Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
File: Iu8SfmGVSrmJNlydukuMBkzu2fA.mft (raw, json)
Hash identifier: scsETrLbk9YamO4mNrHtNB7DxrrGB0atFWpgvIaeo7E=
Subject key identifier: 89:0C:29:4B:8A:93:8F:D3:60:6B:D8:BB:36:3A:A3:0D:D5:9D:C6:A1
Authority key identifier: 22:EF:12:7E:61:95:4A:B9:89:36:5C:9D:BA:4B:8C:06:4C:EE:D9:F0
Certificate issuer: /CN=22ef127e61954ab989365c9dba4b8c064ceed9f0
Certificate serial: 019CACB53DB5097892063B033578DAA69CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
Manifest number: 069E
Signing time: Mon 02 Mar 2026 04:01:24 +0000
Manifest this update: Mon 02 Mar 2026 04:01:24 +0000
Manifest next update: Tue 03 Mar 2026 04:01:24 +0000
Files and hashes: 1: Iu8SfmGVSrmJNlydukuMBkzu2fA.crl (hash: LQEUsJi1e1pJWca055Lp9WRO8jJLCgTtatUbgvurJOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:3d:b5:09:78:92:06:3b:03:35:78:da:a6:9c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ef127e61954ab989365c9dba4b8c064ceed9f0
Validity
Not Before: Mar 2 04:01:24 2026 GMT
Not After : Mar 3 04:01:24 2026 GMT
Subject: CN=890c294b8a938fd3606bd8bb363aa30dd59dc6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:b3:b7:f8:28:1e:03:b3:e6:b3:b6:31:0e:
2f:93:3e:9c:06:bf:28:15:1e:c5:49:89:3a:db:c5:
9c:68:68:c6:5b:6c:ca:c2:4c:7c:44:27:ad:7e:1c:
d5:6c:bd:a3:da:a1:c6:4e:0c:45:7d:bf:16:37:d5:
3b:40:f0:26:62:e5:1b:43:31:14:a7:20:74:4a:4b:
05:d2:0b:c4:e3:65:6a:78:48:a5:df:97:f9:d0:c3:
57:27:cf:5d:2e:69:b5:ee:ea:b7:0a:97:a6:e8:0c:
36:a4:9f:6e:a6:01:30:c6:33:f9:96:49:1e:5b:b9:
a0:d9:2b:d3:4e:f1:ff:5b:c5:2c:8e:50:ae:07:bc:
0e:07:32:a1:07:54:8d:72:79:9b:e1:34:37:05:c6:
b7:13:40:0c:3b:0c:1b:e0:85:6b:98:78:bd:46:75:
f0:45:af:c0:04:00:99:a6:eb:81:61:0a:07:8e:dd:
48:c6:aa:df:b8:55:e8:59:18:71:d9:80:2e:f9:f6:
05:c1:14:0c:c0:a7:c9:4f:e4:2b:99:29:ba:01:99:
65:85:ef:fa:b9:66:97:e7:1a:12:15:fa:4b:f3:81:
f7:1c:91:01:4d:87:5f:2c:ba:52:51:b8:0e:4f:f3:
c7:06:c4:1c:0a:96:a3:71:18:67:a2:1c:34:79:9b:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:29:4B:8A:93:8F:D3:60:6B:D8:BB:36:3A:A3:0D:D5:9D:C6:A1
X509v3 Authority Key Identifier:
keyid:22:EF:12:7E:61:95:4A:B9:89:36:5C:9D:BA:4B:8C:06:4C:EE:D9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu8SfmGVSrmJNlydukuMBkzu2fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/839828-ce59-4d22-a621-8c6aa10695b2/1/Iu8SfmGVSrmJNlydukuMBkzu2fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f1:ff:20:20:87:16:b3:88:ef:0a:e6:b4:cf:7c:db:da:17:
6c:75:8d:6d:1c:ab:34:e4:2d:54:84:7b:a5:f4:8a:5f:91:02:
bd:e4:cd:dc:96:5f:c4:66:fe:e8:50:05:61:9b:21:f6:15:d7:
9d:61:74:ba:76:65:0c:9e:7a:c7:ba:ec:88:20:b6:0f:2c:17:
7d:d9:f7:58:3c:b6:cd:10:73:9b:26:ad:d6:a7:79:75:ed:f8:
f9:53:56:02:11:8a:a6:da:f5:56:ad:ce:08:12:7e:ab:e4:b7:
61:d9:35:90:bb:2b:c1:1f:55:95:64:f2:8e:c7:77:07:73:b3:
ae:dc:8f:4f:a6:01:d0:04:b8:e3:9c:8e:d9:bd:af:32:9b:e7:
79:fc:fa:fe:ef:06:5f:ff:ab:e8:16:27:bf:db:0f:97:8d:40:
e2:d7:39:d5:8c:67:65:25:2b:2b:1b:92:71:e5:b0:2b:39:cb:
dd:e5:5b:40:d5:2a:74:54:c6:34:62:e8:f3:10:e1:30:4c:9d:
f2:c8:8a:0a:ab:10:b0:39:81:a9:8c:54:8b:9e:9b:a5:73:07:
df:aa:3c:d5:c4:e6:ce:6b:51:37:5b:95:e7:be:ae:26:72:7b:
32:48:75:82:d9:08:10:84:2b:c9:13:ec:ad:0b:f3:64:8d:0d:
8a:41:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:37 2026 by rpki-client