Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
File: IIP4tbYgnefJQAjzM3vjQ2866-Y.mft (raw, json)
Hash identifier: IsDU0MYMBIcuMLJ5hrTIRXEjOLG2seR14qq6iEiJqf4=
Subject key identifier: A2:1F:C7:40:FE:EF:43:32:F6:6A:02:4F:DA:DF:AF:53:71:1C:28:D1
Authority key identifier: 20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
Certificate issuer: /CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Certificate serial: 019CAC7E230CACF522D21331D127B5C07E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
Manifest number: 089B
Signing time: Mon 02 Mar 2026 03:01:13 +0000
Manifest this update: Mon 02 Mar 2026 03:01:13 +0000
Manifest next update: Tue 03 Mar 2026 03:01:13 +0000
Files and hashes: 1: IIP4tbYgnefJQAjzM3vjQ2866-Y.crl (hash: P8q9oW+ZcYfTd+puk9KZ1xSBhiTP51TtFZO/atbBC40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:23:0c:ac:f5:22:d2:13:31:d1:27:b5:c0:7e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Validity
Not Before: Mar 2 03:01:13 2026 GMT
Not After : Mar 3 03:01:13 2026 GMT
Subject: CN=a21fc740feef4332f66a024fdadfaf53711c28d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:90:78:fa:6b:42:95:e2:a4:08:ed:07:2b:
b0:d7:65:8e:85:54:58:cc:90:f6:c9:b7:10:2d:35:
5c:41:60:ac:b7:e8:ca:20:75:a6:79:38:7e:39:40:
a3:ab:83:0f:9f:30:38:1c:2b:73:a3:19:16:4a:cf:
31:31:89:c0:af:d4:e6:fe:96:16:01:ea:a3:fd:75:
e0:d2:60:e6:5f:41:12:4f:3f:55:48:2d:ff:60:a0:
48:44:6e:42:3a:49:40:59:2d:62:c2:dc:4e:ce:ef:
e3:89:c6:0a:82:38:aa:64:02:07:3f:d3:56:de:e6:
43:ba:b9:01:05:53:15:6a:d2:5b:be:99:a5:9e:1c:
2c:cf:e7:69:c6:ee:06:28:8c:1e:45:77:20:0e:44:
45:11:12:48:bc:95:36:2d:2a:b8:21:1d:b2:88:6d:
53:d0:1b:d8:3d:98:48:72:2b:a2:49:20:39:c9:9b:
6b:77:c8:87:bc:8b:72:4e:90:5d:b6:8d:15:d0:03:
db:8a:92:1c:76:82:ae:d1:b6:50:a1:a4:fc:f8:be:
17:3e:9d:b5:eb:c6:35:eb:ba:a9:03:a0:c5:f9:3c:
35:eb:29:f0:24:ec:23:ca:ce:2d:22:e8:92:78:1a:
43:9f:94:d3:d6:b8:07:4c:c0:16:bb:fc:a4:e9:cc:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:C7:40:FE:EF:43:32:F6:6A:02:4F:DA:DF:AF:53:71:1C:28:D1
X509v3 Authority Key Identifier:
keyid:20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:d2:33:3c:1f:67:11:f5:ee:da:d4:58:03:7e:cf:30:96:
ed:d3:b4:90:07:74:6d:af:c8:d8:15:d8:83:f7:b2:1b:92:85:
ca:a5:d4:95:61:a6:9f:ee:ab:5e:08:43:3d:77:24:98:ee:cc:
44:1a:4a:68:81:87:50:5b:a5:f1:f6:ec:0d:1a:95:fe:de:b3:
e4:66:7e:72:fc:d5:6f:05:3f:7d:21:68:8e:ea:1d:ff:b3:c2:
37:7e:35:5e:f1:d2:c6:47:17:d2:b1:84:14:ae:fe:32:9b:11:
52:98:e8:8e:ea:69:35:8f:7a:5f:6f:64:f5:50:23:1d:9b:d9:
68:17:3c:e9:27:82:c8:c6:ee:26:8d:17:83:03:e9:47:38:b3:
20:a4:7e:14:50:09:7a:41:c8:71:3e:69:fb:f4:3a:7a:ed:18:
9e:36:db:39:6b:21:52:60:1e:d2:c8:dc:7a:bf:7f:4c:af:88:
b6:70:fc:f5:3c:0e:9a:c1:08:ce:99:9d:eb:ef:63:67:78:3f:
71:69:14:81:74:2d:95:77:79:31:ad:01:6d:fe:9d:ff:e7:27:
5f:6b:f1:c6:1a:bb:dc:f9:00:7a:ea:a6:58:01:90:5c:05:d1:
40:bc:c3:a8:30:b9:79:4d:b5:6e:31:42:60:6a:7f:3c:43:72:
2a:f0:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:09 2026 by rpki-client