Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json)
Hash identifier: FmQxDbMku9MhucdhPdRXlFkni+cdhNDpfcpPWDPqq6s=
Subject key identifier: F9:12:78:28:75:8A:D9:72:87:22:66:7E:95:D5:99:A5:02:BD:A7:1B
Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
Certificate issuer: /CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Certificate serial: 019D9AE2A603A7F420AD2E27D27637D7A0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
Manifest number: 0F3B
Signing time: Fri 17 Apr 2026 10:00:37 +0000
Manifest this update: Fri 17 Apr 2026 10:00:37 +0000
Manifest next update: Sat 18 Apr 2026 10:00:37 +0000
Files and hashes: 1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: 7L0KOZyhCVJ0m9lXtU4jCsTj+obXFadyeG/pU8w0gcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a6:03:a7:f4:20:ad:2e:27:d2:76:37:d7:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Validity
Not Before: Apr 17 10:00:37 2026 GMT
Not After : Apr 18 10:00:37 2026 GMT
Subject: CN=f9127828758ad9728722667e95d599a502bda71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:2d:ec:6f:91:53:b5:36:7f:a9:1e:e2:9a:
fc:10:31:f7:6f:7f:f5:99:28:c9:97:55:3d:01:8c:
8d:fe:0d:ef:14:51:4c:d7:44:d4:d9:3d:c0:f1:a1:
c8:0f:af:10:6d:b4:91:4a:7d:01:17:bb:55:e1:11:
e6:a1:93:25:35:4c:29:9b:7c:0d:79:64:d4:d1:a6:
6e:de:38:58:5f:db:be:7c:0a:71:a4:d4:9f:de:de:
76:ee:37:62:82:43:e5:5d:fe:05:91:52:eb:d6:e6:
c6:ce:83:a4:98:bd:b2:bc:3a:38:a0:a6:42:30:ff:
07:25:1b:87:f9:13:94:5f:bd:08:7f:be:01:3c:20:
aa:26:1d:b2:05:45:08:0a:1f:7f:f4:0f:d5:25:f0:
ba:a7:dd:6d:17:e4:8b:4e:50:71:82:70:d5:0b:d4:
11:4c:00:eb:77:e8:80:84:46:fe:b4:45:df:c9:42:
61:53:8b:6b:c3:62:63:a7:61:f4:3d:4e:ac:4e:e8:
28:db:c1:54:5c:26:4f:49:63:0c:ad:b8:d4:2b:b2:
c6:30:e9:3e:2b:1d:6b:8f:da:57:a4:f7:6e:21:b0:
fb:c2:60:6c:b9:4d:e5:6e:54:61:27:57:54:e1:d3:
23:ce:55:b1:16:a8:0a:80:e7:43:53:64:1f:bb:f3:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:78:28:75:8A:D9:72:87:22:66:7E:95:D5:99:A5:02:BD:A7:1B
X509v3 Authority Key Identifier:
keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2b:9d:d5:63:d1:d1:bc:1f:53:2a:5b:9b:c3:57:09:1b:ad:
59:62:25:18:41:91:85:07:e8:66:0e:32:7f:a3:68:52:da:e3:
31:53:85:40:cd:22:e7:8a:ee:f5:46:99:b4:a3:b6:30:fd:31:
0d:72:c4:06:c4:3a:ce:74:8c:8c:47:e4:82:44:17:fb:6a:7f:
4e:13:9c:78:5b:21:ca:b6:76:a4:68:5b:33:16:ae:de:5d:18:
3f:06:d7:62:d2:1c:ee:9f:84:cd:f8:69:03:c9:37:8f:b3:93:
97:b0:ed:ac:0d:d8:bc:50:3b:00:64:fc:b1:41:94:58:d0:55:
a0:c7:55:91:04:c9:83:48:90:2b:89:6a:e4:69:4e:b2:9a:5f:
c1:88:65:03:7b:76:11:63:79:f3:5d:ab:ba:3a:46:36:ed:d8:
2c:d7:eb:23:30:e4:2e:23:78:32:21:76:56:3b:02:f3:a9:fd:
a1:fa:b0:2a:f5:02:23:09:c9:13:ee:fa:f9:6d:b2:8b:3e:4f:
f1:06:90:2e:20:36:c1:39:8d:b5:ef:76:98:92:d9:d1:ea:f1:
d3:cd:a9:21:6b:ef:00:cb:89:29:74:3e:e0:6e:12:93:0e:4e:
0a:f0:76:0f:bf:0d:58:62:de:df:8c:3a:98:a8:ee:f1:c6:2b:
d3:bb:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:27 2026 by rpki-client