Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier: zElJDVI+j09Rd+ZClYTRNS5BJ0aS7t4juhb9FMyu1H4=
Subject key identifier: 8A:36:06:2B:DF:BD:44:2C:19:2B:47:FF:3C:89:0E:9C:93:8B:25:FA
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial: 019CAB6B2ADAF0F917612C8B4A3AC8E08124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:53 +0000
Manifest this update: Sun 01 Mar 2026 22:00:53 +0000
Manifest next update: Mon 02 Mar 2026 22:00:53 +0000
Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: +eZQtgRMYlXqCcr/JzXY5IlNNMIEkZIP40h3znOaqtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:2a:da:f0:f9:17:61:2c:8b:4a:3a:c8:e0:81:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
Validity
Not Before: Mar 1 22:00:53 2026 GMT
Not After : Mar 2 22:00:53 2026 GMT
Subject: CN=8a36062bdfbd442c192b47ff3c890e9c938b25fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:20:40:6c:6d:cf:e5:fd:0f:5c:a1:19:3d:
e8:e5:a4:57:7d:ce:1b:6b:27:40:f9:b2:d7:ad:5b:
bb:33:a8:41:cb:55:a5:5f:58:81:d5:bc:4b:b7:b0:
d1:90:60:ff:75:4b:ed:9a:d4:63:54:26:97:77:86:
bb:8b:6e:4f:8d:09:5b:e5:4d:72:f8:aa:0e:35:6f:
90:f7:68:6e:ac:4b:13:b1:47:23:20:58:fa:c6:3b:
16:5d:dd:3b:49:f3:ba:8c:be:46:2f:45:1f:1d:ca:
74:77:70:c5:82:70:9f:7c:9f:e9:5a:eb:ed:68:61:
63:4e:82:12:03:91:e6:e2:22:0c:15:15:c2:25:46:
ac:29:b2:e9:7f:99:5c:30:d1:80:55:18:dd:8f:d8:
bc:50:92:b2:ee:7c:21:50:d8:5b:9e:a2:fa:74:fd:
9e:cc:a4:81:16:01:6b:4e:36:75:9f:fc:00:3c:68:
e3:18:93:07:47:0a:9b:96:b0:ad:89:d3:ac:65:ba:
af:70:6d:b7:26:e6:32:d8:43:ed:38:e0:b7:34:cc:
76:46:d4:61:b1:a9:ac:0c:a0:49:91:ed:ac:4a:5a:
d3:96:0d:02:53:4f:ff:5d:d3:d6:b5:f0:42:2e:67:
03:1d:d4:77:82:7a:c6:a0:88:7a:ac:81:1b:25:1e:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:06:2B:DF:BD:44:2C:19:2B:47:FF:3C:89:0E:9C:93:8B:25:FA
X509v3 Authority Key Identifier:
keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a9:80:59:71:aa:67:b1:05:5c:59:8c:fe:77:69:87:e4:d6:
ab:d4:09:22:38:7e:4d:67:e4:b5:b3:e5:f7:fe:a4:f6:51:81:
85:3b:99:8a:fb:5f:a0:e5:2f:ce:7c:09:04:bf:0d:de:f6:02:
20:49:b4:58:c0:cc:e9:a0:c3:11:d9:4a:02:53:d7:15:9f:4f:
01:cf:d6:e9:b0:9e:32:27:16:84:67:34:94:e7:01:09:bc:da:
8f:8f:f7:f5:ea:88:83:f6:a7:05:c3:81:b7:c3:51:f0:c8:86:
2a:b2:40:4a:9a:4b:4d:ac:ea:91:d9:2c:b9:1a:81:93:81:8e:
f9:a9:2d:ba:23:91:a3:41:7e:88:f4:1d:cb:e9:41:01:80:0f:
a6:6b:36:73:d8:13:f7:c0:ed:7f:b8:be:b4:0c:96:c2:ab:79:
aa:47:25:e7:d1:7c:4a:ce:76:ec:12:b2:96:97:aa:5f:6b:87:
2b:7c:80:19:52:fe:e1:90:8a:d2:62:de:85:50:bb:10:54:5a:
9f:d8:84:12:76:92:a7:b1:15:35:3d:68:e6:33:be:24:1f:c0:
41:d5:95:e7:4b:18:dc:70:bf:46:e0:0f:2a:98:02:a4:0b:00:
f5:f0:e9:f2:1f:c6:2f:4d:54:0e:85:b4:8e:2a:a8:97:ac:be:
a9:a0:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:07 2026 by rpki-client