Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: Doe/MLsfdFH5APSjJlkZwdwxPxrdXnLavQ+m/F6UBBM=
Subject key identifier: 8A:3D:FB:9E:1B:83:0D:C7:98:AA:7C:BD:97:A5:DA:30:D2:3A:A3:65
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 019CAB6B2751E029AFFEAA75E8A91CA2616F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0B8E
Signing time: Sun 01 Mar 2026 22:00:52 +0000
Manifest this update: Sun 01 Mar 2026 22:00:52 +0000
Manifest next update: Mon 02 Mar 2026 22:00:52 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: wADFY7l4wIw26m4g4BXhKLaHl2E5AYcDW02Qz9sggFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:27:51:e0:29:af:fe:aa:75:e8:a9:1c:a2:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Mar 1 22:00:52 2026 GMT
Not After : Mar 2 22:00:52 2026 GMT
Subject: CN=8a3dfb9e1b830dc798aa7cbd97a5da30d23aa365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:cf:aa:75:78:ef:63:1b:5e:a7:01:41:1c:
b3:a8:43:35:cf:a1:ad:bd:bb:32:17:a9:4a:e7:74:
3a:63:bb:70:c2:99:62:6d:ca:54:15:e1:b2:9b:df:
7d:a2:f5:69:1c:27:6b:21:d4:51:19:60:3a:6b:0c:
3a:ee:a3:4a:45:35:ed:41:83:7b:76:f4:86:84:77:
e2:a6:30:4a:e4:73:f0:86:94:80:fb:3f:2d:04:0f:
6e:95:81:a3:8c:57:01:c7:fe:bf:53:c7:19:98:02:
a7:07:4d:11:a2:0e:b0:89:8a:d4:66:f6:63:16:57:
52:9d:c4:00:1b:e2:b1:b7:f8:18:e3:4d:89:4a:e2:
7b:03:f0:fb:5a:27:0f:d8:94:7f:75:3c:e1:e1:37:
aa:9b:07:b9:58:71:6f:10:73:eb:7f:12:2d:2d:8b:
a4:57:a5:3c:91:48:29:46:f5:d0:cb:34:6d:16:a2:
bc:3e:4a:ef:8c:08:df:2f:f0:64:6c:83:08:0a:2e:
1f:13:27:ba:e4:2b:14:33:44:47:33:be:db:7d:3f:
ea:ac:4c:cc:fe:66:83:62:11:4d:d4:d4:65:84:9c:
5d:9d:5a:a8:3f:23:e4:ba:c6:a5:d9:53:ad:db:a9:
76:b1:c5:31:6c:14:56:44:0a:2e:f3:d7:57:6d:32:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3D:FB:9E:1B:83:0D:C7:98:AA:7C:BD:97:A5:DA:30:D2:3A:A3:65
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4f:06:a8:08:d3:10:f8:4e:92:e8:8f:0b:09:6a:9b:86:f4:
5c:ca:cf:57:5a:64:b6:87:0a:81:57:4a:ff:bd:4c:e5:a0:a4:
ef:0e:17:d5:f6:8c:e3:83:40:0d:f9:0a:21:64:4c:e6:98:64:
ae:58:2c:e9:eb:4c:ed:d1:40:0c:aa:be:c6:ec:ce:26:3c:00:
97:c5:35:1b:ef:4c:16:f7:9a:39:2c:56:5b:4c:bf:fe:8b:4f:
e9:aa:ae:9f:9d:1a:02:10:c4:80:2d:ca:bd:85:a7:c5:30:4a:
98:d4:b2:82:cf:e9:00:2a:1d:64:c1:cf:65:84:e4:ac:32:39:
c1:0a:24:d5:a2:e1:c8:b6:0a:64:eb:1e:d5:57:04:eb:64:3d:
ca:47:b0:f5:e3:40:79:63:de:ab:3d:86:fd:12:3e:37:a0:76:
79:40:be:6f:af:f6:be:ca:fc:8f:46:39:bf:b4:a3:47:7c:96:
43:64:ae:9c:88:eb:c9:68:5a:b0:16:15:58:34:54:b1:d3:41:
a5:7c:d4:ee:20:e8:15:d5:8a:31:f7:b7:6e:4d:b1:d5:35:86:
1b:f8:e1:95:77:47:f8:9b:d4:b7:47:33:2a:bb:a0:ac:08:62:
e5:cf:65:46:7d:b3:c8:b8:52:6f:5e:1b:3b:77:ca:c6:c5:b9:
a1:87:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:10 2026 by rpki-client