Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: e2DbHfqM42RIoCNtKCnQELzit+Ur28eOpXvr6hivKMI=
Subject key identifier: 75:1D:06:3C:A9:A4:A7:1B:2D:AD:9B:67:66:E4:F5:86:4A:FF:E4:53
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 019D37C06DF5441761A7C20C451CAD4A4794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0FF1
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: RCNDa77mHlCocpAtObAan3i/RkZOjs9vNZJX6ymjEic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6d:f5:44:17:61:a7:c2:0c:45:1c:ad:4a:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=751d063ca9a4a71b2dad9b6766e4f5864affe453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:a0:11:f2:30:ba:f0:1c:7d:f7:f6:2f:8a:
cb:81:07:21:20:fb:b0:17:08:6d:12:ca:1b:fd:f8:
f9:81:e8:eb:57:8a:d7:7b:f2:79:af:97:79:2a:fb:
42:ba:61:39:2c:fa:21:68:5b:5a:d8:11:bd:90:b5:
54:17:14:ed:cb:92:27:9e:a7:b7:61:66:29:34:14:
72:e9:1b:5b:a6:ef:07:da:59:83:6d:6c:88:0e:84:
98:be:fb:ef:ca:7f:3c:5e:8b:d6:96:8a:aa:be:3c:
c2:ab:94:90:3a:3b:b0:53:a1:33:e5:63:ae:e3:ce:
68:6c:7a:27:cc:68:37:82:26:62:d7:98:b6:75:87:
6b:fc:50:28:8f:95:be:03:c1:f1:77:5a:8a:ee:5a:
ec:f5:46:e4:6c:ef:89:15:2a:a1:c0:3b:32:ed:e8:
21:69:79:9f:6d:4d:81:78:9c:4d:71:60:72:30:58:
99:11:d5:43:d2:6e:f0:64:fa:34:23:2f:0c:6e:07:
b0:58:8a:4c:f9:8e:d5:cf:5a:55:eb:89:f3:6e:c9:
70:5f:fe:f9:2b:6d:bb:ff:9d:72:91:20:92:90:9b:
2b:a8:94:38:53:6c:30:61:93:8b:25:71:43:39:c9:
7d:87:0c:7f:60:86:68:89:de:80:a2:83:53:54:1a:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1D:06:3C:A9:A4:A7:1B:2D:AD:9B:67:66:E4:F5:86:4A:FF:E4:53
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:55:da:7d:63:4e:49:cf:06:2d:cb:e8:5b:7b:d3:51:6c:fa:
8b:25:7e:75:fc:82:2c:42:40:54:26:0a:ec:cb:c8:0b:3d:ca:
01:c5:87:c3:6a:b5:3c:54:15:0f:de:5d:0f:f1:b9:18:71:14:
93:94:19:41:44:24:c8:56:d8:4a:7b:12:bf:e7:1c:e7:7d:32:
03:20:e5:e7:cb:6e:99:55:5e:93:b4:6e:df:92:24:2d:e6:d5:
ab:d6:c1:4e:d0:7f:ba:a7:8f:b6:60:a5:93:20:79:51:74:3f:
dc:75:59:ed:48:aa:05:3d:25:4e:d0:21:86:85:7a:9f:88:e1:
38:18:1d:d1:cf:da:17:39:05:4c:19:c8:55:f4:61:9d:1f:f7:
e5:86:5d:96:e3:63:95:4f:51:7e:2b:79:06:77:2b:e8:a4:c9:
32:7d:b5:3f:b7:dc:a9:30:0e:5f:cc:cd:9d:12:a7:db:82:95:
95:a7:ad:71:df:41:14:63:d6:79:e3:37:3e:ab:bc:e4:f4:de:
bc:6a:3b:98:f9:02:b0:4e:36:94:b1:b0:9c:ce:b4:27:b6:6b:
eb:e7:52:5b:1b:d0:5b:b8:d6:60:e8:99:14:ad:88:41:4b:01:
17:74:97:74:65:65:0e:e6:1e:ef:61:fd:04:aa:00:ff:6d:69:
0b:70:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:27 2026 by rpki-client