Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier: uC6vAa6cHgz2sD7zM+J3sN6DAQ0pqrbKxEK+408pZVE=
Subject key identifier: 7E:C4:13:CE:18:A4:B5:3F:95:4C:54:67:E3:84:7D:2D:41:7F:A6:8F
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial: 019CAE35AB0ECE55C9D0F34760C2152330FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number: 123D
Signing time: Mon 02 Mar 2026 11:01:18 +0000
Manifest this update: Mon 02 Mar 2026 11:01:18 +0000
Manifest next update: Tue 03 Mar 2026 11:01:18 +0000
Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: s2sEa2oHflB3CgTa8pkdp8wTTd11VMQ1DFICdw+oUtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ab:0e:ce:55:c9:d0:f3:47:60:c2:15:23:30:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
Validity
Not Before: Mar 2 11:01:18 2026 GMT
Not After : Mar 3 11:01:18 2026 GMT
Subject: CN=7ec413ce18a4b53f954c5467e3847d2d417fa68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:52:23:43:20:2f:eb:88:57:16:4c:9f:a5:
bd:ea:8a:29:6f:af:eb:4e:a0:fc:c9:da:b2:f1:4f:
8b:77:ca:10:20:b7:3f:d3:61:55:5d:f9:dd:b7:e5:
ef:38:db:3f:78:cb:54:ea:6b:a7:83:0d:73:02:86:
e5:e2:5c:c9:3d:a5:70:41:c2:f7:cc:2e:09:15:32:
d2:3d:c8:80:56:da:86:85:3f:45:68:2a:4c:2e:52:
e0:76:cd:0e:0c:00:e9:39:92:b4:c8:5e:73:bb:a5:
91:94:4c:e4:7d:75:4e:8a:d5:91:cb:6e:e5:a5:55:
17:48:40:a0:5f:41:4e:6d:90:93:e7:9a:7f:ea:c9:
5d:dc:d6:c8:72:2c:4a:94:c5:aa:5c:23:64:18:f2:
95:05:82:03:20:b1:7c:dd:0f:3c:64:88:31:08:d5:
c3:4c:ef:08:56:04:20:0b:fb:d0:14:9f:6e:c9:9c:
a3:b9:33:1a:dc:77:dd:66:fd:47:51:7e:31:24:32:
94:8b:5c:22:03:dd:82:6b:bb:1b:81:a0:8e:07:e9:
70:09:ea:3b:e4:c2:a6:75:d8:e8:91:80:ac:91:e6:
8e:93:e3:19:89:06:63:f3:eb:9a:c1:e9:d6:da:15:
7b:a3:f1:5a:b3:ad:a7:99:14:b4:93:09:25:33:55:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:13:CE:18:A4:B5:3F:95:4C:54:67:E3:84:7D:2D:41:7F:A6:8F
X509v3 Authority Key Identifier:
keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:37:19:d9:c2:02:1a:1c:8d:cb:83:c9:02:12:fa:de:8c:60:
77:a9:46:5a:66:c0:ff:e7:9d:66:fe:88:c6:ab:b1:d3:f7:9b:
9f:73:a1:cb:61:c7:aa:18:7a:31:73:bf:55:aa:31:94:58:29:
2c:99:07:13:2b:b0:3e:fa:0e:71:c8:88:20:b9:fd:56:db:83:
94:e6:a6:4f:9d:94:e7:91:19:24:81:bc:a6:a4:62:34:2e:0f:
de:de:1c:ae:b9:cc:92:3d:d0:db:c8:66:48:02:f2:06:1b:cb:
3b:85:01:be:af:c5:5d:62:5b:9b:fb:45:44:fa:27:ca:1f:7b:
cf:26:d1:d9:3c:09:d8:a5:12:f2:fd:bd:9b:33:6f:2b:eb:64:
ee:c2:5c:d7:ee:25:5b:27:5b:c9:6d:a4:61:6f:96:93:b8:b9:
22:aa:66:8c:90:4b:b0:9d:87:5f:e2:db:0d:04:80:e8:d2:20:
cc:bf:79:90:db:bb:f0:e6:ab:95:5e:7d:2e:4e:d8:27:24:f1:
5d:ea:12:ca:f7:69:13:30:c7:95:a3:17:44:75:67:34:1b:d6:
92:04:55:3c:3b:d0:ef:b5:03:3c:56:00:4c:49:ec:e8:89:69:
5e:50:9f:78:19:3b:58:a7:07:a5:f7:63:37:a4:26:aa:d0:8d:
6f:e6:7a:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNasOzlXJ0PNHYMIVIzD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzlmMjQ5NTE5YjFmZjQ3OTM1MGYzMTcyNTRmNDA1ZThi
ZmNhYmQwHhcNMjYwMzAyMTEwMTE4WhcNMjYwMzAzMTEwMTE4WjAzMTEwLwYDVQQD
Eyg3ZWM0MTNjZTE4YTRiNTNmOTU0YzU0NjdlMzg0N2QyZDQxN2ZhNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6xSI0MgL+uIVxZMn6W96oopb6/r
TqD8ydqy8U+Ld8oQILc/02FVXfndt+XvONs/eMtU6mungw1zAobl4lzJPaVwQcL3
zC4JFTLSPciAVtqGhT9FaCpMLlLgds0ODADpOZK0yF5zu6WRlEzkfXVOitWRy27l
pVUXSECgX0FObZCT55p/6sld3NbIcixKlMWqXCNkGPKVBYIDILF83Q88ZIgxCNXD
TO8IVgQgC/vQFJ9uyZyjuTMa3HfdZv1HUX4xJDKUi1wiA92Ca7sbgaCOB+lwCeo7
5MKmddjokYCskeaOk+MZiQZj8+uawenW2hV7o/Fas62nmRS0kwklM1WjWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7EE84YpLU/lUxUZ+OEfS1Bf6aPMB8GA1UdIwQY
MBaAFCDJ8klRmx/0eTUPMXJU9AXov8q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2Qt
MGU2YmNlZDAwNDYzLzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2QtMGU2YmNlZDAwNDYz
LzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzcZ2cIC
GhyNy4PJAhL63oxgd6lGWmbA/+edZv6Ixqux0/ebn3Ohy2HHqhh6MXO/VaoxlFgp
LJkHEyuwPvoOcciIILn9VtuDlOamT52U55EZJIG8pqRiNC4P3t4crrnMkj3Q28hm
SALyBhvLO4UBvq/FXWJbm/tFRPonyh97zybR2TwJ2KUS8v29mzNvK+tk7sJc1+4l
WydbyW2kYW+Wk7i5IqpmjJBLsJ2HX+LbDQSA6NIgzL95kNu78OarlV59Lk7YJyTx
XeoSyvdpEzDHlaMXRHVnNBvWkgRVPDvQ77UDPFYATEns6IlpXlCfeBk7WKcHpfdj
N6QmqtCNb+Z6Cg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:06 2026 by rpki-client