Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: MRqNxwchd+FcwVvWYFStuHphZCPQDJBKdT9VrgB6GDw=
Subject key identifier: 34:AD:E1:38:86:B1:64:F7:B7:BF:57:5D:30:74:39:EE:AD:D0:97:96
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 019CAAC64811AD14AA45CFCC2F693024D7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: Hnzc7nkcSYw0j7O8gEvrvIblUSnnfDVjZPLeElEyb5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:48:11:ad:14:aa:45:cf:cc:2f:69:30:24:d7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=34ade13886b164f7b7bf575d307439eeadd09796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:cb:65:68:50:e5:0e:37:da:8d:47:0c:3d:
36:de:ac:82:64:8f:90:21:e7:39:fa:18:51:7f:d2:
b6:f3:e8:22:35:63:61:66:f3:ad:6a:dd:0f:ac:b4:
31:16:1e:c4:03:ef:d2:3f:46:a9:2a:3c:fc:2d:09:
eb:0a:6e:29:16:c2:6a:6f:33:8e:28:50:9b:60:3c:
26:86:f4:78:ca:ab:f9:64:3a:76:14:63:7c:4a:cb:
16:f0:25:5e:e1:08:b6:02:cf:dd:be:62:54:c9:c4:
2a:5c:4d:df:30:e3:f2:bb:12:00:aa:bd:c7:b8:74:
3f:17:c4:61:f3:e2:02:64:6d:ae:b0:a7:ff:62:80:
06:5d:ad:1d:54:09:fb:89:ff:8b:0f:74:a4:71:69:
76:16:fb:6b:10:4a:ea:5e:14:df:4e:3a:fe:b8:76:
1b:67:5d:24:39:38:e9:9b:ce:38:cf:39:47:b6:65:
c4:cb:68:e3:30:1b:6f:6e:57:7b:b2:11:1a:60:04:
5c:17:37:ad:8d:11:e0:5a:4c:39:3d:9c:a7:f7:39:
58:09:84:d8:93:c8:43:3a:23:9c:2c:52:c3:d7:f3:
32:2f:10:e3:a8:6d:92:3a:17:34:17:1e:9b:9d:ab:
a9:75:dc:2c:20:e7:95:88:2b:46:d2:09:6a:bf:9f:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AD:E1:38:86:B1:64:F7:B7:BF:57:5D:30:74:39:EE:AD:D0:97:96
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c9:9f:f9:28:e1:41:b8:97:ad:44:7e:34:c8:d2:79:f9:3f:
3d:55:e8:fd:9a:02:60:63:ca:c2:b8:43:fd:b0:d6:15:8f:ec:
01:be:45:ae:f2:32:57:79:91:1a:f5:56:84:44:b7:96:4b:61:
ac:ac:58:7c:9b:77:9c:bb:34:19:86:3c:a7:52:e8:8e:13:a8:
a5:ed:f2:17:61:c2:b8:ae:0d:2a:c2:e8:59:96:1f:da:66:1b:
d3:b1:08:f1:d5:32:77:80:db:ee:d6:1b:19:61:f2:3d:3b:80:
01:d3:4e:1a:19:51:15:88:73:f4:1a:65:17:73:5a:78:65:d9:
e4:df:5b:53:0f:53:ba:89:c2:2d:e0:dc:dd:30:11:df:e2:24:
c8:88:13:56:70:88:47:ca:d4:07:b5:f1:68:c3:95:ee:78:05:
f2:eb:80:32:f5:66:c4:17:3a:8d:8e:1e:02:90:bc:50:a8:14:
a3:a1:bf:c1:8a:30:55:b2:a8:77:6b:74:2a:b4:67:ac:91:30:
07:a1:b6:20:2e:d4:93:e8:2d:2c:8b:06:2b:31:d5:ca:bd:db:
9d:3e:e9:e3:65:6b:15:16:b5:5d:19:c3:f1:ed:a5:9b:e0:28:
95:93:0b:3f:e6:6d:41:e8:e5:5c:12:af:6b:ba:bc:9e:4c:fc:
57:22:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:25 2026 by rpki-client