Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
File: IClZ7xuVPXmKoPVkMafxG2vhltY.mft (raw, json)
Hash identifier: L4j7KBjTOAvDwvkqa1yJ+S1GeDNbfS/W7RibyEpAzsc=
Subject key identifier: EC:4D:C3:48:15:33:C8:78:2A:6B:8D:83:6F:F9:3B:C1:0C:E2:20:C9
Authority key identifier: 20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
Certificate issuer: /CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Certificate serial: 019DA37861F7D8B642E1B331E06E1DD19089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
Manifest number: 14BF
Signing time: Sun 19 Apr 2026 02:01:08 +0000
Manifest this update: Sun 19 Apr 2026 02:01:08 +0000
Manifest next update: Mon 20 Apr 2026 02:01:08 +0000
Files and hashes: 1: IClZ7xuVPXmKoPVkMafxG2vhltY.crl (hash: FbS+f85CVfUfa/AhiNsyZd6i2sJmYZii8uLfYIduFZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:61:f7:d8:b6:42:e1:b3:31:e0:6e:1d:d1:90:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Validity
Not Before: Apr 19 02:01:08 2026 GMT
Not After : Apr 20 02:01:08 2026 GMT
Subject: CN=ec4dc3481533c8782a6b8d836ff93bc10ce220c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:8f:60:72:7d:95:cb:84:63:cc:16:96:6d:
88:81:9e:31:ea:54:ec:2d:5c:2d:76:3d:3e:bb:15:
de:99:85:2e:10:b9:b4:5b:72:5f:d4:19:c9:cb:f2:
04:9c:32:8a:8f:53:94:eb:20:b0:d5:27:65:7d:7f:
14:6c:68:0e:13:ac:6c:f2:68:e4:e7:f2:b0:36:f2:
71:ff:5f:a5:e1:cf:b0:65:b6:c0:c3:2b:d5:37:80:
34:e9:ac:56:ec:8f:54:0d:62:b2:78:25:c8:17:0e:
e6:4d:b8:4d:fd:3f:13:81:62:f7:8d:12:2c:3d:15:
97:f6:67:72:df:d1:93:f9:dd:6b:00:93:12:18:8e:
ca:e5:d2:e0:4f:d0:92:0c:37:bc:1c:e1:27:b1:bf:
d2:c8:16:17:6b:b4:ef:3c:6f:c0:44:31:34:cb:28:
61:08:b8:5b:87:03:6b:d8:3f:95:99:e4:a9:ce:b0:
fc:d8:28:8f:a4:50:3f:57:7d:27:18:3e:59:48:b5:
23:bf:46:16:7a:84:81:af:79:e5:fa:a5:bf:5f:9b:
5c:b4:81:49:20:ef:29:99:82:e6:96:fd:bd:0b:a3:
4c:7e:67:fc:d1:0a:15:73:d4:a1:0e:0b:6f:6b:26:
c4:a4:d6:d0:60:63:d9:f5:4e:aa:b0:7f:05:e8:b2:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:C3:48:15:33:C8:78:2A:6B:8D:83:6F:F9:3B:C1:0C:E2:20:C9
X509v3 Authority Key Identifier:
keyid:20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9f:1f:21:6c:98:52:94:75:6c:ad:c6:b0:c4:96:b7:a7:cc:
bb:33:49:c2:46:93:9a:d3:12:3a:83:db:46:33:e8:b9:5e:31:
df:38:ba:6c:b7:86:f7:bd:61:55:ed:4d:c5:69:eb:77:13:c9:
6d:93:83:8b:00:cb:5a:c6:66:3a:ff:82:27:26:95:98:5c:a1:
f3:6e:0f:43:64:ee:50:52:95:99:84:d9:c5:34:8b:af:19:0c:
d3:f8:5a:9e:e6:2c:91:74:c5:44:82:47:0a:98:a6:10:da:ad:
ae:c2:96:32:c1:e2:54:f9:95:bf:47:fb:bd:83:bf:00:61:3d:
30:e1:57:68:9a:ee:78:2c:8a:b9:0c:52:33:7f:5f:b5:96:70:
d6:48:08:27:1f:a3:cd:3e:3c:8d:75:15:9b:23:ff:e3:cb:71:
d1:19:b7:0d:a3:ba:43:de:04:4f:19:c3:1b:73:12:1e:2e:9c:
ad:6b:34:1c:36:48:f7:55:26:b1:46:a8:6f:7b:9b:68:0d:4f:
98:04:d2:b2:c8:e5:88:1a:9c:57:3f:8a:19:64:0e:76:e0:73:
37:8e:7f:70:93:ab:7b:0b:da:15:70:d0:5b:9b:09:bc:57:a5:
fe:2a:53:d5:62:1b:89:08:20:7e:5e:7c:d9:03:e7:7a:d5:80:
64:4d:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:01:14 2026 by rpki-client