Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json)
Hash identifier: pwiVEPPTWAddHnXGb/wDFsMwQaZOGXLyFjgKdZp7Xlo=
Subject key identifier: A6:30:77:3E:BF:96:2F:EA:0A:30:EE:7D:C5:05:EF:9B:EF:E4:50:DA
Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884
Certificate serial: 019CABD92589D46E33C01B9899023B37DD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:01:00 +0000
Manifest this update: Mon 02 Mar 2026 00:01:00 +0000
Manifest next update: Tue 03 Mar 2026 00:01:00 +0000
Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: /YSV+ipcBmgyQo4bcJv0PUfZUunT7Whsuq7Xau7Y6CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:25:89:d4:6e:33:c0:1b:98:99:02:3b:37:dd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884
Validity
Not Before: Mar 2 00:01:00 2026 GMT
Not After : Mar 3 00:01:00 2026 GMT
Subject: CN=a630773ebf962fea0a30ee7dc505ef9befe450da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:3a:b7:1c:12:3e:6b:9d:6a:50:a4:ca:9b:
ed:f2:81:d9:9e:12:53:2e:c9:b1:75:61:25:a9:dc:
6c:0c:12:93:b1:fa:bf:cc:b7:41:3d:b9:d3:ed:94:
73:8f:f2:10:db:5d:c8:87:99:60:2f:30:aa:ed:12:
62:54:6d:1f:ae:89:13:8c:7a:14:41:13:b7:77:f2:
db:9b:63:66:b1:97:ed:cf:0a:80:1e:d0:d0:1f:21:
24:bf:78:a8:1c:f7:3a:a2:bb:86:73:d8:ea:e2:4b:
c8:c9:25:8a:97:57:8b:fd:cc:46:93:ad:33:a4:81:
b5:76:29:3c:f6:ea:92:e8:6b:e8:a2:a0:d8:08:3a:
7c:45:bf:10:fe:a2:98:2d:29:b4:c2:11:cf:d1:c1:
b2:aa:58:78:49:a7:84:45:90:7a:31:b1:49:01:0d:
eb:c1:d4:f5:71:2b:12:84:7f:e9:70:7f:f9:97:19:
0b:fd:9e:bb:d5:c9:93:16:5b:8c:02:d4:db:2a:e7:
f5:89:d6:a8:01:e3:20:0a:a4:fb:bf:87:93:fe:91:
c6:6d:7c:ee:5a:2e:b7:dd:a4:47:83:29:ef:37:5a:
43:30:45:32:e1:ae:5b:eb:f8:a4:93:a9:be:46:f9:
7e:60:43:34:d5:7b:3a:1a:20:56:77:1b:0f:6e:4f:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:77:3E:BF:96:2F:EA:0A:30:EE:7D:C5:05:EF:9B:EF:E4:50:DA
X509v3 Authority Key Identifier:
keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4b:a9:e5:0a:6d:a0:4d:f5:1a:ee:dd:a3:14:6a:6f:f5:6f:
b5:ff:6c:89:b1:47:4f:29:c6:66:9d:ca:ca:b4:66:c3:13:26:
cd:0d:d5:ed:9f:67:eb:3f:53:64:83:1e:db:04:f3:14:59:6f:
d3:f0:e6:25:58:c7:2b:65:65:c2:8c:56:a0:9d:91:b7:23:d4:
80:45:1d:96:f7:fd:4c:67:2b:b6:84:79:d7:29:a9:ff:ba:ec:
b6:d9:b1:47:93:0c:6e:d7:0a:06:63:8a:2b:aa:38:b3:9b:bd:
df:f9:71:18:e3:26:4c:33:e6:34:2f:fe:61:83:90:11:70:f1:
d7:68:aa:16:11:f7:9f:ce:79:c6:17:4f:32:36:a4:48:82:91:
a6:93:81:11:54:9f:df:78:ef:85:f2:87:94:16:ba:ed:26:7a:
ff:03:6d:d8:e4:87:79:08:70:57:b5:dc:60:28:5d:7d:76:01:
ef:f9:fc:50:d7:27:e4:b5:5e:32:39:d9:23:1a:61:9f:57:af:
9d:8e:96:5a:a1:1b:75:2a:0f:1c:bb:3d:b4:b5:44:ec:cf:a7:
6f:bb:31:89:c8:a7:3d:e5:3c:94:34:48:03:bd:43:f6:f7:f4:
2f:a0:3c:af:16:61:ca:b5:ed:37:5d:49:d9:c0:d9:fb:c3:2f:
74:b3:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:35 2026 by rpki-client