
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File: 1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier: g0oiY3ef7Bkly8bHQ6rPjquo3LhpT7mA8XtWhpR0BFA=
Subject key identifier: 08:BC:D6:05:A2:82:B3:50:EE:4F:18:C5:4D:BE:13:27:0F:34:FB:A2
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer: /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial: 019CAB6B65344B898D0B694D92CC16990397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number: 0D52
Signing time: Sun 01 Mar 2026 22:01:07 +0000
Manifest this update: Sun 01 Mar 2026 22:01:07 +0000
Manifest next update: Mon 02 Mar 2026 22:01:07 +0000
Files and hashes: 1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: FNZL15MnQyGZ7b4iHdcJL+sp3NynSEoy4EygFSMs13A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:65:34:4b:89:8d:0b:69:4d:92:cc:16:99:03:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
Validity
Not Before: Mar 1 22:01:07 2026 GMT
Not After : Mar 2 22:01:07 2026 GMT
Subject: CN=08bcd605a282b350ee4f18c54dbe13270f34fba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:41:d6:f6:aa:57:ec:0e:75:10:be:42:82:
e7:98:7f:ec:29:43:08:c0:ba:75:30:5b:70:d5:4f:
48:a2:ea:ab:0a:0b:ed:86:5c:68:c2:47:ef:8f:c2:
04:d6:96:1d:4b:33:97:a1:42:63:10:15:ae:32:fd:
41:52:7a:53:67:5d:10:31:9d:a9:ac:ad:9b:8d:e7:
62:be:4b:40:5f:3d:0f:ca:45:78:2a:af:6e:a1:3a:
2c:b9:2b:f3:83:7f:af:87:56:bb:e8:2e:22:59:bf:
a2:e7:cd:30:e5:a0:83:9f:19:6e:9d:43:ee:4a:57:
fb:1e:80:44:9b:e4:2c:a6:bc:ab:cb:b5:a2:79:33:
41:a6:2d:fe:52:0f:6b:03:f3:65:41:c8:7c:af:40:
de:b9:51:64:af:dc:58:e2:75:2e:b6:57:2a:f3:35:
0e:20:03:44:7c:08:a8:27:c1:a7:33:6b:19:9e:f8:
67:14:9b:cd:a4:03:ea:6e:ea:aa:5f:1e:50:6b:1c:
d3:b5:95:69:59:70:51:3b:d2:f5:75:6a:ca:ef:d3:
0a:dc:05:26:39:3b:5a:77:86:f5:00:b8:be:12:34:
60:88:66:88:e6:1a:c4:08:c0:cd:47:5f:b6:51:61:
5c:50:f7:02:98:4a:96:ea:3a:f7:2f:34:54:c9:67:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BC:D6:05:A2:82:B3:50:EE:4F:18:C5:4D:BE:13:27:0F:34:FB:A2
X509v3 Authority Key Identifier:
keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fe:a6:4e:ce:f3:4c:6b:ac:1c:f1:1a:21:38:0a:05:df:fa:
f8:8e:59:64:a7:91:06:71:94:69:f1:11:ef:92:ad:a7:82:1a:
17:da:f5:d4:ec:fb:e6:d2:9c:c6:e4:73:b4:56:27:46:7d:d1:
54:c4:c8:a6:f6:b0:6f:64:b4:53:fe:31:1b:af:95:fe:17:96:
25:80:c3:5f:73:e2:90:b7:30:e6:62:bc:a4:da:37:9f:fd:61:
17:e8:d4:89:06:a7:54:3d:28:03:d0:ea:93:9b:9a:95:f4:7f:
1a:97:bd:6f:6d:db:2a:84:db:7c:f1:15:91:47:01:40:e6:60:
dd:10:ff:a8:cc:22:1e:02:22:fe:fb:81:a4:43:2d:7f:7e:5e:
ad:a6:f3:8b:06:f0:0c:b7:dc:74:20:63:c2:c3:0c:01:b7:6f:
b3:04:1e:bf:b0:9b:da:be:4d:83:69:f3:a0:ff:b9:6a:cf:2d:
1a:cf:c7:9c:9a:f1:df:0c:fa:eb:d3:20:d9:b9:77:98:f5:0e:
fe:68:9e:6f:e6:8d:a0:cb:f7:b9:80:5f:45:21:34:cc:23:a8:
67:a4:1b:cb:7a:18:d7:53:55:32:01:8b:2c:4e:9b:f8:c7:f8:
00:2f:ca:c6:10:2a:c5:a4:cc:95:58:95:5d:9f:07:57:e3:b7:
38:a2:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:36 2026 by rpki-client