Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: wrszjDkP3/949rRoDphziveixab+AEMOa7wzpQ9HuF4=
Subject key identifier: 90:1D:4B:BD:AB:6A:30:E8:6B:A0:74:8E:8D:86:13:D1:43:3A:7F:8F
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 019D984FFE027A8DF29D4E1FE52BDDB09C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 04C2
Signing time: Thu 16 Apr 2026 22:01:12 +0000
Manifest this update: Thu 16 Apr 2026 22:01:12 +0000
Manifest next update: Fri 17 Apr 2026 22:01:12 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: P5wKeoxctRjMTmMLbZyEyYKHjm6JuD87GSKmzOe4fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:fe:02:7a:8d:f2:9d:4e:1f:e5:2b:dd:b0:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Apr 16 22:01:12 2026 GMT
Not After : Apr 17 22:01:12 2026 GMT
Subject: CN=901d4bbdab6a30e86ba0748e8d8613d1433a7f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:24:e4:ac:95:7a:52:e0:44:a1:e4:b7:fa:
9c:d4:3d:6c:1e:7e:5f:e4:10:fc:61:4b:3e:88:52:
f2:ab:67:40:ac:d8:cc:cd:8c:30:b0:1c:8b:4a:31:
08:98:c8:0a:9b:f2:0c:7f:58:33:09:cb:3a:b6:09:
11:c2:41:56:ab:b7:ac:e3:61:45:59:6a:57:4d:41:
e4:65:3a:9a:07:45:7e:b8:d2:87:8e:12:6f:d6:1a:
cf:9b:49:2a:71:f8:fa:88:45:27:ca:a6:54:2b:c6:
1d:9c:8a:f8:80:83:cd:c7:97:d7:35:b3:5f:48:7c:
00:49:bb:5a:2b:34:58:0a:fd:da:3d:fa:99:c4:c5:
50:f5:20:b1:4a:34:af:6a:d0:3b:b5:2c:b2:d6:e6:
f4:50:20:ee:dd:bf:64:31:02:3f:2e:5c:a1:1a:98:
d9:3d:45:0d:98:96:0a:55:b0:ab:79:a5:4f:bd:91:
45:6f:b8:a4:1a:5d:ab:29:23:b1:f6:3d:fd:b1:02:
a5:db:60:06:c9:34:a0:10:0f:82:e5:22:de:91:ac:
1a:a2:f0:54:47:14:a3:33:20:8e:73:d4:2b:2b:e8:
12:72:69:55:64:8b:b4:d1:ab:ff:91:6b:c3:13:38:
5b:c1:7b:d7:6e:a8:37:ce:ef:04:94:79:08:21:12:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1D:4B:BD:AB:6A:30:E8:6B:A0:74:8E:8D:86:13:D1:43:3A:7F:8F
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fc:6c:4c:d0:9e:68:cc:ef:10:84:73:78:26:4a:44:e5:b1:
b5:8f:f1:d6:b0:5c:b8:d6:a2:90:a1:d3:08:ef:b7:8f:98:64:
ac:94:b8:72:02:16:49:a5:ff:10:9e:2a:b2:90:a7:93:d1:a3:
28:ed:78:d4:66:0b:6b:5f:01:96:bb:f5:5a:79:91:51:4b:8f:
2f:3c:70:88:d6:a0:d2:dd:b4:cb:6e:fb:45:70:30:86:19:b5:
f9:c9:61:1e:41:b6:4f:6f:17:84:43:3d:4a:73:9a:1d:93:f8:
e6:b0:c4:64:b3:fe:28:99:2a:40:cf:a7:a0:30:48:fc:f4:57:
eb:5d:a0:72:15:4a:c2:f2:a0:76:8b:73:7a:8d:58:04:c3:e2:
96:a7:c4:3d:b1:9d:5c:52:cf:a5:b7:c6:4a:eb:fb:78:bc:7e:
9f:72:69:7c:b0:26:a3:0c:b6:11:e0:d7:6a:8b:a5:ac:72:83:
45:35:b2:7e:22:d4:9b:1d:57:7c:a0:02:5e:d1:27:16:ec:6d:
ee:8e:d7:e8:27:ca:4c:bc:05:22:24:6d:df:97:de:a5:fe:c8:
6d:72:f1:63:2e:90:00:40:af:5e:04:56:73:72:88:4f:de:ab:
40:78:a9:b9:67:75:fd:00:9f:d1:bf:5e:79:6d:f0:89:d6:9f:
03:db:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:43 2026 by rpki-client