Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
File: iqR9CPyFIT30_aLPlWG45ovCc9w.mft (raw, json)
Hash identifier: 5YkFS3vjJL0BDxKX7S+jj9+/Fk5pZ2YN9tUc4cwDCWE=
Subject key identifier: BA:7E:04:8F:3C:43:9E:16:41:23:93:3E:B7:9D:6E:DE:DB:F7:D6:AB
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 019CABA2095BFA220ED8058F74B5DB8E057B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
Manifest number: 0CD6
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: iqR9CPyFIT30_aLPlWG45ovCc9w.crl (hash: 3rYC7UA2feE2rUVtANnl9qaw3KAfBqs0oiEvggxdV4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:09:5b:fa:22:0e:d8:05:8f:74:b5:db:8e:05:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=ba7e048f3c439e164123933eb79d6ededbf7d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:ba:8e:ab:82:38:2d:78:00:04:d7:4f:e4:
78:fe:ec:32:41:b2:d5:6a:7c:fc:db:33:f2:2d:50:
8a:f4:0d:8a:75:e2:fd:8a:3f:97:e7:56:e4:b0:80:
4b:68:b1:c3:be:b1:e4:46:49:eb:d6:a8:4f:ae:6d:
e7:24:af:0c:aa:1f:a6:6a:e5:f0:79:0e:82:39:84:
62:3c:b2:63:a8:f1:e6:68:e5:3f:c2:82:5d:ac:4c:
2f:4b:7c:53:5b:93:e4:7e:c6:2d:a0:fe:6e:31:af:
f5:fa:f2:02:15:61:78:76:47:37:0c:e4:ed:34:39:
57:d7:9a:5a:86:be:d4:9c:a9:b7:75:91:0e:cd:92:
9b:8f:0a:69:53:b6:c7:aa:1f:97:2e:a6:f8:6f:b1:
ec:44:a7:07:43:c7:b1:70:b3:c3:a6:0f:05:36:e2:
d0:93:7f:b9:e9:b9:7d:5c:36:51:eb:09:26:cd:b9:
a7:09:77:91:50:00:a7:8f:db:8f:47:af:1a:20:e7:
eb:f6:55:0a:e6:96:09:f7:a8:e6:e7:c5:b2:e9:a7:
02:a0:55:38:2c:92:18:76:44:b8:23:f9:a9:98:65:
2a:07:75:2a:d1:03:3e:fe:a4:db:fe:c6:2a:b4:40:
f9:cd:07:3c:5c:7e:06:06:65:1d:28:f7:4f:dd:77:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:04:8F:3C:43:9E:16:41:23:93:3E:B7:9D:6E:DE:DB:F7:D6:AB
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:70:3d:a5:c6:7c:61:4c:61:94:cc:1c:15:40:9a:61:3f:
16:86:c0:f9:ac:4f:5f:9b:4f:f7:34:47:73:56:44:da:9d:7b:
9a:e8:49:69:ee:d5:fd:31:95:cf:19:df:0b:c8:1e:c2:60:5d:
d2:03:53:43:16:a2:26:32:0b:14:2b:8b:bc:ae:a8:e5:14:d9:
af:1c:8e:04:3b:53:9f:92:5d:30:59:ce:d9:2e:09:5f:f4:98:
10:39:e1:0a:e7:7d:c5:67:a6:54:f8:e8:9a:e9:ce:62:39:2c:
a4:12:c9:c2:36:ff:d2:8b:02:9b:c5:9e:51:eb:ee:69:12:7d:
ef:8d:c3:5e:d5:fb:ca:ff:cd:c0:c5:b1:96:c8:f1:e6:af:c9:
b8:99:0e:83:80:1f:4a:a2:72:93:c0:44:14:c9:a7:85:ad:bc:
11:81:42:5b:2f:61:91:4b:1b:e2:09:29:30:62:0b:cd:a6:36:
07:aa:b0:33:bc:2f:37:44:b3:4c:c1:c0:a6:3e:d9:52:ab:30:
38:f6:61:7b:4a:8e:d8:13:a6:ec:5c:ef:7e:18:f8:5d:3a:61:
68:3d:30:f9:88:24:59:ad:d9:11:88:08:01:89:e4:55:0a:01:
01:88:60:c6:40:e2:05:fe:34:c6:9e:b6:b8:fe:9a:9f:ed:60:
2d:2d:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:45 2026 by rpki-client