Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File: iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier: y9GTt/jRUV1NX74+QcZD/rslaZ2FDl19lk1AI0sG2Pk=
Subject key identifier: 70:36:5E:F7:91:CF:64:1A:92:0F:1E:DE:08:66:43:5D:82:6C:F7:D0
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer: /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial: 019D9A3EB8CFF2E0B2102686884EA103DE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number: 08E9
Signing time: Fri 17 Apr 2026 07:01:34 +0000
Manifest this update: Fri 17 Apr 2026 07:01:34 +0000
Manifest next update: Sat 18 Apr 2026 07:01:34 +0000
Files and hashes: 1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: gpseWmiHF79CLCVsO2iGO7rpInCSLgs3ftvmG7Nle7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b8:cf:f2:e0:b2:10:26:86:88:4e:a1:03:de:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
Validity
Not Before: Apr 17 07:01:34 2026 GMT
Not After : Apr 18 07:01:34 2026 GMT
Subject: CN=70365ef791cf641a920f1ede0866435d826cf7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:d6:53:05:b3:89:6c:f3:2d:3e:84:82:28:
8b:da:dd:1e:47:ca:59:d6:5f:9a:4f:6b:65:6e:4d:
05:88:f0:0f:4c:c4:32:60:1c:09:27:85:75:73:4c:
40:60:84:fb:5f:2b:08:5c:2f:cf:4a:ef:a7:19:cb:
96:f8:97:53:05:84:20:69:d5:95:61:6c:7e:ab:c9:
c2:e3:4d:b5:e9:b0:78:3a:5e:bc:41:a2:11:36:56:
3e:2b:22:53:d8:90:dc:9c:60:1a:fa:e3:15:0b:66:
31:ee:58:e8:15:c6:7d:b7:36:0f:dd:05:ff:bf:1a:
94:47:9c:a6:9a:f7:b8:30:ea:b5:b6:56:88:b1:dc:
92:0b:5d:ca:e0:e8:5b:4d:78:b1:26:bb:63:5f:83:
fd:7c:73:3b:71:39:a8:04:7b:2b:c7:36:1c:b6:2f:
86:32:21:1d:1a:67:d1:26:17:2a:28:ff:9d:c5:5e:
31:86:d0:26:fc:1a:83:5b:84:3c:e6:22:04:ff:a2:
b1:6a:7c:80:f5:cb:a1:c1:d7:c7:ae:8d:be:89:74:
b3:cd:4e:8c:fd:30:2b:6d:3c:e0:94:3d:78:bb:81:
7e:08:e2:9c:2b:3f:7b:48:66:15:c2:04:6c:e8:51:
ab:b8:70:f3:16:8a:c7:6f:26:72:56:78:b1:9b:a4:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:36:5E:F7:91:CF:64:1A:92:0F:1E:DE:08:66:43:5D:82:6C:F7:D0
X509v3 Authority Key Identifier:
keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:99:87:30:84:8d:1b:49:f3:87:c1:0a:ab:39:56:12:07:
dc:4a:bc:0e:3d:a0:64:4a:23:61:e5:41:f9:38:bb:1b:ec:42:
6f:9d:cb:6b:3d:47:4e:5a:6b:b5:c1:23:c0:56:b7:5c:fa:dd:
c7:a3:24:bb:a8:c5:9a:c1:27:3a:ed:cb:ef:ce:b9:2f:68:9f:
90:a7:9c:1d:5e:8e:56:67:9a:f2:40:6d:05:70:54:6b:25:c7:
78:63:1b:72:82:5d:4b:76:4e:56:55:5c:23:d7:c7:8f:91:ab:
c8:bc:95:c4:ab:92:dc:17:79:84:60:af:e0:1d:27:5a:87:af:
ce:37:02:2a:91:70:64:0f:c7:eb:85:6c:df:eb:c2:17:2b:2d:
36:91:19:b1:d4:65:13:5f:db:1f:d6:94:77:01:87:60:e9:45:
72:39:9a:df:11:40:e2:82:50:93:f4:8d:6b:d3:2e:d8:83:2f:
45:ef:dc:0d:6d:a0:b9:24:7b:9d:d0:59:68:0c:d6:c1:cc:5a:
28:54:48:8e:02:ae:f5:7d:08:61:00:45:94:30:69:a9:a6:45:
a1:3d:55:7c:50:85:75:c2:76:11:ea:06:a4:f7:29:c9:d5:df:
23:ec:d9:d7:4b:7c:3c:60:f9:d9:ee:f9:01:70:3f:1c:da:d1:
8a:51:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:28 2026 by rpki-client