Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: GLfl/28IZb9rmA9lCkMM4Us5ridEMKAxLGJAGIorows=
Subject key identifier: F0:86:3F:B6:11:8B:F1:63:97:08:EE:EC:8E:12:00:DD:73:F4:09:B1
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 019CA9EA899A3ED94803B86AA42A91DA0C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 07B1
Signing time: Sun 01 Mar 2026 15:00:45 +0000
Manifest this update: Sun 01 Mar 2026 15:00:45 +0000
Manifest next update: Mon 02 Mar 2026 15:00:45 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: HqLdon+Hlxr1FeghQBSIwJSDDwrZ87q7UD9sP8yYQuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:89:9a:3e:d9:48:03:b8:6a:a4:2a:91:da:0c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Mar 1 15:00:45 2026 GMT
Not After : Mar 2 15:00:45 2026 GMT
Subject: CN=f0863fb6118bf1639708eeec8e1200dd73f409b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:ae:74:a0:02:30:ea:b9:c3:e3:66:90:aa:
ab:8c:e8:48:85:25:ba:7f:b2:c3:de:40:85:0d:e0:
6c:3b:49:0a:21:79:76:46:6f:74:30:5a:93:54:f6:
70:f7:b3:47:12:58:83:60:fc:01:aa:bb:d2:5f:8e:
18:45:9d:65:78:e4:1f:4e:4d:3f:9c:e4:90:68:ff:
3b:e0:57:4d:1b:4d:73:6d:b0:d4:2c:ad:e7:60:b8:
8d:44:b4:84:28:f0:10:e7:9a:1c:68:b8:3e:f2:92:
59:a2:d7:97:68:bf:0d:75:27:0c:e7:b7:00:f1:79:
69:9e:59:2d:92:38:11:b1:41:aa:07:37:cf:24:0d:
82:b3:9e:84:0e:65:77:85:96:15:f7:c8:97:4e:89:
f1:3a:54:39:7c:74:15:f8:b1:48:3d:d4:05:95:2a:
ca:f7:cd:4c:08:bb:a7:2e:c9:1d:f3:eb:f2:5d:4d:
73:c5:40:5c:d5:22:8a:15:3e:c3:d9:6b:13:7e:f9:
86:6d:43:74:62:dd:6d:b7:96:3d:a3:0a:5d:b1:e2:
64:5b:d6:e9:9d:d4:39:15:65:68:4a:45:11:3f:70:
1c:14:aa:9e:31:7c:05:36:05:b4:da:a5:9f:29:3e:
d5:46:be:a4:75:2c:2a:0a:5d:90:52:1e:3f:ac:84:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:3F:B6:11:8B:F1:63:97:08:EE:EC:8E:12:00:DD:73:F4:09:B1
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e8:eb:b3:7f:63:a7:1d:3c:2b:8a:d9:bd:d9:40:04:0b:5f:
e3:f3:54:ff:32:4c:2c:b8:89:4e:e0:01:ec:a4:81:69:15:fe:
89:86:b2:31:e9:b5:aa:21:fc:02:be:fe:24:1c:47:b1:0e:61:
2a:24:80:e3:a4:c2:af:a8:77:4a:82:65:b8:17:ba:3b:7a:b0:
1b:82:9f:2c:a2:77:b2:14:65:f8:2a:45:5e:4f:09:2d:c3:1b:
ee:25:9e:37:1b:7d:11:83:b5:33:9d:1c:e5:ae:95:7d:df:e4:
a1:53:2d:51:0c:03:dd:a1:41:05:5a:ab:9d:ba:1e:d7:64:63:
82:dd:32:07:e5:c1:28:77:87:f4:db:20:8e:1f:05:ed:37:ac:
95:a9:22:32:08:c1:27:ce:97:1c:24:83:01:4a:75:bb:3f:17:
92:c8:1d:b3:b4:e9:e6:fb:1a:de:c8:99:a8:99:fa:7c:4b:d2:
1a:97:b7:09:31:e2:06:b9:57:75:f5:fc:37:76:65:0b:4e:71:
e3:75:82:3e:44:23:d4:d3:15:42:7a:d0:b5:51:62:6a:bf:cf:
5d:60:77:a2:e0:36:a1:d2:38:85:7d:33:db:9a:39:0f:be:1f:
8f:65:01:bb:67:05:26:6f:19:8a:db:a2:25:50:12:7c:ae:e4:
bc:b6:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:54 2026 by rpki-client