Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: lnM6PRu4wWpEiZ8pTdWVT1Rph2K9/kNgd2RNbFIvIKs=
Subject key identifier: 3A:B7:88:C3:2C:BE:50:D4:4D:B8:4B:89:32:D1:7E:18:D4:F9:29:1F
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 019D9AE2CA9F2CF6F9999CE05E93E579E9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 08FE
Signing time: Fri 17 Apr 2026 10:00:47 +0000
Manifest this update: Fri 17 Apr 2026 10:00:47 +0000
Manifest next update: Sat 18 Apr 2026 10:00:47 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: Y3v1cs1o/fnvRLhKoFxOSkVRCtf63x8pzIyqCQA2rEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:ca:9f:2c:f6:f9:99:9c:e0:5e:93:e5:79:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Apr 17 10:00:47 2026 GMT
Not After : Apr 18 10:00:47 2026 GMT
Subject: CN=3ab788c32cbe50d44db84b8932d17e18d4f9291f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:c0:21:a3:9b:58:8e:d9:a8:15:73:53:1b:
6d:42:3b:dc:72:0b:bc:f2:4f:e1:47:f1:b8:46:30:
e3:11:a9:53:1b:0f:ae:8e:89:30:85:95:5f:39:01:
ca:fa:5f:44:06:11:f8:fc:33:90:c7:8d:5a:11:4f:
60:44:0e:18:50:2b:a5:50:0d:7c:1d:bf:19:79:34:
48:77:a7:ce:5d:c1:12:41:28:3a:60:b4:8d:c0:73:
21:fa:b0:9b:45:67:58:49:f6:52:6f:20:e7:14:e7:
1d:fc:46:5a:4b:d8:6c:a6:7a:a0:d2:4a:f3:62:3d:
13:45:c0:c6:0c:83:ba:b4:dd:e8:3d:bf:fe:e3:50:
db:55:08:4f:ce:e8:15:eb:3d:2c:b3:6c:7b:dc:63:
e0:6a:b0:16:fd:da:84:43:c2:94:ac:f4:bb:e7:8c:
c4:5c:e1:ed:48:75:3d:e6:b4:3d:ff:65:c4:6b:4a:
ed:41:5d:f4:a1:1c:a8:5e:37:77:e5:74:71:6a:28:
bf:2f:fd:fd:5f:23:b4:6f:7b:36:f9:da:5d:6f:f8:
88:67:37:3e:f3:7e:64:59:c3:cf:f6:c5:d3:5e:3b:
38:f5:3f:0c:4c:c8:27:f8:f3:37:07:1f:d9:56:55:
18:0b:96:4d:f9:bb:00:9f:ab:9d:c1:47:25:bd:6a:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:88:C3:2C:BE:50:D4:4D:B8:4B:89:32:D1:7E:18:D4:F9:29:1F
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:99:ca:01:f9:30:2c:2b:a2:fb:16:e7:3b:c7:4b:15:85:92:
4b:b5:f9:bd:0e:ea:a1:41:49:51:3d:b1:01:87:ce:ba:26:61:
20:55:d2:cd:a1:fe:88:2c:aa:f6:7f:da:02:d0:95:ad:69:a5:
bf:83:2e:5e:87:7b:0e:f4:d3:7c:30:23:23:4a:c1:ca:d7:73:
36:b9:b6:82:1d:67:18:bb:85:28:91:92:da:c1:24:30:54:91:
04:80:b5:8f:dd:05:c7:a2:e6:f6:35:87:af:e6:80:02:24:1a:
0d:46:7b:9b:f0:f0:54:cf:89:44:fc:29:eb:8a:ed:50:61:f0:
c4:76:5f:75:0b:ec:ef:18:a2:3d:cf:e1:19:94:8a:cd:11:1d:
f1:81:bd:53:44:8f:c9:f4:0e:ee:46:9e:fa:c4:18:9b:b5:33:
2f:08:42:0d:e8:2a:de:75:95:97:b5:bc:93:ba:30:1e:22:be:
ed:ca:f2:ea:05:2e:bd:99:d5:0c:8e:e0:b1:2e:5f:56:56:65:
cb:29:5e:cb:1f:71:55:38:eb:bf:de:0c:d8:a8:f8:e3:ba:4e:
31:5e:1b:c1:d5:b6:89:6a:7f:a0:cc:d3:ef:b9:1b:68:83:df:
bd:50:28:31:55:c8:13:a4:b6:52:77:4a:1a:76:12:63:da:db:
20:21:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:27 2026 by rpki-client