Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
File: II3G2-Xnc9eq1wBdbP8m5HFDyng.mft (raw, json)
Hash identifier: HKPvs0g2zP1FK4qnhHTnG1gFKl7tLCPp/kM/0SE6Klk=
Subject key identifier: CB:63:B5:6D:07:E9:BD:76:40:39:65:7C:D4:B3:37:59:08:18:12:11
Authority key identifier: 20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
Certificate issuer: /CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Certificate serial: 019CAA21AA0B1A760C25EADED845CEBEDCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
Manifest number: 25
Signing time: Sun 01 Mar 2026 16:00:58 +0000
Manifest this update: Sun 01 Mar 2026 16:00:58 +0000
Manifest next update: Mon 02 Mar 2026 16:00:58 +0000
Files and hashes: 1: II3G2-Xnc9eq1wBdbP8m5HFDyng.crl (hash: tuO0/MVanLXEcejiytXpJG6sCNJcHjcQutLQ01WmGrw=)
2: QnnmbVsFipjGwWlkwterk9FW954.asa (hash: y28GAJ2BjstIR8PdtVgRbi1Xb18GoafeiPOI2Mgv9po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:aa:0b:1a:76:0c:25:ea:de:d8:45:ce:be:dc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Validity
Not Before: Mar 1 16:00:58 2026 GMT
Not After : Mar 2 16:00:58 2026 GMT
Subject: CN=cb63b56d07e9bd764039657cd4b3375908181211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:d4:bc:19:e6:3c:90:bf:4e:d9:06:8f:ce:
bd:9f:af:81:90:ca:fa:74:75:99:74:e8:3f:7a:1f:
c2:d0:18:c6:bf:56:2c:d9:10:3d:11:25:44:12:e2:
05:4a:34:97:97:f7:bb:71:d3:88:c1:9f:85:d3:a9:
6c:5f:26:8a:8c:b1:59:f9:98:9f:66:b4:c3:b6:cc:
d5:c2:0a:54:26:96:62:e9:93:fc:b5:13:20:ff:b8:
2b:7d:79:2e:1b:bc:d8:d4:1b:26:dd:df:01:bd:3d:
d2:e1:e3:05:85:b7:c7:a4:00:7e:4a:70:a9:b7:af:
ef:72:c6:13:d6:59:91:e7:9c:08:b6:d4:30:e4:9d:
8a:f0:02:27:43:51:ec:49:0d:5b:7e:f6:87:29:06:
12:db:c5:e3:99:c3:2c:c4:37:1e:48:77:ca:ea:e9:
ca:b0:63:3f:04:79:24:8f:eb:b9:d7:82:a5:2e:0d:
28:9f:30:51:53:74:7b:89:6a:e5:a9:c8:5a:f1:0e:
0f:fe:fa:cd:84:97:d6:96:b9:e8:e7:9c:12:d1:27:
11:2a:f1:d5:02:01:ba:c9:90:b6:d4:b0:d0:5a:40:
b7:07:cb:6a:89:3f:e0:e0:48:2b:09:3f:f5:81:5c:
ab:60:27:f7:62:7e:e3:77:92:a7:5c:17:dc:fe:0c:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:63:B5:6D:07:E9:BD:76:40:39:65:7C:D4:B3:37:59:08:18:12:11
X509v3 Authority Key Identifier:
keyid:20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bf:14:1e:3e:9d:1a:36:50:c9:ef:4b:a7:80:3a:7a:07:5e:
6a:c4:95:85:48:b6:89:67:5b:42:c0:cc:75:2d:bf:a3:ba:61:
2c:b0:01:02:c9:0e:70:1c:e1:ee:df:3d:35:84:4a:c6:f6:00:
b8:ef:38:52:f9:ab:6e:bc:db:f1:7f:12:38:25:fa:d4:54:86:
ed:ae:61:82:67:63:96:d7:da:5f:2a:f3:78:18:f8:55:fb:bb:
d3:e7:03:aa:f9:3d:8f:68:66:93:2d:41:34:0c:dd:2b:28:45:
62:29:5e:f3:4e:7f:fb:a0:a3:2b:90:61:ad:fd:ab:f4:54:6b:
be:b4:1a:3e:79:92:ba:6f:e1:fa:75:b0:f0:c5:3e:98:dc:fc:
13:c3:e1:5e:20:19:67:da:d1:3e:d1:85:32:0f:3c:75:fb:09:
4b:ab:68:ef:b8:5f:ea:62:da:e2:7f:f8:ff:d4:89:da:6e:1a:
a8:77:e0:24:ca:f6:39:c1:b2:45:58:d4:41:b2:b2:cd:83:82:
5b:13:6a:f7:a7:5c:60:0d:eb:1c:24:5f:be:e5:aa:de:01:5a:
36:12:cb:54:ef:34:a1:7b:03:de:4e:42:64:9b:5d:cc:5b:b1:
12:84:9e:c4:cb:b9:ed:f5:91:47:28:d8:cb:4a:6c:ab:b8:8d:
78:66:0f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIaoLGnYMJere2EXOvtymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGRjNmRiZTVlNzczZDdhYWQ3MDA1ZDZjZmYyNmU0NzE0
M2NhNzgwHhcNMjYwMzAxMTYwMDU4WhcNMjYwMzAyMTYwMDU4WjAzMTEwLwYDVQQD
EyhjYjYzYjU2ZDA3ZTliZDc2NDAzOTY1N2NkNGIzMzc1OTA4MTgxMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzzUvBnmPJC/TtkGj869n6+BkMr6
dHWZdOg/eh/C0BjGv1Ys2RA9ESVEEuIFSjSXl/e7cdOIwZ+F06lsXyaKjLFZ+Zif
ZrTDtszVwgpUJpZi6ZP8tRMg/7grfXkuG7zY1Bsm3d8BvT3S4eMFhbfHpAB+SnCp
t6/vcsYT1lmR55wIttQw5J2K8AInQ1HsSQ1bfvaHKQYS28XjmcMsxDceSHfK6unK
sGM/BHkkj+u514KlLg0onzBRU3R7iWrlqcha8Q4P/vrNhJfWlrno55wS0ScRKvHV
AgG6yZC21LDQWkC3B8tqiT/g4EgrCT/1gVyrYCf3Yn7jd5KnXBfc/gxp7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtjtW0H6b12QDllfNSzN1kIGBIRMB8GA1UdIwQY
MBaAFCCNxtvl53PXqtcAXWz/JuRxQ8p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUkzRzItWG5jOWVxMXdCZGJQOG01SEZEeW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83OTY5YWItZDEyOS00YTZiLWExZjEt
ZjU4YTI1NDY0OTFhLzEvSUkzRzItWG5jOWVxMXdCZGJQOG01SEZEeW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83OTY5YWItZDEyOS00YTZiLWExZjEtZjU4YTI1NDY0OTFh
LzEvSUkzRzItWG5jOWVxMXdCZGJQOG01SEZEeW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVb8UHj6d
GjZQye9Lp4A6egdeasSVhUi2iWdbQsDMdS2/o7phLLABAskOcBzh7t89NYRKxvYA
uO84Uvmrbrzb8X8SOCX61FSG7a5hgmdjltfaXyrzeBj4Vfu70+cDqvk9j2hmky1B
NAzdKyhFYile805/+6CjK5Bhrf2r9FRrvrQaPnmSum/h+nWw8MU+mNz8E8PhXiAZ
Z9rRPtGFMg88dfsJS6to77hf6mLa4n/4/9SJ2m4aqHfgJMr2OcGyRVjUQbKyzYOC
WxNq96dcYA3rHCRfvuWq3gFaNhLLVO80oXsD3k5CZJtdzFuxEoSexMu57fWRRyjY
y0psq7iNeGYPiw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:35 2026 by rpki-client