Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
File: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json)
Hash identifier: EkeEJjk3mG3bCzRy5Nvk7glBqOu4g1P8RNSl97GgTIc=
Subject key identifier: C1:57:99:C0:26:97:D7:B7:57:3E:52:56:A0:E0:96:51:11:97:2E:A7
Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
Certificate issuer: /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Certificate serial: 019D9AE2772ECB4533CC68206DDD9553D4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
Manifest number: 1507
Signing time: Fri 17 Apr 2026 10:00:25 +0000
Manifest this update: Fri 17 Apr 2026 10:00:25 +0000
Manifest next update: Sat 18 Apr 2026 10:00:25 +0000
Files and hashes: 1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: 1kqSTr00VYrWevKxjatgpbnIEoztyM6oWwCl3STwScc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:77:2e:cb:45:33:cc:68:20:6d:dd:95:53:d4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Validity
Not Before: Apr 17 10:00:25 2026 GMT
Not After : Apr 18 10:00:25 2026 GMT
Subject: CN=c15799c02697d7b7573e5256a0e0965111972ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:81:33:c7:2a:a8:9f:4b:99:31:99:00:87:
39:17:08:63:42:b8:78:df:92:dd:82:a9:e1:48:d2:
5d:b7:8d:00:0c:0a:9c:34:a5:a7:5f:5f:64:89:44:
52:f0:9d:6a:f8:02:3f:01:97:36:3e:b4:c3:ef:ae:
a3:56:fa:66:29:e5:e2:10:82:61:c1:d1:49:c5:f8:
2c:32:a6:65:ac:6a:f5:94:8a:7d:23:c2:7b:45:72:
be:8b:0e:cb:ab:2a:77:7c:d9:ab:bc:2d:40:c3:42:
bf:8f:98:78:a8:49:f4:72:f3:80:aa:8c:1f:68:33:
88:d0:ef:45:9a:7f:89:84:50:82:5b:80:52:02:29:
25:65:d0:94:56:a0:23:1f:ce:16:dd:01:6c:c6:fd:
68:3c:67:ea:50:63:9b:56:93:50:77:ad:ca:b5:89:
86:f8:85:c7:92:64:65:12:b0:b6:d7:c2:24:00:8a:
7a:58:6f:65:14:31:fa:e6:79:2a:6f:f4:9c:75:ff:
9c:0c:52:1f:26:33:31:6e:3a:3e:98:dc:9d:8a:06:
9b:1e:08:a8:c1:60:d5:14:fb:8a:55:24:69:19:86:
0c:90:32:ad:eb:a8:2b:e7:c6:62:47:82:6b:7e:b0:
ef:51:e8:5a:35:df:03:40:dc:77:a8:6e:26:17:a5:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:57:99:C0:26:97:D7:B7:57:3E:52:56:A0:E0:96:51:11:97:2E:A7
X509v3 Authority Key Identifier:
keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:13:b2:9a:e2:02:06:c7:9b:a2:e5:a5:0a:fd:d5:40:ea:02:
dc:c0:60:0c:b4:96:89:39:ca:ca:8e:4f:3e:f1:45:09:df:3f:
13:0d:73:e1:3f:ad:08:6a:78:2a:02:83:4f:3d:73:6a:b2:71:
58:d2:10:28:c0:38:78:e7:b6:ed:82:a1:6f:c9:df:90:23:8e:
38:a3:b7:6c:2e:d6:72:b1:40:5b:06:d0:d6:45:a9:16:ba:cb:
be:d8:91:d7:59:71:b7:ce:d1:81:f6:2b:28:bc:11:e6:96:7a:
f4:34:b5:ab:bc:9d:56:e7:23:93:9e:1b:6c:62:33:8d:bb:4d:
36:c5:7f:7b:77:be:8b:ad:6a:c4:1a:5b:f3:44:91:ca:11:da:
cb:8f:9e:66:66:c7:74:91:09:9f:4d:5a:06:48:32:12:da:11:
1c:fe:26:ef:55:a5:32:2d:f9:a2:77:37:a4:49:07:9c:7c:75:
f3:c0:cf:d4:d6:d3:75:0d:2a:23:c9:e0:33:df:4e:bf:49:51:
3d:30:51:90:b6:c9:90:11:47:26:18:a6:db:35:17:6c:6a:ae:
35:06:1c:75:76:63:9c:30:17:63:e3:d6:33:92:53:c2:86:46:
98:88:b4:4d:55:93:33:67:3d:4b:e7:92:bf:d2:ec:c5:cc:d9:
6e:4b:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:07 2026 by rpki-client