:3f:20:d0:6c:ee:cf:a9:43:fc:37:
0b:f3:4c:73:6a:5a:67:3f:54:2a:e1:17:31:b7:19:51:b8:fe:
56:f0:a9:41:0f:87:38:f2:ba:cb:4b:ce:88:95:fa:3f:b9:78:
95:25:58:9d:78:b9:0b:ad:e7:fd:e6:df:bd:0a:d7:58:4a:74:
f3:f4:a8:25:23:77:9f:2e:d6:ef:45:dc:5c:2e:fd:4b:01:c3:
49:a9:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:38 2026 by rpki-client