Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
File: t3FF0lazJRKdNodQzr9JIhtrV8I.mft (raw, json)
Hash identifier: ZyVuexPjIlhrA3DNun5GruxjcqG1xt/MjueQQqAXYeM=
Subject key identifier: 71:5C:32:ED:E1:09:C9:62:B8:A7:21:0B:4C:FF:E0:A8:1A:10:03:E7
Authority key identifier: B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
Certificate issuer: /CN=b77145d256b325129d368750cebf49221b6b57c2
Certificate serial: 019D375277260CA1F5C668A194C873D90709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
Manifest number: 0A
Signing time: Sun 29 Mar 2026 02:00:44 +0000
Manifest this update: Sun 29 Mar 2026 02:00:44 +0000
Manifest next update: Mon 30 Mar 2026 02:00:44 +0000
Files and hashes: 1: t3FF0lazJRKdNodQzr9JIhtrV8I.crl (hash: cJgw8Edx+nYBkvKAeyTSygurnvqvLMvENKzIBeOLJBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:77:26:0c:a1:f5:c6:68:a1:94:c8:73:d9:07:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77145d256b325129d368750cebf49221b6b57c2
Validity
Not Before: Mar 29 02:00:44 2026 GMT
Not After : Mar 30 02:00:44 2026 GMT
Subject: CN=715c32ede109c962b8a7210b4cffe0a81a1003e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:f6:2a:cf:ec:f2:ab:9a:39:69:87:45:58:
af:00:59:f5:9d:7b:fc:ae:7f:84:a3:5e:01:0b:b5:
0e:5c:a6:63:4c:a6:8a:79:b9:a8:62:bf:ad:77:78:
df:de:2b:b6:f4:8f:e3:98:2f:b9:f8:ad:91:f7:cd:
ba:8e:93:86:0d:a5:c8:2a:05:7f:0b:0e:47:da:de:
3d:84:7d:8f:20:e9:dd:12:04:7d:c2:82:e4:c7:7f:
ba:17:13:5c:33:53:6e:cf:a0:20:78:e6:81:ae:03:
0d:87:83:0b:4b:9a:3f:ff:f5:cf:96:77:0d:ac:3f:
89:0b:f9:b3:78:8c:ef:5e:1e:61:d1:4a:20:da:c1:
50:c4:45:ec:19:ff:f8:f8:fa:1e:9a:d1:ba:49:75:
29:c4:de:ac:3c:9f:64:a8:da:cd:b1:05:2e:77:48:
e9:28:af:9b:1f:33:c5:5f:c1:45:70:b3:da:95:14:
2b:88:3e:b5:8e:69:03:88:3d:6f:1b:65:39:1e:e8:
9b:4f:6d:67:9e:d3:4f:99:46:c5:64:dd:0e:cc:5a:
fa:ca:d3:bd:ef:42:27:3c:6c:46:e0:1a:2f:88:d5:
d3:27:cc:e7:72:f7:2a:78:91:6a:96:6a:71:b0:09:
02:a5:72:e1:11:43:e0:e6:7d:96:1b:4c:25:06:42:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5C:32:ED:E1:09:C9:62:B8:A7:21:0B:4C:FF:E0:A8:1A:10:03:E7
X509v3 Authority Key Identifier:
keyid:B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:36:8b:3e:e1:e3:64:4d:78:98:88:43:2b:19:02:59:af:79:
bb:3c:2f:eb:ed:8a:49:f2:54:b0:1d:76:77:a3:a0:f1:30:89:
db:12:bf:9a:c5:3d:99:f1:24:3a:f2:40:c1:80:ea:ef:53:e7:
f7:46:d7:05:5f:df:1b:f5:77:46:c7:dc:bf:c6:39:f4:73:ec:
db:9c:f3:f6:e7:42:95:ef:5d:85:02:b7:bd:ae:1f:5e:58:5e:
b2:7a:c9:96:21:85:d5:a3:bb:f4:bb:9c:78:af:47:59:66:e4:
30:80:32:bf:12:6d:22:30:a5:d8:4d:c6:67:15:55:15:1e:4d:
28:ad:5d:d6:98:13:b8:6b:c1:f0:59:5d:28:8e:ff:a6:ca:6a:
70:bd:a6:b8:ea:c1:3b:bb:62:4e:3e:a4:be:3b:3e:3f:4f:7e:
cf:ba:eb:c7:26:35:81:68:60:0c:1a:30:6b:72:77:8a:c5:dd:
dc:22:c5:49:d0:18:4f:8c:5f:59:6f:85:7b:7f:00:1a:d5:99:
14:13:92:d9:7f:a0:9e:91:2e:a4:f7:29:99:9b:e3:af:06:b6:
c6:e4:41:d7:53:0a:ae:dc:a2:3d:b2:f1:43:4b:8b:4b:3f:13:
e7:ba:ae:6a:1c:a5:c9:a7:bd:2f:c5:ad:90:f6:c8:35:d1:25:
78:00:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:52 2026 by rpki-client