Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier: 7K6w5T5Gig3XTyUPGon0hvxKZUsL28sUZ5TPuV1lyhc=
Subject key identifier: 3E:57:6F:BC:BA:7A:83:1A:9B:09:94:83:EB:93:1A:6E:D3:B7:5C:3F
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial: 019CAC47384B2A9C4D7D091E1EF63F2FE786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number: 1693
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: LXukGbobHb8qNr2ITlUCl/+ysRgh9Xf70p5/Gk5kd/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:38:4b:2a:9c:4d:7d:09:1e:1e:f6:3f:2f:e7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=3e576fbcba7a831a9b099483eb931a6ed3b75c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:c3:56:b4:5c:f2:99:93:b7:50:b4:c7:37:
60:98:bd:3a:f1:03:a2:87:8d:39:17:b0:19:51:1e:
e3:c9:ad:ea:e5:63:e8:9d:8e:91:1a:cd:7e:04:43:
26:a4:67:8e:65:17:61:bc:11:ac:ac:f6:0d:7a:74:
47:1e:8c:63:60:7e:20:4f:4a:91:ec:b4:7f:96:77:
8e:b8:84:53:b9:de:71:2b:47:51:c1:a0:64:5e:76:
fc:ce:88:b6:f8:8a:ba:e5:de:aa:49:47:65:81:80:
0c:ae:d0:46:2f:e2:75:78:ee:4d:6d:b2:30:77:6b:
81:c2:44:35:18:40:38:c2:9c:a4:b8:b8:21:ab:e1:
35:1e:42:96:e4:ea:b8:a6:72:47:57:f8:73:cd:eb:
6e:5f:38:84:ce:62:4d:12:a0:d8:e2:f9:b9:63:3e:
a2:f5:81:fb:e5:36:29:4a:7e:10:45:56:1f:9e:60:
d4:f9:d6:b0:ae:08:12:f1:c7:9f:3f:14:00:46:6f:
70:cb:7a:fd:12:48:86:53:6b:ac:01:f6:24:06:6a:
aa:9a:a1:94:91:cc:a2:b7:aa:c0:76:f4:fe:5a:42:
ce:a4:f6:a0:b5:66:b6:d6:14:8f:83:5e:ff:23:7c:
f4:18:61:12:56:a6:51:5a:1a:6e:b3:18:2a:f8:1a:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:6F:BC:BA:7A:83:1A:9B:09:94:83:EB:93:1A:6E:D3:B7:5C:3F
X509v3 Authority Key Identifier:
keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:64:b3:33:dc:31:e7:67:7a:27:89:cc:d1:1d:e5:af:9d:11:
65:10:5a:99:60:1d:3a:8b:1d:50:10:5b:e7:cb:78:34:79:60:
58:50:3b:b4:24:1e:1e:7d:8e:c1:bc:6f:2c:f1:69:f2:bd:9d:
41:6b:e5:30:f5:bd:69:a5:fe:1b:b5:a3:ed:1d:04:fa:f4:77:
97:23:fb:fd:cd:ef:e9:d3:fa:d5:1f:1c:0d:77:d0:0e:32:db:
e3:2f:aa:99:49:33:a7:c5:02:48:03:5a:27:13:55:d3:2f:14:
a5:a0:fe:70:1c:d0:e7:88:f3:9f:48:bb:9f:38:24:36:ea:3c:
dc:99:bd:be:92:7d:f9:5a:cc:20:70:bf:45:00:7d:32:d5:01:
fe:3c:d4:eb:b7:e3:de:e0:57:3b:12:a3:22:21:6f:ef:66:82:
92:23:18:36:79:ec:c3:5e:18:26:6c:e0:a7:45:10:c0:c3:44:
b0:71:ff:0e:51:e9:62:d4:10:e9:f2:7d:85:8b:23:e1:57:a0:
e9:d8:8f:53:93:5e:70:f5:97:70:ae:58:06:cf:95:c1:b9:b0:
27:17:25:88:25:55:7b:6f:fc:e8:1d:2f:2c:91:46:ca:dd:8f:
89:7a:f6:03:88:e6:e5:cf:27:e6:00:ec:22:9d:c9:b8:9f:87:
fc:a9:af:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:47 2026 by rpki-client