Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: aHK+cA7SfO9DhdMZtSEApgPCotE1VkiqIQgeXf0PtAE=
Subject key identifier: F1:06:C4:EE:31:E3:59:D7:1D:D9:C1:C9:10:49:CF:90:A7:CC:1E:DA
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 019CAA21E2876FB7C627483FF550EEA0D2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 16:01:13 +0000
Manifest this update: Sun 01 Mar 2026 16:01:13 +0000
Manifest next update: Mon 02 Mar 2026 16:01:13 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: sx9jli1xcbKe/c6odS90NA0d6Zy25ILxhcRHKa+jDj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e2:87:6f:b7:c6:27:48:3f:f5:50:ee:a0:d2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Mar 1 16:01:13 2026 GMT
Not After : Mar 2 16:01:13 2026 GMT
Subject: CN=f106c4ee31e359d71dd9c1c91049cf90a7cc1eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:c5:32:0b:e7:38:47:60:3b:c5:62:4d:9a:
4f:2b:bc:f8:52:18:35:d5:10:d2:29:ef:26:7c:9a:
de:c1:fe:68:fd:09:d1:6e:51:d7:35:ab:69:15:70:
cd:69:18:16:43:b1:72:83:ce:13:23:ad:aa:06:bc:
d8:fc:50:14:b0:b1:21:9e:11:29:0d:0f:88:4a:37:
9e:ae:87:19:87:c7:bf:de:3c:b4:f1:2e:2d:43:b4:
6b:00:52:8f:e8:79:22:89:24:9c:06:84:eb:f2:d4:
d3:53:ac:cc:23:b6:42:a1:bf:59:2c:d8:50:b6:e9:
78:80:64:35:35:6c:41:e0:57:75:5d:60:a7:06:e3:
7c:17:c6:f6:16:f3:23:27:59:91:8e:c5:43:b8:ff:
8b:17:71:5d:bb:aa:bd:4e:b4:bf:d1:9f:3e:f0:6f:
9d:a5:79:ee:cd:cc:e1:5d:29:a3:f6:6c:28:30:b0:
ee:f1:db:50:30:2c:02:71:b7:b5:ea:92:f2:d1:1f:
a2:3f:23:f9:bc:b2:ca:58:ef:e2:99:1a:93:b9:bb:
5f:07:6f:8c:69:da:e7:63:47:31:c2:4f:f3:92:ed:
62:15:d8:57:46:58:da:28:7e:76:78:67:38:dd:21:
27:12:19:6e:17:0c:fd:3b:76:36:34:a6:6c:62:6f:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:06:C4:EE:31:E3:59:D7:1D:D9:C1:C9:10:49:CF:90:A7:CC:1E:DA
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8a:1a:7f:d1:a4:33:c8:3b:a5:f9:f0:10:f9:2f:61:40:c5:
e0:56:da:97:9b:ee:8a:3c:5f:d3:94:85:8e:00:57:73:fe:36:
07:10:06:48:82:b0:46:1f:35:96:18:a9:f7:55:a5:a5:80:1c:
ab:96:8f:16:6e:ec:d0:58:2c:01:c3:b3:aa:35:b7:28:dd:b8:
f0:38:b7:5e:d0:82:90:c6:1e:15:6a:d8:34:30:b6:62:cf:e4:
44:c5:58:dd:c6:93:41:59:42:8c:d0:07:91:66:12:73:be:ec:
fd:54:60:65:db:d3:c7:e2:7c:8b:b4:ed:d2:b1:20:7f:8a:21:
08:56:59:38:ce:ef:d0:65:f5:5f:f8:c6:1c:a9:02:a6:94:92:
6f:4c:16:de:19:14:6d:50:e2:70:51:bf:cc:d4:c6:16:e5:3c:
cf:0d:92:fc:9d:15:02:dd:57:39:37:9b:81:44:c1:2b:66:64:
48:b7:aa:c8:82:88:17:37:37:b6:1a:50:44:0c:41:f8:a7:24:
0b:2b:6f:a7:0a:96:3b:ef:be:da:a3:f1:ee:6b:83:c2:f6:f4:
c9:01:6d:42:82:d0:45:de:9e:43:59:8e:31:a1:90:4a:8b:f0:
af:74:87:bd:82:07:76:38:91:40:ae:39:94:94:45:4b:fc:14:
31:f1:06:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:25 2026 by rpki-client