Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
File: s1IytLD6jIPU_4wSROhk67yt1os.mft (raw, json)
Hash identifier: R4BeuT7ztNwO43KLOo66lKts1+d1RU5mNzq9Xwo2gNA=
Subject key identifier: 69:74:1C:0F:99:C4:BB:6D:2A:E1:63:15:DE:0E:51:35:45:DC:95:C7
Authority key identifier: B3:52:32:B4:B0:FA:8C:83:D4:FF:8C:12:44:E8:64:EB:BC:AD:D6:8B
Certificate issuer: /CN=b35232b4b0fa8c83d4ff8c1244e864ebbcadd68b
Certificate serial: 019D3866758A9BFC4A91C010CE0A32F02ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1IytLD6jIPU_4wSROhk67yt1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
Manifest number: 1306
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: s1IytLD6jIPU_4wSROhk67yt1os.crl (hash: qNF13IVToVaBpkGzcPcKwaE3doZZ9GzKmb7kL14KIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1IytLD6jIPU_4wSROhk67yt1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:75:8a:9b:fc:4a:91:c0:10:ce:0a:32:f0:2e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35232b4b0fa8c83d4ff8c1244e864ebbcadd68b
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=69741c0f99c4bb6d2ae16315de0e513545dc95c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:b8:f8:5c:63:bf:24:81:a0:1f:cd:b9:99:
78:05:ae:24:d5:35:55:98:72:32:10:66:39:12:55:
ee:b2:0f:9b:53:20:65:8d:06:2e:e7:18:28:82:8a:
f2:64:13:8b:a6:46:71:43:68:12:8f:64:ee:90:89:
ee:a1:02:ba:3d:cc:7d:62:65:0b:0b:02:ed:ee:fb:
00:75:4e:83:76:ea:bf:fa:1f:46:c3:29:a9:de:4e:
c5:d2:31:2a:3b:70:8b:40:1a:9c:67:c7:9e:d3:c3:
d5:cc:55:ec:40:84:84:ee:17:52:de:26:4a:8e:89:
37:69:29:fe:9b:d5:23:6d:9c:96:ba:84:0e:8d:67:
20:dd:70:43:8f:e6:62:96:57:f4:a2:2a:31:ce:b8:
d0:19:03:1b:60:19:24:5a:6d:c9:4a:d5:09:43:07:
cf:62:75:c4:91:89:53:d7:ae:bf:fe:0c:cb:31:cc:
ff:f9:3a:f2:76:07:e6:26:dd:a2:1e:68:ce:81:09:
bd:63:e5:38:66:e2:fb:f6:84:ac:b8:1b:e6:45:35:
b6:24:35:9b:88:31:c5:39:56:84:04:0f:1d:3f:c8:
33:2f:3b:db:f7:4e:14:e5:0b:fd:20:61:bd:a3:e6:
8f:45:80:9e:66:be:df:05:98:55:b6:69:f5:16:1a:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:74:1C:0F:99:C4:BB:6D:2A:E1:63:15:DE:0E:51:35:45:DC:95:C7
X509v3 Authority Key Identifier:
keyid:B3:52:32:B4:B0:FA:8C:83:D4:FF:8C:12:44:E8:64:EB:BC:AD:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1IytLD6jIPU_4wSROhk67yt1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:70:2a:62:03:8c:d8:2d:a3:cd:a5:f3:c5:07:db:29:cc:75:
eb:a0:25:95:79:40:22:ed:e6:64:4c:b7:eb:8f:24:80:99:49:
dc:23:04:e3:2a:cf:f4:b5:24:64:7a:a4:6e:2c:c0:33:49:fa:
d3:93:79:fb:5e:be:91:76:3e:ed:58:2e:58:5e:b2:8f:00:f7:
da:b2:2c:98:24:2b:3d:f7:70:eb:f0:36:98:c9:24:20:0a:1a:
6c:80:12:88:c9:bd:13:ad:51:79:92:38:f3:c7:1c:92:ba:01:
cd:14:a3:59:06:66:a4:ad:be:f6:08:c5:b8:82:b9:6f:a6:e8:
55:56:18:3f:0b:1c:23:fd:58:7b:6c:ad:03:0e:19:cc:65:fd:
e7:b1:0c:08:64:ad:06:7c:4a:f3:6b:f8:78:be:b5:07:65:67:
52:e5:a9:0d:10:36:68:b8:d4:2e:14:dc:9f:43:dd:23:5a:ac:
29:95:86:03:36:3c:39:2b:c2:d4:af:9e:d9:57:2c:96:e8:ea:
cd:24:a2:73:cf:f2:7d:65:f9:2c:9d:88:10:da:50:d4:de:36:
6f:75:ba:08:11:5b:8a:b0:ea:97:eb:41:6c:51:ad:9f:f5:bd:
62:c8:93:9d:9e:a4:35:48:1c:c7:13:55:91:00:93:cd:f0:08:
5c:62:d2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:15 2026 by rpki-client