Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier: X2kr6vIoNqYvzbNGVBcXZmePH1GgAqJNG0aYnS7/OBg=
Subject key identifier: 7C:E8:94:0E:75:CA:35:96:A4:0D:6A:B0:BF:A0:B3:04:9B:01:32:54
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial: 019CAE34F6D2C7AA98FA5DE6EE6C33FFC469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number: 1048
Signing time: Mon 02 Mar 2026 11:00:32 +0000
Manifest this update: Mon 02 Mar 2026 11:00:32 +0000
Manifest next update: Tue 03 Mar 2026 11:00:32 +0000
Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: TfqVTEDJk0Hr7N4OqlZ8ihWwh7c246cyWwa2eN19/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f6:d2:c7:aa:98:fa:5d:e6:ee:6c:33:ff:c4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Validity
Not Before: Mar 2 11:00:32 2026 GMT
Not After : Mar 3 11:00:32 2026 GMT
Subject: CN=7ce8940e75ca3596a40d6ab0bfa0b3049b013254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:71:30:d3:68:dd:a3:e8:7c:fa:9f:1c:ff:
7a:de:78:23:83:23:29:4d:2d:99:06:42:c8:df:3d:
c3:ea:42:cc:4f:c5:82:f2:09:27:a6:a9:1a:0d:6c:
c4:63:71:ff:8d:3c:da:7c:30:bd:7e:f2:fa:2c:7f:
b1:e4:3b:e7:60:01:2a:4f:4a:f1:db:6b:dd:22:bb:
48:26:9c:96:a3:c1:0f:03:11:05:43:7e:f7:ca:f0:
af:5c:66:f6:01:7b:3a:b5:55:d9:f7:cc:2c:2a:48:
26:81:78:a3:db:fa:2a:b4:3d:43:18:40:12:50:ff:
5e:36:9c:2a:d7:be:6d:2f:d4:49:f3:bc:a3:b0:97:
4a:76:bd:c8:0c:1e:33:9e:ba:07:b1:06:e2:82:4c:
66:3f:f5:14:b7:8a:90:08:ef:c0:7d:4b:c5:e4:50:
01:ce:35:58:de:8d:71:8d:4c:95:dd:6c:b5:25:c7:
fb:e4:f8:ce:9b:52:95:31:01:ae:92:cf:6a:03:da:
13:a7:52:d8:f9:2c:40:f4:48:ee:b7:8d:6c:81:9d:
e3:e8:ce:29:b5:b5:07:1a:48:67:4b:6a:70:2a:42:
a1:95:7d:68:27:d1:0f:c6:d7:48:f9:d0:da:a9:73:
91:ff:ea:0f:65:d3:9f:f5:6f:1f:8e:d0:0b:a3:1f:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E8:94:0E:75:CA:35:96:A4:0D:6A:B0:BF:A0:B3:04:9B:01:32:54
X509v3 Authority Key Identifier:
keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c0:d4:1c:6a:4d:0a:33:9e:86:4c:7d:cb:fd:58:c8:eb:73:
94:0d:0e:87:2b:7b:57:93:f3:9e:66:8a:95:fd:17:81:b4:5a:
f1:78:f1:11:11:85:b4:53:3c:8c:d9:c2:58:07:4e:d4:b8:13:
1f:f3:d4:7c:98:f4:b3:e3:ca:79:2c:27:5f:e1:6f:f0:05:f5:
ad:fd:74:d1:f8:b0:0e:3d:cf:f3:56:c1:7f:e0:e2:22:19:26:
82:cf:30:0c:e5:2f:57:10:9e:ac:9c:b3:75:23:12:ca:68:29:
fd:7f:d6:ca:b5:b8:3e:c3:58:24:e9:9c:36:b9:c4:4d:ac:ad:
08:dd:2f:fa:fa:c7:5e:65:48:ee:22:bd:05:41:4e:23:6e:f5:
c0:5e:64:ca:89:e9:15:ee:8b:5c:30:cb:47:e9:76:55:8a:75:
f5:72:8e:2c:0c:64:46:b1:d6:e1:af:68:e3:2f:31:47:42:04:
37:ec:9e:d3:c6:88:35:eb:2c:f6:7c:31:bf:b1:8b:c0:81:b9:
3c:6c:f7:f8:47:66:13:c6:07:31:00:fc:c2:65:a1:b8:a0:3d:
53:87:f7:1e:13:ef:39:d6:0e:33:4e:54:93:9d:84:f7:32:c5:
44:97:86:4b:48:68:dd:58:57:6e:9d:6c:e5:a9:3e:86:a5:1b:
bb:f1:52:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:01 2026 by rpki-client