Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: h5l0lbzGMI+24jU3VCY7OTidtfAz1DZFMlJXkv3nEio=
Subject key identifier: 4F:AF:5A:38:84:81:4A:18:07:C0:5A:42:36:A4:2F:BC:6C:6B:EA:32
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 019CAB6B814EA84298890E1081409464BB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 08F2
Signing time: Sun 01 Mar 2026 22:01:15 +0000
Manifest this update: Sun 01 Mar 2026 22:01:15 +0000
Manifest next update: Mon 02 Mar 2026 22:01:15 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: SZIEsajE5cp8s4icQc0euhQQj5NzYdvl1YNrs5d5gGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:81:4e:a8:42:98:89:0e:10:81:40:94:64:bb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Mar 1 22:01:15 2026 GMT
Not After : Mar 2 22:01:15 2026 GMT
Subject: CN=4faf5a3884814a1807c05a4236a42fbc6c6bea32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:99:7f:ff:da:d8:bc:a0:6c:aa:f9:c5:df:f2:
e2:56:83:58:0c:1a:76:49:bf:da:1e:39:36:83:3e:
05:05:fb:72:ae:b1:9d:4f:6a:34:90:68:07:9a:3e:
9b:d1:67:61:63:f4:c6:f3:33:36:23:64:68:03:9c:
41:44:c7:2d:c7:d6:7d:48:34:fc:77:a2:1b:ab:0f:
a9:1f:77:7c:e1:58:a4:1a:71:a0:91:6f:16:79:5f:
76:10:55:08:e6:1d:52:a2:14:60:37:ac:6e:9e:22:
33:4d:48:7b:b1:33:d7:b8:bd:30:32:64:a6:58:66:
76:1d:1d:92:c3:38:34:3b:87:bf:11:41:0b:38:1c:
7c:f2:ae:6b:56:82:a8:f0:99:98:a5:ce:7b:fc:7a:
a8:af:53:e3:96:d3:39:54:cd:76:07:c9:1f:57:be:
87:e1:a8:f4:c8:00:59:a2:e3:b4:11:67:cc:1c:74:
a4:8b:dc:8c:8f:44:0a:20:e0:0f:c3:fc:08:17:99:
df:09:3a:84:96:cc:45:4a:08:c9:5d:a6:19:2e:f3:
61:f4:02:7f:78:da:f7:6a:e3:ae:84:df:65:c5:c5:
c7:46:68:55:d3:dc:a2:8b:93:d7:47:8d:3e:76:08:
89:08:95:e6:98:47:41:f3:69:5f:c5:ca:8c:db:4d:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:5A:38:84:81:4A:18:07:C0:5A:42:36:A4:2F:BC:6C:6B:EA:32
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3b:4e:cb:86:75:16:f4:f9:9a:27:a7:9b:55:f9:98:c4:5e:
c7:89:f7:cf:cd:62:bd:bc:8c:95:97:cc:cc:6e:b2:43:0d:00:
f5:30:21:12:7d:57:48:d7:60:e9:03:4e:d3:1d:7e:4f:22:16:
6a:fb:56:e5:31:6f:f4:16:b7:25:26:53:b5:08:04:4f:0e:f2:
f1:f7:25:6a:05:76:c3:03:d4:7a:32:14:89:1a:39:73:c3:a8:
69:38:c7:25:eb:8c:0b:8c:36:e0:3c:c0:9e:0f:f6:1d:a6:8b:
d3:91:7c:45:bd:15:af:92:89:1f:63:cc:2d:da:2c:1b:26:12:
79:3a:b6:ea:08:df:f1:dd:9d:f8:2f:fd:97:4a:b1:39:80:40:
26:68:60:a7:60:9b:25:ff:83:ff:f4:f8:d8:1a:28:ff:1d:13:
73:53:25:a3:2d:bc:17:e3:06:f9:90:eb:b2:c3:73:7d:4d:58:
c8:4f:90:03:02:2f:bf:e2:b5:c3:f4:aa:2b:26:56:9c:b7:47:
cf:f7:52:54:7f:32:8d:26:26:26:60:e6:d0:95:81:90:17:78:
71:ca:59:b9:4a:c8:93:f7:5e:fe:2c:ea:f8:64:03:74:79:eb:
dc:ec:66:d4:01:5a:8a:fe:46:c2:bb:88:a5:4b:72:5e:0f:07:
66:64:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:13 2026 by rpki-client