Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
File: Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft (raw, json)
Hash identifier: yY2kXHygGlE6gUkRFJT999ADcpraMvU3CHjLz2czLIg=
Subject key identifier: 12:C5:EE:C3:5A:C1:F4:83:E7:80:61:1D:66:88:08:A8:AE:7A:74:0B
Authority key identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
Certificate issuer: /CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Certificate serial: 019D3977B6323B32F81A8B3FDABD2A944F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
Manifest number: 0218
Signing time: Sun 29 Mar 2026 12:00:39 +0000
Manifest this update: Sun 29 Mar 2026 12:00:39 +0000
Manifest next update: Mon 30 Mar 2026 12:00:39 +0000
Files and hashes: 1: Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl (hash: avnTHxjEoiziEU2SbfhySryjGthDBpnpEpwj6EGhxcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b6:32:3b:32:f8:1a:8b:3f:da:bd:2a:94:4f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Validity
Not Before: Mar 29 12:00:39 2026 GMT
Not After : Mar 30 12:00:39 2026 GMT
Subject: CN=12c5eec35ac1f483e780611d668808a8ae7a740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:8f:1b:8a:0a:bd:11:92:44:da:bb:c5:34:
7a:cf:75:16:56:5c:0f:5d:e3:43:77:02:ad:00:c0:
1c:b5:39:d9:da:f4:98:49:71:71:8a:a8:3e:69:93:
4c:fa:91:ac:af:c2:37:2d:c5:1a:12:c5:32:87:2d:
de:26:3f:c4:ac:dc:33:2a:3f:7a:93:b3:06:3f:46:
d2:6f:de:f9:b4:63:48:91:ef:d4:1d:c2:ca:10:79:
0f:f5:a9:ae:d0:bc:19:9e:c8:79:66:a4:e2:1d:91:
3a:b3:b8:b1:2c:ab:45:9d:cc:f0:41:79:e4:58:17:
0d:07:07:bc:aa:4a:5d:af:64:2b:7a:de:cd:8c:9e:
88:58:4f:e7:f6:5f:20:5d:f2:13:f3:9d:bc:21:a9:
2c:f7:a9:d9:79:6a:96:38:cd:37:e0:e8:a3:16:cd:
21:a2:01:09:3d:bc:a8:53:04:ed:7c:96:26:6d:32:
8a:eb:d6:1b:94:02:fa:be:d8:f4:84:ad:73:a6:94:
69:c5:7f:3e:9e:ca:25:3c:02:9e:29:d3:5e:57:b1:
d1:73:07:fc:4f:c1:33:00:e6:d3:f9:7a:ff:2a:bc:
0a:09:90:0c:91:cd:74:29:64:07:81:04:db:49:44:
b3:8c:82:fc:df:57:d6:32:78:fe:2a:88:7a:22:f0:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:EE:C3:5A:C1:F4:83:E7:80:61:1D:66:88:08:A8:AE:7A:74:0B
X509v3 Authority Key Identifier:
keyid:21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:86:a8:9d:b5:d6:50:51:a4:49:ca:fd:e5:3b:c9:3a:9f:66:
cd:d8:6e:b3:08:5f:0b:eb:d2:5d:15:71:68:d2:9d:e2:93:47:
1b:81:af:6d:7f:f4:03:ae:d6:6f:72:9c:8c:e5:8f:91:67:b4:
0b:86:40:9f:3d:f3:5e:ba:36:ed:fa:12:be:c1:8c:73:9b:0f:
07:db:2e:8d:eb:b1:ff:cb:ae:04:64:1a:24:b3:62:ad:a0:28:
54:ae:62:f2:f1:1e:51:65:d1:81:5a:f7:3b:9e:dc:76:23:85:
8f:2d:e6:73:72:d6:59:77:64:8c:27:5f:0e:4e:2c:ab:2c:34:
87:7f:96:4f:cc:18:02:8c:76:e7:f9:d0:f2:99:30:60:6a:cf:
11:48:9d:80:f2:d8:8e:24:40:a4:0c:bd:c1:d3:21:c6:16:d3:
6e:55:f5:db:79:92:1a:ea:48:81:ae:e7:e1:4e:65:20:bb:fc:
f7:f4:ba:a0:d7:05:20:19:7c:69:19:46:96:51:e6:f3:e5:45:
4a:6c:a9:9a:05:bf:4b:14:f7:5b:b9:1e:30:28:0b:92:b2:0a:
9c:7b:b6:e5:71:70:a9:c9:08:11:8e:27:17:a8:8b:4e:4a:ff:
0f:18:8a:db:08:a9:cf:37:2d:e5:25:0a:a1:d2:ec:a0:c3:d3:
8d:19:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:34 2026 by rpki-client