Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
File: IaqfF_jMpH37krSQLSwrMgPb7aY.mft (raw, json)
Hash identifier: Pr/hpzoz3ZPvEH4/gKPWBjsfGUUyZ6gzlwVU1/+IC6A=
Subject key identifier: 42:C4:BE:42:12:43:38:CF:C4:4C:9A:E0:60:ED:88:40:F6:4B:4E:A6
Authority key identifier: 21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
Certificate issuer: /CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Certificate serial: 019CAD594FA5E38E1CA1649EF49AE17926AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
Manifest number: 08E3
Signing time: Mon 02 Mar 2026 07:00:37 +0000
Manifest this update: Mon 02 Mar 2026 07:00:37 +0000
Manifest next update: Tue 03 Mar 2026 07:00:37 +0000
Files and hashes: 1: IaqfF_jMpH37krSQLSwrMgPb7aY.crl (hash: RZqyDRMJNhB+4/WH3ew7jWI59EVH7v7n5xjG1vqiW1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:4f:a5:e3:8e:1c:a1:64:9e:f4:9a:e1:79:26:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Validity
Not Before: Mar 2 07:00:37 2026 GMT
Not After : Mar 3 07:00:37 2026 GMT
Subject: CN=42c4be42124338cfc44c9ae060ed8840f64b4ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:05:a7:ed:28:c2:fa:33:6b:9e:9a:c8:04:
37:ee:3c:87:ae:b5:17:d8:f1:b9:62:30:32:9d:13:
1f:d7:45:e4:1a:03:1f:b5:77:6c:5a:31:ab:46:51:
b4:91:5d:70:6c:43:87:ea:6c:21:64:dc:d1:d8:dc:
fc:dc:5c:a3:33:ee:41:1d:bd:36:6f:ca:b7:c0:56:
83:d3:f4:6e:e7:d6:1b:e3:bf:ae:a9:3e:e1:df:40:
f0:55:25:81:ea:fe:0a:48:d8:43:ee:da:0b:74:d6:
40:e2:eb:7a:d4:e7:a3:13:4a:c9:d6:8a:ea:dd:98:
96:f3:0c:3f:f2:ae:56:9f:c2:a3:e5:46:62:21:d7:
a1:ff:2d:e0:27:1f:38:1c:8c:93:82:c1:7a:f1:af:
77:1b:51:32:cb:dc:29:08:fa:84:29:17:05:dd:23:
8a:e6:7d:82:eb:b9:28:dd:db:70:cf:4b:28:59:a8:
8d:b8:b8:0c:c7:1a:84:e2:fe:18:14:43:e6:09:80:
35:00:30:4e:89:4a:f3:7c:2d:fd:00:9e:33:54:d9:
09:bc:ed:89:63:16:a3:8f:ec:90:3f:ee:ac:4f:5d:
9f:64:ed:2d:05:8d:b8:64:fd:e7:3d:1f:ce:f4:c4:
8d:28:70:a9:57:f4:cb:35:9d:be:c1:27:92:28:d5:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C4:BE:42:12:43:38:CF:C4:4C:9A:E0:60:ED:88:40:F6:4B:4E:A6
X509v3 Authority Key Identifier:
keyid:21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b2:07:d6:e7:90:5c:92:4a:2d:a4:99:af:9d:92:d9:fc:ad:
99:86:cf:68:dc:1e:2e:6b:45:e8:29:f2:08:5d:c9:60:b2:81:
ef:a9:27:80:58:51:ab:27:e8:b8:39:0e:85:18:85:dd:a2:59:
17:ac:91:59:bd:28:51:d2:e8:83:86:5a:0c:14:bd:d1:2f:63:
0e:48:87:0c:67:1e:b0:9e:55:e7:24:70:73:6f:88:d9:2d:85:
97:9b:59:71:fc:00:f2:73:2b:d6:13:48:67:3c:18:c4:e7:3e:
8a:8d:89:0f:14:08:ff:f0:30:7b:ef:31:c0:2e:93:b9:ef:6a:
8a:f3:4f:55:7a:45:a1:fa:08:c4:fb:a5:c7:67:37:e0:ce:fd:
29:c7:df:3c:02:69:93:5f:2e:b1:c0:61:31:e7:4c:f7:1c:86:
65:9d:51:98:e5:86:6a:fe:2e:22:b2:e1:f0:57:55:97:87:20:
0d:b3:71:63:6f:1c:90:e2:b2:6f:71:8d:53:9e:3b:56:54:f0:
d8:69:65:58:54:57:1f:e3:a5:cb:f7:1e:5c:61:7c:02:4d:51:
f5:63:6c:53:cb:b6:c7:d3:90:4a:a9:27:65:ff:14:b4:b7:ad:
a3:1d:f9:fe:f1:d8:93:b5:a1:eb:9e:d5:9f:93:43:d6:7e:ba:
99:e6:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:16 2026 by rpki-client