Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: c0175kDktLFJ37OBFelTTgm06V5hJFBUN0LsUSlvIVo=
Subject key identifier: 3B:BC:88:19:43:6A:F8:C5:9C:0A:88:DC:A2:06:9F:1A:69:EA:2F:CB
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 019CABA26345D685C6F0E37873469CF59E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 1565
Signing time: Sun 01 Mar 2026 23:01:12 +0000
Manifest this update: Sun 01 Mar 2026 23:01:12 +0000
Manifest next update: Mon 02 Mar 2026 23:01:12 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: 5HMcde9T97MscNVUmQTe4nhGBoeCinqqIZtaapcdiBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:63:45:d6:85:c6:f0:e3:78:73:46:9c:f5:9e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Mar 1 23:01:12 2026 GMT
Not After : Mar 2 23:01:12 2026 GMT
Subject: CN=3bbc8819436af8c59c0a88dca2069f1a69ea2fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:92:88:94:39:68:d5:41:28:a7:30:c5:73:
0c:ec:8a:35:fb:48:8e:c5:6c:70:45:93:37:15:d7:
b0:73:a7:a4:cf:77:d2:68:62:c9:59:aa:43:c1:8c:
4a:63:6d:d8:1b:17:2e:44:5e:7f:ce:1c:b8:40:be:
c2:ce:f7:29:c8:4c:4d:28:7e:b5:29:76:f5:f8:94:
17:bf:28:2e:42:58:00:79:b3:d7:0c:59:f5:db:f0:
12:41:02:e4:ca:82:b1:fa:2d:b7:04:fe:49:57:ae:
37:98:7b:a0:6f:1c:ba:be:50:b1:4c:77:08:e4:1c:
dd:60:68:bf:c6:60:88:a9:60:77:29:60:45:a8:a0:
6b:6c:7a:26:51:58:08:00:d0:d5:a5:56:f4:26:c5:
bc:88:70:db:07:4b:41:e4:b5:44:3f:44:b0:30:0b:
8e:97:34:ee:ce:18:ec:be:7e:c1:af:1b:3c:be:72:
05:6b:98:a4:1e:5d:e7:e2:45:e9:e2:66:46:39:de:
05:b5:06:f6:67:5e:92:3b:76:4c:e3:65:10:fb:7a:
97:76:e3:55:a9:41:bc:91:60:f5:bc:11:41:d5:3b:
46:a7:b1:88:44:a9:d8:cb:53:f2:2c:43:fa:0c:32:
09:c3:12:a3:7f:92:29:91:bc:a5:14:b0:8e:85:bc:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:88:19:43:6A:F8:C5:9C:0A:88:DC:A2:06:9F:1A:69:EA:2F:CB
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f7:42:3c:0b:a0:c3:14:a6:c5:ec:73:75:25:17:72:60:39:
4e:81:99:03:52:e6:24:97:08:32:3a:e8:07:16:19:b6:d7:34:
f1:58:a1:39:fb:b3:1f:cc:49:a4:1e:13:02:58:a3:7e:3d:99:
29:30:ed:3a:76:f5:a8:3f:b0:f5:cd:78:04:12:b5:31:8f:35:
cb:48:1a:8b:fc:fd:28:10:b7:e4:33:a7:cc:c2:f8:41:9d:77:
a0:d0:41:71:47:17:c7:f7:74:d1:6b:b7:d4:75:87:3b:7b:03:
20:aa:26:12:09:b9:9b:86:42:c8:65:8a:3e:f4:e3:d0:97:35:
11:63:64:52:88:98:05:61:77:ca:e4:99:45:4d:b8:b3:2b:6a:
84:e3:4b:b1:78:f2:cd:ae:34:b0:42:07:ea:58:b6:39:e9:df:
9b:1b:2d:fc:3e:d5:c1:03:e8:b1:dd:28:4c:71:c4:9b:5c:56:
32:94:5c:00:7a:59:ca:2d:4c:22:f4:d8:9d:80:40:97:3d:7b:
0d:43:c6:f2:c2:91:13:43:aa:3b:df:01:42:d2:1e:22:84:a0:
cd:8f:5d:6c:53:c9:bb:fc:84:8b:da:29:1d:b9:79:68:9c:01:
75:b2:0a:91:f1:5a:10:c0:1c:51:80:04:b5:3d:e3:21:7e:f4:
df:a5:a6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:26 2026 by rpki-client