Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
File: Iwz5e62CJ98tajnFT2OCEIFQ9og.mft (raw, json)
Hash identifier: IXKjFuotPOdpnyeQ2lRbllPxmh6EtT9BXbpptPtthF4=
Subject key identifier: 68:E3:B7:D7:EA:16:FD:9B:9C:73:A2:A0:8E:44:09:92:3A:D9:5D:A9
Authority key identifier: 23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
Certificate issuer: /CN=230cf97bad8227df2d6a39c54f6382108150f688
Certificate serial: 019CAB6ACC7A5766F0784AA6E8247E594EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
Manifest number: 1765
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: Iwz5e62CJ98tajnFT2OCEIFQ9og.crl (hash: IRDceLy0g8msq8CJ5YSc+qZpij+IFS+86YUuSTdtH5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cc:7a:57:66:f0:78:4a:a6:e8:24:7e:59:4e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230cf97bad8227df2d6a39c54f6382108150f688
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=68e3b7d7ea16fd9b9c73a2a08e4409923ad95da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:3f:5f:63:3b:b3:7c:ed:cd:47:5f:ea:bd:
94:48:c0:a4:5e:e0:5e:d8:85:9c:a7:14:25:60:a8:
cd:f0:4a:62:17:35:3b:e7:68:d9:44:65:01:86:34:
40:5f:f6:75:6c:a6:a2:f0:48:1b:13:d6:40:ab:62:
db:bb:0e:cf:28:24:fd:1f:46:69:ea:6d:99:4d:b9:
2d:66:c8:0b:32:dc:03:69:07:1d:e8:f2:35:86:ce:
94:49:2d:95:3e:2b:4d:27:14:a1:fd:cc:a1:e8:cf:
17:17:52:86:62:b1:6c:08:9d:8e:73:11:e2:57:17:
b8:13:b0:a7:ba:bb:a5:64:2a:87:00:92:09:12:71:
76:52:2d:03:a1:67:ac:fb:3b:b6:30:d4:19:68:a2:
d8:0a:9b:f3:b9:78:60:b0:fa:b2:b3:35:0f:af:ec:
ca:70:c8:f8:2e:65:14:8d:4a:b7:e0:85:77:a0:d8:
6b:f7:9e:05:08:92:70:2b:c3:0b:be:6d:45:38:67:
67:db:8a:c2:6e:3f:b5:2a:7c:52:f0:ad:4d:0b:27:
40:f4:cb:e4:6e:c8:9a:88:e4:e4:29:0f:23:35:bd:
34:e1:69:79:c1:e9:d7:c8:81:b2:e1:8c:e1:59:6d:
bd:cb:64:2e:ae:69:1c:90:03:34:6c:85:0e:18:93:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:B7:D7:EA:16:FD:9B:9C:73:A2:A0:8E:44:09:92:3A:D9:5D:A9
X509v3 Authority Key Identifier:
keyid:23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5d:41:3e:5c:29:2c:d7:28:fd:2c:53:83:47:6c:cc:0f:3f:
b5:5e:b3:c0:06:a0:2d:5b:cd:6f:10:27:57:8a:b5:93:3c:13:
7c:15:66:2e:1e:6b:ea:41:4e:08:31:c9:41:97:68:5f:29:ad:
11:c9:39:51:a7:04:07:fd:d2:ae:1c:33:b3:ec:66:2d:f6:d3:
29:59:f4:cc:85:b1:65:b4:de:13:95:bc:51:46:97:ca:c8:be:
5c:60:fc:ae:7d:a7:eb:bb:66:c5:f9:18:15:32:5e:75:bb:1f:
8a:2e:81:a0:53:a0:09:cc:74:d4:ce:0d:e9:d8:fd:0f:b5:d6:
20:41:79:0e:14:9b:aa:fa:39:ea:6c:83:e6:67:b5:f4:24:ee:
26:13:cf:c3:11:0f:48:d2:4e:15:3d:db:c6:2e:11:4a:39:32:
a3:fc:1d:f2:5d:8a:17:15:2a:c8:74:7b:33:7d:5c:ca:51:d5:
6e:76:6b:b9:8b:28:f6:50:4b:59:c4:21:4b:43:65:51:9c:93:
e5:84:45:87:de:a2:24:50:18:43:2d:dd:1e:e1:ce:31:b5:91:
29:ec:99:e4:4f:07:c5:f5:a6:30:2e:09:bb:cb:71:66:f0:88:
5a:e6:05:24:53:5d:10:7b:f9:24:c7:22:d8:d7:6f:e6:39:da:
7e:88:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:31 2026 by rpki-client