Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier: kUss3goRwzCD1rhyCcdFx+pADyZ2eG+WFyRs9AtHGdc=
Subject key identifier: BB:84:9D:D3:34:90:6E:19:8B:49:D3:0E:EF:7C:49:C5:2B:C3:FD:8B
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial: 019CA9EACA4491BAF0E126D960CA46AD2FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number: 07E1
Signing time: Sun 01 Mar 2026 15:01:02 +0000
Manifest this update: Sun 01 Mar 2026 15:01:02 +0000
Manifest next update: Mon 02 Mar 2026 15:01:02 +0000
Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: BP5YKgs9TYc9Gob2L1w3niwEqRVMT56r5ESmxsPgsQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:ca:44:91:ba:f0:e1:26:d9:60:ca:46:ad:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
Validity
Not Before: Mar 1 15:01:02 2026 GMT
Not After : Mar 2 15:01:02 2026 GMT
Subject: CN=bb849dd334906e198b49d30eef7c49c52bc3fd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:51:d6:84:8a:7d:ce:74:47:89:9f:e1:90:
74:0f:cc:92:8f:64:33:64:fd:59:60:6e:e7:f1:f0:
d4:e5:cb:39:47:9c:18:19:d6:26:ea:18:f3:5d:d2:
82:7a:da:54:e0:2e:ea:71:2c:26:fc:cc:61:b7:a6:
a0:92:39:d0:93:cc:35:e4:e5:14:d5:33:e1:63:a3:
28:93:2b:dc:21:82:bc:2e:c3:1c:a5:1e:7a:ff:04:
62:e2:0a:84:a5:b0:77:6d:fc:e8:6e:8f:b1:7f:3e:
ad:5e:bc:3b:9c:d3:44:41:c5:97:c4:e0:81:6f:af:
61:82:17:31:de:55:8b:a6:50:95:bf:64:27:89:62:
e7:a9:ea:80:bc:e4:81:3f:9f:8e:4e:a1:6b:fb:6e:
5f:b1:58:8e:d9:24:32:1d:ba:b4:1c:fd:00:e0:f4:
74:97:3d:fd:ac:43:e8:eb:72:f5:fd:40:9a:30:b4:
20:1d:85:5b:c8:47:3d:af:0c:40:f6:85:35:eb:1a:
a0:06:7b:5d:4e:5b:7c:16:b6:c5:9d:14:00:76:3e:
9c:ef:bd:6f:fa:68:7d:b1:0c:e0:11:75:3c:25:68:
e2:bf:45:68:32:39:1b:41:fe:81:c5:a7:94:84:69:
27:a4:69:09:6a:62:42:42:6a:2a:f5:b5:94:6b:26:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:84:9D:D3:34:90:6E:19:8B:49:D3:0E:EF:7C:49:C5:2B:C3:FD:8B
X509v3 Authority Key Identifier:
keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e2:e8:73:ca:ac:e4:f1:0e:a8:ee:3c:ae:ee:eb:28:ce:59:
4f:d0:ee:76:af:fe:28:e2:e0:c2:d8:53:6c:b0:16:af:1b:9e:
3a:1d:16:4b:4c:1f:9f:c5:fa:88:62:2c:92:ff:16:48:5c:05:
b5:01:7e:c2:79:63:94:8d:d7:d7:93:2f:96:39:da:6d:d0:3f:
65:79:e1:80:06:11:60:82:06:a9:87:64:65:08:dc:eb:25:c2:
c0:77:06:80:c1:f9:ae:0d:b3:ac:05:d1:9a:00:5b:d2:f3:ce:
bf:d2:6a:f6:d9:40:4b:e4:f1:4c:c1:6d:33:35:f6:e0:3c:83:
cf:97:9a:a8:ac:f7:23:0b:d9:45:72:4d:42:7d:04:b9:f1:48:
45:64:0f:70:d3:b1:6a:9e:68:25:05:9e:e7:83:a3:cb:e7:e5:
04:3b:1c:a5:88:41:9a:3d:3d:14:0f:ac:fc:a5:48:4f:cf:8d:
95:38:e4:43:ed:f6:fe:d5:4a:53:43:b4:74:8b:67:41:49:29:
7c:32:68:55:84:5a:6a:5a:3e:08:8d:21:d0:07:1b:c0:1f:58:
8c:60:f2:da:b0:16:d6:16:ed:27:ee:c2:0b:5b:fe:b5:ed:6a:
66:d4:8b:5b:73:d0:2d:fc:70:59:f7:43:b3:f0:20:54:f0:76:
c6:cb:c6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:42 2026 by rpki-client