Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: xWW8q/XnJ2hhAVPXUyusfhb7UbgvwbmYi1X8QDv7XgA=
Subject key identifier: F9:3E:70:46:DD:C5:A3:F6:C9:43:09:48:7D:C5:C1:3D:83:A2:86:2C
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 019CAAC5FE0F9B0BA78ACB300640846B0C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 0447
Signing time: Sun 01 Mar 2026 19:00:28 +0000
Manifest this update: Sun 01 Mar 2026 19:00:28 +0000
Manifest next update: Mon 02 Mar 2026 19:00:28 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: LmUrH86swQrpXXzW8hv6wvpSVBD/qkmLjr2ofl8/L8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fe:0f:9b:0b:a7:8a:cb:30:06:40:84:6b:0c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Mar 1 19:00:28 2026 GMT
Not After : Mar 2 19:00:28 2026 GMT
Subject: CN=f93e7046ddc5a3f6c94309487dc5c13d83a2862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:b2:a4:8c:b0:53:22:a0:d5:70:41:b9:1a:
22:1c:51:30:04:48:7b:31:53:29:51:5b:4a:aa:da:
ae:55:b9:c8:b4:d3:5b:f9:d3:e8:cb:6f:68:83:08:
4d:d7:72:3d:61:77:3c:96:63:39:f6:5d:ea:7b:f0:
05:28:44:11:35:c7:c7:9d:ce:b3:4b:8f:f8:77:17:
a7:92:e2:22:53:99:2f:10:14:1e:07:c2:34:2a:c6:
17:80:20:ce:5e:73:25:0c:ac:7a:5c:a3:5c:8c:4f:
ac:29:cd:5f:03:a9:c1:65:52:f5:96:01:5b:62:62:
ce:7d:5c:e8:06:07:92:3d:69:ed:00:c3:93:25:a9:
47:41:12:8f:8f:9d:6a:a8:42:eb:27:07:56:4a:57:
b6:2f:2e:8d:1b:5a:f3:f9:f4:c9:12:ea:21:30:36:
d2:90:1b:93:12:7d:d0:ae:90:94:2b:b4:40:a9:65:
ea:99:82:ae:9c:f1:a1:be:e6:04:a5:4f:ca:95:93:
88:8d:87:84:f1:44:d8:15:0b:1f:77:6d:3a:87:82:
93:b2:23:2e:a1:b5:90:01:63:6b:b7:7e:b9:7d:38:
a6:b2:be:3e:a8:d1:45:e8:52:1b:64:a5:1c:98:a7:
12:bc:85:c1:35:77:8d:9d:d2:46:09:a7:15:09:09:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:70:46:DD:C5:A3:F6:C9:43:09:48:7D:C5:C1:3D:83:A2:86:2C
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f8:fa:23:53:79:01:7e:c7:b7:d8:d2:f7:c2:6a:64:ef:01:
08:b7:26:16:7a:8e:df:17:68:d8:9b:a9:c3:a2:5f:98:37:35:
0a:80:1e:5d:f9:1b:91:d5:a5:cb:49:c2:bd:15:02:7a:dc:de:
02:7c:0c:d4:7d:8d:b4:df:39:ba:4e:61:4c:99:8b:6b:2b:c4:
29:d5:75:ce:10:48:89:eb:fa:a0:00:1a:bb:cd:10:01:2b:5c:
93:4b:20:8f:50:47:c9:b9:b3:30:f4:be:65:6d:93:04:87:01:
36:6c:2c:7b:cd:0f:90:60:a6:da:61:f1:3a:8f:14:88:3a:e7:
83:bb:fd:27:d1:fa:43:d9:c6:c7:de:53:94:24:44:01:3c:f7:
19:69:72:e1:b6:48:45:e2:45:ef:dd:71:ff:02:06:d3:7f:25:
b1:fc:f5:99:d3:e8:bf:f3:3e:2b:ae:69:44:1a:ad:72:71:64:
0e:6d:85:a1:30:7e:95:3a:f1:94:95:d7:fc:91:56:0f:6e:c2:
fc:fd:25:73:f5:a1:26:7d:06:21:cf:70:50:18:76:49:3f:dc:
70:48:d3:fb:eb:a6:bd:a3:91:a2:14:62:aa:eb:52:b6:7d:71:
c3:8e:a2:66:29:64:61:c2:b8:90:28:17:e4:ee:6a:66:33:e4:
79:f7:be:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:31 2026 by rpki-client