Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
File: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json)
Hash identifier: U3rSqCcn013byYSdx5xaDHoSytnJVLIzCxJKcGM4UFg=
Subject key identifier: 6D:98:F0:F2:BE:C5:59:66:E1:F8:0A:8E:0D:81:68:4E:84:57:8B:8E
Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
Certificate issuer: /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Certificate serial: 019CAF47913A38D042E8980102B7C3F08FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
Manifest number: 148D
Signing time: Mon 02 Mar 2026 16:00:28 +0000
Manifest this update: Mon 02 Mar 2026 16:00:28 +0000
Manifest next update: Tue 03 Mar 2026 16:00:28 +0000
Files and hashes: 1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: XN38173c7GogKFOEwh38smHUUr3W4/jMWk/Ccp0IpwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:91:3a:38:d0:42:e8:98:01:02:b7:c3:f0:8f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Validity
Not Before: Mar 2 16:00:28 2026 GMT
Not After : Mar 3 16:00:28 2026 GMT
Subject: CN=6d98f0f2bec55966e1f80a8e0d81684e84578b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:b1:e9:70:21:a4:fa:a1:06:86:03:1d:1c:
bc:19:fe:34:1e:25:86:38:09:2f:51:bc:db:f3:b6:
53:c5:23:7d:4d:dc:e2:1b:1d:00:6c:bb:50:e5:cf:
bc:5d:a4:31:28:91:46:80:d3:ca:56:c9:ef:1b:90:
4f:56:d4:bf:e8:ea:30:f5:84:3f:2d:72:98:93:0e:
1f:c8:85:bc:60:d7:6b:50:8f:74:e1:66:36:e1:96:
99:fb:46:6f:bd:0c:1b:d9:b5:29:ec:6b:b5:5e:6d:
7a:1a:84:02:4f:61:2a:4f:46:63:14:a3:ca:e1:d6:
6c:83:66:6c:14:df:9d:73:19:9d:26:0c:dd:c1:84:
62:c2:6a:79:0a:a6:14:ab:02:21:af:d6:74:e4:47:
4e:83:0c:60:23:e0:e9:89:83:e6:9b:cb:6e:fc:a7:
4b:3f:00:f8:b5:cc:f7:db:a2:b0:9e:69:79:91:de:
0b:92:f9:6f:dc:ee:7c:03:3e:6a:3a:39:58:e8:94:
a7:bb:bf:10:fe:2e:6f:4b:1b:6e:01:65:83:54:c3:
d5:1e:c1:a0:a4:aa:b8:dc:17:05:3a:7d:22:ba:48:
a8:55:c6:0a:43:e2:66:5a:7e:6d:29:ac:90:eb:e0:
45:d0:0e:4c:f2:93:32:5f:b5:e4:9d:c8:93:7e:1e:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:F0:F2:BE:C5:59:66:E1:F8:0A:8E:0D:81:68:4E:84:57:8B:8E
X509v3 Authority Key Identifier:
keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:ff:93:80:08:6d:8d:8b:a6:50:21:ab:70:dd:9e:a8:08:7b:
90:91:1a:6f:dd:e4:3a:d0:6e:a2:f0:df:1b:ab:99:c9:d0:72:
0e:29:e4:55:ad:f3:32:d2:e7:21:27:d1:7e:2c:06:73:99:98:
20:eb:aa:aa:45:54:61:79:0e:28:da:30:7f:f3:a7:d6:41:65:
3d:46:61:fb:10:cc:1a:25:24:f5:5a:f6:5f:57:6a:d5:2b:aa:
fa:d3:b2:cc:02:7e:a4:ae:f6:89:54:45:ef:b7:03:b0:8b:c2:
14:dc:3a:1e:ae:95:c7:88:d2:08:4a:5e:a1:3b:1d:63:6e:54:
0b:76:6e:f0:39:d9:59:cd:2f:e4:ee:ff:74:16:c3:31:e1:f8:
96:87:70:84:00:bd:86:e9:5e:40:7c:d3:db:0e:d2:73:97:02:
c9:c0:8f:b9:17:0f:c9:df:74:3e:6c:0c:59:77:61:b9:0b:e3:
26:79:b1:de:4a:61:9f:4a:5d:fc:8a:ff:34:db:a3:de:de:67:
f0:92:44:32:b5:b7:bb:47:5d:21:2d:10:d9:6a:6f:66:25:8f:
4f:51:d6:1f:ae:63:8d:8d:eb:b2:00:2c:0d:00:8a:69:39:ca:
d9:5f:95:6d:97:97:a5:cd:d4:8e:b1:5f:87:c5:da:c1:a0:d7:
90:9a:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:34 2026 by rpki-client