Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
File: i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json)
Hash identifier: qUGiCBKEfMiC5ISG10exRzwkgpW90fkL90qj1oCOCkg=
Subject key identifier: 02:35:DC:DA:31:AD:F5:C9:8E:51:4B:8D:F5:0B:EA:F1:27:EE:0F:58
Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
Certificate issuer: /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Certificate serial: 019CAD59E5BD2B59C130B99DFEE81D539941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
Manifest number: 06E4
Signing time: Mon 02 Mar 2026 07:01:15 +0000
Manifest this update: Mon 02 Mar 2026 07:01:15 +0000
Manifest next update: Tue 03 Mar 2026 07:01:15 +0000
Files and hashes: 1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: MUQAsFqTk3mTjueXlkVxs+STOXxbaSsql4sCTcvWuIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:e5:bd:2b:59:c1:30:b9:9d:fe:e8:1d:53:99:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Validity
Not Before: Mar 2 07:01:15 2026 GMT
Not After : Mar 3 07:01:15 2026 GMT
Subject: CN=0235dcda31adf5c98e514b8df50beaf127ee0f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:6d:e0:17:87:dd:c8:84:70:2b:7e:26:cc:
92:f2:46:76:7a:01:97:bb:9d:b3:e1:ad:3b:bf:62:
f8:32:18:00:86:94:9e:a6:e5:ef:b2:6b:bd:95:46:
39:06:e0:ba:6b:8f:c0:83:69:1b:43:e1:90:44:75:
07:8a:87:88:d8:50:de:9f:b4:3d:18:0f:b3:56:4e:
a7:de:8d:e4:b2:4c:a4:7d:f5:1d:0f:f2:83:5b:6a:
d3:57:32:35:66:a2:9b:63:11:08:92:b6:e4:31:2c:
a6:25:80:73:cf:b6:1e:43:71:de:1c:32:32:ae:f1:
e9:92:2d:12:95:8a:cd:4a:42:d6:83:34:4e:ad:4e:
39:45:ba:05:8b:a5:b4:4e:50:b6:25:bf:26:35:ae:
22:25:9d:78:07:f3:fb:c9:fb:41:27:c6:e3:e4:47:
af:04:5b:01:4c:e9:ef:8f:e7:92:44:a3:c4:91:08:
5b:b0:56:99:9b:03:09:70:ac:be:14:a0:41:7d:02:
fd:74:0e:e1:cd:0c:3a:80:7b:d3:f2:c7:43:dc:8e:
17:33:00:86:b8:d3:4d:ff:b1:20:f2:bb:58:41:9f:
0b:06:01:5e:79:1c:49:60:80:d1:e7:93:64:ae:66:
4d:dc:6d:40:75:cc:43:9f:47:be:91:fc:f4:6b:b9:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:DC:DA:31:AD:F5:C9:8E:51:4B:8D:F5:0B:EA:F1:27:EE:0F:58
X509v3 Authority Key Identifier:
keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:35:7a:98:00:b2:82:5e:09:14:bd:f5:72:2a:f5:09:e5:4d:
96:06:02:5b:4c:ad:db:b3:3a:c6:15:3c:86:9a:f0:9b:b0:58:
df:45:81:8c:b9:eb:f3:99:aa:e0:dc:4a:05:ea:a2:18:c7:a2:
3a:e4:f9:56:19:62:a1:fc:e5:22:e9:18:f1:ef:a1:f0:72:26:
84:44:15:a0:7b:e2:31:df:21:b2:c7:30:62:77:3b:fe:4c:78:
02:b8:54:02:80:9b:d1:c6:e8:cb:5f:1c:54:1b:5b:8d:18:d0:
17:90:0a:a9:34:c6:4a:35:71:b1:83:ce:eb:35:d0:b7:44:ee:
9b:1d:ae:87:8f:c5:52:01:63:ec:c7:f3:f1:7b:ff:0a:a5:06:
49:6a:ac:24:e3:08:67:6f:29:39:f6:7b:60:7b:bb:0d:5c:d9:
4d:97:82:c9:40:82:d1:63:d4:6b:bb:ad:90:3c:ab:11:c6:45:
46:62:94:10:d4:15:48:f9:28:8d:3f:03:37:b6:1d:51:0c:e2:
3f:84:66:74:d8:17:36:4d:fb:7c:6d:dc:80:4a:ae:dd:7b:7b:
e9:7e:42:c6:f2:ba:7c:cb:37:f3:95:c2:5e:c1:65:64:a8:68:
55:24:78:e1:39:ad:e9:8e:8a:ea:bf:c2:64:f4:d2:a0:2f:18:
b3:e3:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:51 2026 by rpki-client