Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: +yO6Vp4qq+MpRCpHlB+oGKZ3ieNxXWDi9jhQCD1YLug=
Subject key identifier: 0C:0C:85:13:19:6F:24:D2:0D:65:BA:B4:88:C9:35:78:4D:F5:91:D3
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 019CAA58523B7387705665F4FCC9B41A7094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 1672
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: WiiQ+a0uCWu5Gvi77zh+BIBvqfLviipt/nxgz4zh720=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:52:3b:73:87:70:56:65:f4:fc:c9:b4:1a:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=0c0c8513196f24d20d65bab488c935784df591d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:58:c9:21:05:47:f7:d9:b7:11:99:9a:9e:
3d:1d:be:f3:b9:b1:f3:65:31:e7:7e:37:64:68:4a:
b1:fa:0b:1c:8b:7f:22:58:b6:7f:a3:16:34:55:1b:
a2:8f:a4:6b:d3:29:55:79:70:0a:35:ca:cb:df:f1:
8e:95:83:8e:16:4f:ff:f9:91:c5:39:1d:e6:b9:bc:
9b:c8:a4:4a:ce:55:42:1d:eb:5c:d8:c5:69:6f:9d:
b7:fe:27:a0:62:b2:d2:04:57:5f:3d:07:91:26:99:
cf:09:ba:fe:80:9c:b8:43:38:2f:b3:0f:c1:c7:cc:
f6:76:f3:4d:7b:cf:c2:8c:44:14:a1:77:86:3d:a0:
11:25:f0:f8:a0:63:91:ab:57:73:f1:a0:ce:a2:7a:
a2:06:45:43:6a:7d:e8:c1:84:55:95:8f:8e:b5:0c:
19:e2:67:9c:25:be:e5:5f:0b:56:a1:62:9a:c7:5d:
be:c3:84:e6:b8:8f:1f:8f:2a:f0:21:f8:d6:9c:3c:
c9:54:49:c1:c7:a1:7b:0d:6c:2f:12:01:37:f7:1e:
1d:c5:f6:ed:ea:a3:ea:ad:c5:2a:74:7b:73:0b:92:
9e:20:d4:f2:08:c9:3c:f5:86:a1:88:bf:41:41:82:
e2:71:4e:da:2d:f2:f4:2c:b7:7f:73:0c:b9:1c:1a:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0C:85:13:19:6F:24:D2:0D:65:BA:B4:88:C9:35:78:4D:F5:91:D3
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:f6:ca:1e:b6:20:42:17:a2:4f:ce:7c:5f:e5:c3:9e:fa:
d4:25:3e:39:af:68:ed:d8:7c:03:9d:0f:0f:ff:31:4d:55:fd:
d4:53:05:09:09:33:4d:ff:3d:66:e1:d7:71:5e:47:b4:c4:f4:
f1:44:bd:78:ea:4b:55:0f:d0:8e:cd:5f:ca:e0:a4:6a:55:5c:
88:51:2e:93:14:0d:04:6f:47:fb:39:b5:12:6e:df:06:b5:1f:
93:92:88:e1:99:a4:a6:14:cf:8f:3f:90:8c:c8:05:c6:db:7a:
c8:dc:32:59:33:cd:72:0e:4d:10:09:e0:55:3a:7b:6f:e1:3e:
b0:9c:d0:6c:fe:11:d3:e4:c1:58:6c:85:46:f2:ba:dd:35:93:
05:7e:7c:9d:da:1c:2a:86:fe:30:9a:87:da:b8:b4:38:6d:5a:
b8:0f:7e:0b:a8:58:f5:a0:35:e6:8c:0b:68:48:18:9c:a0:03:
ea:a4:8e:3c:10:66:a6:05:b7:e7:f4:30:ed:6b:24:ee:35:6e:
b4:f6:1b:51:90:a4:b7:66:8c:c7:a3:c1:d7:fa:2d:f2:74:4b:
14:1b:84:a7:d0:d9:85:9c:8b:94:f2:0c:27:dd:64:50:d1:38:
9b:6f:5b:85:6f:0b:c5:74:46:4f:43:70:76:18:7d:85:c8:58:
e0:71:8f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:23 2026 by rpki-client