Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
File: IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json)
Hash identifier: dK/+9W7HuKZ9qQekUeeBu7DZxH4a5NhzhM0jeQtmHtk=
Subject key identifier: 99:02:0B:E6:7A:16:EF:51:EE:6C:29:B1:CC:DD:FA:4F:4E:23:D8:B5
Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
Certificate issuer: /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Certificate serial: 019CAB6B4A5D8A91149374C96D7698967249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
Manifest number: 146A
Signing time: Sun 01 Mar 2026 22:01:01 +0000
Manifest this update: Sun 01 Mar 2026 22:01:01 +0000
Manifest next update: Mon 02 Mar 2026 22:01:01 +0000
Files and hashes: 1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: /8Nay3CXKBHduVntOivkRJNMmuJCBGzESabqn3SjJZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4a:5d:8a:91:14:93:74:c9:6d:76:98:96:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Validity
Not Before: Mar 1 22:01:01 2026 GMT
Not After : Mar 2 22:01:01 2026 GMT
Subject: CN=99020be67a16ef51ee6c29b1ccddfa4f4e23d8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:e7:c9:fe:df:64:d2:2d:9f:8b:75:fa:95:
03:f3:7b:7d:b7:51:fc:7c:e7:15:5f:21:18:46:5b:
b9:72:f6:75:5d:d8:68:6e:69:08:84:ff:fe:69:4b:
0c:0d:fd:fe:76:ac:e6:9a:fa:47:d0:7b:0a:79:6c:
90:df:7b:8b:e5:3c:92:3c:fd:16:cf:dc:9d:15:9e:
0e:14:3f:35:fe:be:0f:cf:07:bb:0a:72:9e:74:92:
ee:bf:1e:09:b6:c8:da:51:f3:2f:b0:3d:4a:f6:a4:
7c:cf:d6:6b:43:f8:6e:24:ac:1b:b4:a4:37:ca:a5:
82:92:fa:18:33:98:64:0d:9d:1f:bf:51:7b:92:b7:
ec:c8:4a:5e:0f:ce:69:dc:56:7c:cc:c7:83:7a:fc:
33:76:dc:75:19:10:d4:32:cc:0d:08:16:e6:80:30:
b3:d7:7f:0e:59:71:d7:81:1a:f1:ae:56:7a:e4:34:
36:14:71:8c:75:11:0e:80:5c:3c:b2:9f:c6:16:e9:
86:5d:58:e5:9f:96:24:4c:e6:01:88:88:f5:15:24:
6b:ed:6c:71:eb:7c:7b:a1:ba:cc:e6:68:23:22:09:
c0:cb:7f:b8:f4:c5:b9:41:58:54:aa:2a:91:59:81:
04:13:cd:19:f7:7a:13:3a:75:fd:6b:a7:cb:95:97:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:0B:E6:7A:16:EF:51:EE:6C:29:B1:CC:DD:FA:4F:4E:23:D8:B5
X509v3 Authority Key Identifier:
keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:67:d9:ef:e0:3b:17:c5:34:3f:d3:d5:5f:a9:fc:6f:52:f5:
cf:92:7c:b0:0c:62:b3:c5:da:56:8e:79:8a:59:03:f0:93:22:
0d:0f:ae:df:fd:ca:49:77:db:7e:66:d4:da:37:ea:75:9a:89:
45:c0:32:20:47:54:71:8d:60:4e:3a:03:fa:51:8c:83:ad:31:
9a:df:e5:89:b2:f5:6b:08:b4:b9:af:11:bf:34:ff:47:ad:0d:
c3:fb:7d:79:81:41:49:c1:33:91:9b:a5:02:06:0a:9d:26:c9:
27:06:af:3f:08:32:66:d7:42:f0:41:b8:2e:82:05:f9:6a:9b:
6e:20:1e:34:19:6f:2f:ab:34:e3:94:d2:02:38:8f:70:70:31:
c2:50:d9:22:97:00:c4:48:c3:12:11:7b:5f:e1:31:a5:0e:d1:
ef:7b:21:ac:74:12:08:ee:d4:b2:73:2b:4e:71:6f:90:3d:c3:
12:c9:06:30:1b:85:32:cb:5d:35:fc:42:ec:83:83:4d:4a:29:
20:6e:5f:18:0c:4f:69:f6:6b:2f:c2:dc:fe:f0:f5:d9:c8:ef:
75:c8:e9:04:1c:56:c7:b9:08:1a:bf:47:76:cf:df:0c:75:27:
2f:e6:e0:fb:f4:0c:81:2b:ac:64:f8:32:bb:b8:b8:ac:65:47:
a2:9e:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:49 2026 by rpki-client