Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
File: IClZ7xuVPXmKoPVkMafxG2vhltY.mft (raw, json)
Hash identifier: Qkr4nMMmc/Z4Bu55O7XRGkPlYEOqPxOsYUDjF//0P/w=
Subject key identifier: E5:97:1C:DA:C3:3A:D6:CA:59:75:C6:F5:21:1B:5F:79:E0:A7:92:01
Authority key identifier: 20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
Certificate issuer: /CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Certificate serial: 019CAA585790CB48FED91733EF7063525D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
Manifest number: 143E
Signing time: Sun 01 Mar 2026 17:00:42 +0000
Manifest this update: Sun 01 Mar 2026 17:00:42 +0000
Manifest next update: Mon 02 Mar 2026 17:00:42 +0000
Files and hashes: 1: IClZ7xuVPXmKoPVkMafxG2vhltY.crl (hash: md/7x4zoKdyJB6Mp87pbaLAxYR/OW7CC9i7jq2aNrHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:57:90:cb:48:fe:d9:17:33:ef:70:63:52:5d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Validity
Not Before: Mar 1 17:00:42 2026 GMT
Not After : Mar 2 17:00:42 2026 GMT
Subject: CN=e5971cdac33ad6ca5975c6f5211b5f79e0a79201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:6a:40:5b:d9:b7:17:d5:99:55:5b:27:3b:
77:e0:e5:05:05:ed:40:d2:35:d0:e8:54:5f:5c:7c:
58:54:3a:50:94:80:08:ae:f3:9a:0b:b5:c0:fe:89:
1d:d5:0d:d7:8d:59:84:b4:f7:99:c2:2d:5e:2e:25:
8a:44:91:43:5f:5c:f1:ad:e5:7e:46:02:e3:8a:ea:
3d:0f:7a:47:fa:16:02:83:8f:6a:93:47:35:c3:d9:
28:fb:56:7c:3d:6f:36:f0:a3:eb:d3:43:e5:e1:f9:
d2:66:5f:e1:62:7c:16:b3:21:42:79:e8:bb:f8:68:
82:68:53:80:ed:0b:c9:74:7e:d8:ab:c0:d5:bf:71:
92:18:f0:91:33:5d:ef:5f:05:72:ee:42:0e:18:7e:
47:8f:9a:e7:87:e2:0c:9b:53:b0:9c:b7:5b:92:db:
9b:15:fc:3c:4d:64:e2:37:3c:3d:8e:79:b3:c2:64:
44:2b:7e:1e:65:3d:65:08:1d:38:39:96:59:3b:80:
67:c2:a5:aa:7a:c4:9e:6b:9a:2d:9f:2b:95:ba:e4:
19:26:ed:91:96:5d:9b:7c:5b:f4:ad:06:47:b0:66:
26:77:af:dd:a8:d2:52:b5:6a:22:39:06:9c:a6:cb:
f6:9a:cc:e0:27:f2:d9:65:e2:bf:6a:a1:d3:57:66:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:97:1C:DA:C3:3A:D6:CA:59:75:C6:F5:21:1B:5F:79:E0:A7:92:01
X509v3 Authority Key Identifier:
keyid:20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7b:4d:de:4e:20:46:69:96:94:1c:93:32:78:72:6f:fa:e0:
4c:29:8e:4b:31:ec:c6:c1:1c:64:97:01:21:c2:f4:67:8a:e5:
0f:2e:38:f2:02:74:61:19:6f:a2:a1:2d:0f:0e:04:6b:20:95:
61:7a:bb:9a:c3:fb:e1:e7:37:01:67:bd:06:ac:e0:f9:ba:46:
fe:79:e8:60:e8:37:76:bb:33:40:27:f4:d5:1e:4a:54:77:5b:
9b:c8:4e:9f:80:3a:17:e0:95:48:cc:88:65:b6:9c:85:42:b9:
ab:b8:2a:d6:6b:46:0a:03:df:a3:ce:b9:4b:7e:12:ca:9e:72:
86:0e:41:6f:c9:19:24:81:b9:64:3c:9a:1a:3e:59:b5:25:49:
43:97:29:23:e6:f5:10:a3:02:b0:a0:e1:ab:97:5d:e0:47:93:
14:e7:c9:fc:85:d0:c6:bb:76:97:e5:bf:19:9c:c4:aa:1b:07:
1b:65:98:a9:e3:6d:48:be:88:19:58:4b:35:14:6f:3d:47:89:
f7:1a:c8:c9:c1:8e:da:ec:36:bc:2c:1d:81:bf:d9:4f:b2:ab:
bc:cf:ca:a9:73:b6:42:60:d6:eb:62:8f:2a:b5:a1:b5:10:ea:
91:7c:7c:36:03:84:56:9e:e3:67:40:1f:28:07:fa:ee:5a:47:
87:bc:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:20 2026 by rpki-client