Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: 5KNyb3+LaLXNJFVMWDoMIhi8/LzH88dEGS7rRepwIho=
Subject key identifier: 0D:99:C4:D6:09:90:6F:E5:1D:98:E1:42:3C:CF:0C:E4:79:BB:97:52
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 019CAB6AD03C0ED61EE85D35D050D7CADAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: KCg/z73d08haFewDlSkPzQYRoiksrsqFe9qDTYk1Tz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d0:3c:0e:d6:1e:e8:5d:35:d0:50:d7:ca:da:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=0d99c4d609906fe51d98e1423ccf0ce479bb9752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:6c:8a:cd:30:cc:9b:64:79:21:d8:b4:ec:
d0:d3:7e:5b:b9:ff:d1:28:e8:a6:62:45:bc:98:ce:
73:84:d8:6f:76:73:53:f3:d1:2f:86:3b:10:3d:32:
20:ec:3c:77:d1:dd:58:4b:76:f4:81:44:05:a0:c3:
ae:bc:3f:ac:d3:42:36:54:62:02:8f:95:d8:51:8d:
e9:7c:6c:3e:05:55:10:7b:84:fb:5c:cf:41:f4:ba:
ac:9b:6e:8d:08:81:9f:a3:57:76:5d:f0:87:34:7e:
f7:77:9f:53:6f:c2:8d:72:16:39:ec:b1:b1:92:18:
c2:6d:0e:29:52:45:99:3f:58:3c:4b:1e:a1:7e:e5:
17:ef:b2:64:5b:19:40:4c:c6:69:ac:4d:04:ae:12:
d6:d0:4d:30:a1:b1:41:c0:53:81:ac:fc:5b:06:60:
c8:dd:af:01:3b:c8:05:4a:ed:d8:e0:68:30:24:92:
9e:56:49:51:99:dc:8c:34:b7:7b:8e:ce:99:6e:65:
7c:12:9a:13:43:bb:0e:61:b0:eb:f2:4e:e3:ef:d1:
65:4d:4f:d3:f9:7d:2b:30:3c:10:50:15:40:8e:6e:
9d:2c:f2:15:c4:7c:62:99:f0:67:d6:48:92:17:a6:
c8:9d:f5:d5:8c:26:6f:11:02:dd:a5:14:3c:1f:55:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:C4:D6:09:90:6F:E5:1D:98:E1:42:3C:CF:0C:E4:79:BB:97:52
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:56:d8:e8:11:c8:a4:28:ea:8b:78:51:69:66:9f:f0:7f:de:
d9:6e:e0:7f:a8:7c:89:c9:46:34:b5:2e:08:5c:b6:56:3c:53:
0f:26:c0:ba:5a:27:81:6a:63:d8:1e:7c:50:6c:d3:fe:8a:97:
6a:fe:4e:65:06:3f:c0:4a:1e:71:5f:e4:19:2b:88:b8:59:98:
95:4b:a7:d4:94:6b:f7:c4:ba:49:8d:1e:30:1c:e5:61:ce:19:
17:0d:04:8a:8d:4f:5d:5c:24:8f:ea:f1:18:8f:42:c6:45:15:
bb:13:96:3a:33:5f:a1:c2:dd:7d:dc:e1:74:94:b9:ea:8f:9e:
fa:94:c0:7a:61:4b:c5:84:86:2d:05:90:9d:31:bb:8f:90:04:
2e:1e:ec:d3:6a:d8:4e:66:04:7f:6f:56:6b:3a:6b:ad:f5:6b:
cd:38:18:8d:e7:e2:32:6f:9f:6b:da:60:d3:61:3a:0f:7d:bf:
fd:cc:37:b5:89:37:99:07:b6:1c:e3:c7:a6:aa:a6:22:c1:5e:
c9:18:31:69:9b:20:ad:dc:5a:8a:8f:10:04:f1:71:88:fd:d0:
f9:ca:53:79:31:d7:1f:f4:3d:ad:9f:f4:7c:1d:a5:43:a1:bb:
80:fb:1c:1e:08:e9:74:5b:5e:89:b1:a4:87:c8:d4:4d:87:ec:
ce:eb:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:03 2026 by rpki-client