Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: QWmS7w0dRHZik216a2501MsHqcKeGc1lvV0Bs7tKROQ=
Subject key identifier: 8C:CD:29:42:35:31:86:58:57:B1:72:EB:C0:74:ED:BD:1F:CE:B2:8A
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 019CAD59C67158A75779A6A94D19F1D7385A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 0883
Signing time: Mon 02 Mar 2026 07:01:07 +0000
Manifest this update: Mon 02 Mar 2026 07:01:07 +0000
Manifest next update: Tue 03 Mar 2026 07:01:07 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: 6LIc26wcbx6XZELymFUHfJpSk8b/IXKObWItU28ia0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c6:71:58:a7:57:79:a6:a9:4d:19:f1:d7:38:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Mar 2 07:01:07 2026 GMT
Not After : Mar 3 07:01:07 2026 GMT
Subject: CN=8ccd29423531865857b172ebc074edbd1fceb28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:7c:14:0e:ff:af:e3:05:8b:56:2b:1c:80:
be:19:24:22:ff:5e:bf:5b:87:af:7b:35:6c:48:e1:
fb:94:da:40:cf:49:ed:c8:ff:45:24:dc:66:3c:7a:
72:39:c6:c9:6b:9b:49:a3:e8:99:7e:6c:4c:d8:8c:
1f:ee:86:b6:0e:71:22:39:07:57:ef:a3:b6:e8:01:
8c:03:c5:75:1c:27:07:a1:3c:97:e7:58:80:19:62:
33:13:ee:57:3a:43:81:06:72:d1:ca:9b:8d:63:14:
54:7d:8e:cc:e7:96:0f:19:00:8f:fb:0c:7a:2c:87:
11:a8:4d:71:29:1e:74:7d:16:cd:75:f1:22:5e:99:
bb:95:b0:a5:09:f0:4d:34:7e:00:f1:db:6e:66:fa:
ca:fe:f4:ef:e4:c0:77:03:31:7f:ad:a4:60:cd:c7:
97:9c:54:37:33:ab:67:56:0a:0d:71:ac:33:c8:66:
56:5e:3a:42:bc:70:b4:c6:df:bb:82:8f:b5:99:dd:
9e:7c:42:d8:c5:e9:b0:9e:2a:4e:c8:48:2e:37:f2:
ee:f1:d1:6d:2c:ca:b6:45:76:35:a8:3a:6e:f8:fc:
f2:82:36:fa:71:be:12:07:f4:fa:5c:f7:5b:be:35:
1a:de:9c:85:79:86:de:3d:d0:88:46:ae:52:e2:13:
94:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CD:29:42:35:31:86:58:57:B1:72:EB:C0:74:ED:BD:1F:CE:B2:8A
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:0d:0f:5f:48:ca:3e:f1:e2:92:6e:8e:a3:3a:a6:0b:51:
a2:50:49:a4:eb:b8:59:42:ba:6c:66:fa:8f:ef:47:f5:8b:ea:
b0:80:5e:11:91:6c:9d:1f:35:df:69:b7:a0:fa:91:57:03:00:
ab:05:09:25:0b:9b:7b:e5:38:c2:52:89:ff:58:b1:7e:44:3a:
f0:39:3b:20:b1:15:f1:ec:fa:be:1a:57:e2:bd:c1:dd:98:59:
44:c6:81:9a:15:67:3c:a0:68:2b:9d:96:ec:30:62:5e:12:e4:
f4:1f:8f:b3:d4:5e:81:47:02:b9:26:5d:01:b6:15:f7:84:11:
a1:87:a1:5a:1c:54:25:ed:ae:3a:f8:f2:15:49:ca:02:50:a7:
c2:46:b8:00:4d:c2:f0:9d:29:62:b5:63:79:47:23:a5:08:da:
bd:80:81:5d:74:7e:97:5f:1b:85:44:c0:85:0f:61:4d:d2:0d:
66:38:a0:00:9f:f7:3f:3d:4b:08:9a:43:f0:cb:17:5b:37:73:
cd:6c:3a:96:a3:96:87:7e:32:d3:f2:54:83:0c:d2:8d:35:90:
91:72:40:bb:ee:54:f0:1b:6d:e2:4e:cf:73:15:6d:56:d8:3f:
42:be:e1:d2:83:61:36:c1:42:0a:96:94:fe:f9:37:75:f1:59:
c4:4e:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:25 2026 by rpki-client