Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json)
Hash identifier: UQE3qQz4HStCnrAcKD5gMtk7N0Af4ok5bJ8W6he3M2s=
Subject key identifier: C7:0A:26:D0:7F:F8:40:CC:21:16:F6:26:AF:B5:4B:A7:4B:B6:48:81
Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
Certificate issuer: /CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Certificate serial: 019CAD59944230A2D973370B0F797812DA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
Manifest number: 0EC0
Signing time: Mon 02 Mar 2026 07:00:54 +0000
Manifest this update: Mon 02 Mar 2026 07:00:54 +0000
Manifest next update: Tue 03 Mar 2026 07:00:54 +0000
Files and hashes: 1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: eefskCPQhL16ydAWzxZzPGAWhwAfCAhUu1P7/l8hLIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:94:42:30:a2:d9:73:37:0b:0f:79:78:12:da:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Validity
Not Before: Mar 2 07:00:54 2026 GMT
Not After : Mar 3 07:00:54 2026 GMT
Subject: CN=c70a26d07ff840cc2116f626afb54ba74bb64881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:f5:6d:45:0a:df:7a:b9:32:b6:15:9f:83:
ef:33:9b:b8:5d:9c:bb:db:62:26:02:0f:10:da:cf:
56:28:80:5b:28:f4:39:8c:2f:00:5f:13:8c:24:1d:
ad:0b:71:8f:c3:89:60:54:5f:c3:af:44:e4:01:9a:
ec:41:96:f8:8d:dc:45:06:27:ef:59:5a:da:10:34:
49:69:c2:3b:b3:9c:15:1c:c1:bb:33:2b:68:58:73:
8a:29:85:7b:a1:4d:e8:54:96:94:99:75:bb:4b:ab:
8d:58:a3:44:b7:ef:85:90:b4:c3:11:71:a4:53:51:
10:38:4d:04:5c:40:97:03:d5:7f:b0:96:ba:ff:f7:
4f:32:da:d8:fc:04:3c:76:62:2d:b9:cd:24:f5:f7:
6c:0a:bc:be:0e:23:d6:36:a7:0f:93:79:2c:76:a0:
9c:44:72:6a:9a:37:ba:95:1a:82:9a:d0:d2:28:0a:
85:b3:30:2d:ab:a3:42:2c:77:f1:16:df:bc:b6:26:
7e:ff:1f:98:6f:9e:c2:94:48:d8:69:45:71:4e:bb:
d8:5b:3c:35:af:76:49:38:8e:72:99:8e:44:46:09:
48:02:c5:3b:a3:0b:a8:cd:e8:d8:4a:8d:3b:86:75:
e8:0c:66:24:86:50:58:cb:fd:64:cc:88:86:57:d2:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0A:26:D0:7F:F8:40:CC:21:16:F6:26:AF:B5:4B:A7:4B:B6:48:81
X509v3 Authority Key Identifier:
keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:29:f7:02:8b:a5:27:5a:f6:d9:42:58:a4:95:f3:ba:ea:
23:f6:3e:e9:42:62:50:6e:0f:6f:82:7c:5f:6f:9b:c9:24:12:
6a:57:4e:00:62:49:8a:88:b0:ce:a1:f9:05:a4:b4:2c:28:47:
9a:c9:2d:c6:be:58:73:dc:32:f0:ab:d4:7f:d1:7f:5b:44:af:
4d:9e:af:f6:b0:97:4e:1f:7c:75:6b:0a:8c:aa:0c:26:11:5b:
17:01:5f:9e:b2:19:ec:32:13:b7:06:d3:55:6b:3b:b7:ef:76:
d5:cb:00:38:0b:9b:3b:6e:68:21:8a:09:cd:fd:88:11:b1:5b:
0b:df:b2:92:50:eb:cd:c2:0d:d3:34:b2:b1:2e:44:67:8f:3e:
13:41:2e:49:7b:24:82:7b:17:02:ce:b0:6f:d6:6b:75:94:82:
5c:82:bd:11:17:b1:68:09:58:3e:5f:50:0d:c7:32:c0:ec:2f:
41:e3:f8:a3:bf:78:b9:1d:05:39:c6:8a:b5:0f:dc:91:a7:61:
3c:cb:e9:32:f8:2a:48:ca:73:42:21:b9:e9:38:d0:f1:c6:16:
71:ef:63:51:0d:31:25:44:5e:c5:b4:10:bf:81:53:0f:8c:8a:
3d:6d:a5:9f:5c:3d:5d:2f:31:44:d3:7d:cd:0a:39:90:5c:57:
b3:d1:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:07 2026 by rpki-client