Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
File: miIdT5cAcYIi7es06TinZjQ_JOE.mft (raw, json)
Hash identifier: IuOz+AApXdAyEZJQPvSUpt5y30+5u7duW3sfLxG6SGA=
Subject key identifier: E2:60:B0:7B:34:EA:78:56:A2:B4:09:BE:CF:D7:80:0D:07:02:BB:AC
Authority key identifier: 9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
Certificate issuer: /CN=9a221d4f9700718222edeb34e938a766343f24e1
Certificate serial: 019CAD5A4B7815CB826A8B736108043DF1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
Manifest number: 16F1
Signing time: Mon 02 Mar 2026 07:01:41 +0000
Manifest this update: Mon 02 Mar 2026 07:01:41 +0000
Manifest next update: Tue 03 Mar 2026 07:01:41 +0000
Files and hashes: 1: miIdT5cAcYIi7es06TinZjQ_JOE.crl (hash: 2Cj5ijEYjsyn1CEK9WjUqpe4Uj7DCsGDtL1kIhCXLTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:4b:78:15:cb:82:6a:8b:73:61:08:04:3d:f1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a221d4f9700718222edeb34e938a766343f24e1
Validity
Not Before: Mar 2 07:01:41 2026 GMT
Not After : Mar 3 07:01:41 2026 GMT
Subject: CN=e260b07b34ea7856a2b409becfd7800d0702bbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:35:4d:d1:df:44:7c:aa:7c:8b:d7:03:04:
a7:ba:15:ff:e1:96:c1:1c:2e:a0:2a:f5:20:d8:97:
7a:ad:37:82:8c:18:e0:35:20:72:5a:51:8f:5c:09:
16:4c:bb:ee:04:e3:cf:34:15:ac:b7:14:93:1c:d8:
a6:08:88:64:3a:f9:1e:a2:59:68:5a:3d:32:02:13:
ab:75:1c:8d:13:1a:84:81:3b:db:d5:4d:c9:45:ec:
66:95:9d:28:89:3c:21:3b:b8:f1:1c:49:87:d9:45:
45:f2:f3:f1:65:8d:af:30:f6:a4:17:31:12:ea:aa:
19:3e:89:ba:59:0e:46:1e:54:e0:3d:cc:4d:db:e3:
1d:82:1e:e8:e9:92:0b:86:41:e6:03:76:cd:91:12:
05:d0:61:3b:b0:09:36:69:91:90:2e:66:93:79:e8:
82:90:b6:97:9a:52:a1:d9:a5:25:8f:6f:b2:ac:9c:
29:3c:07:72:e4:10:3a:42:9c:7f:e7:08:cd:52:9f:
cc:ae:20:78:3c:ca:0a:4a:85:e1:17:51:17:0e:d2:
f9:ce:2d:7d:a4:8f:a4:19:91:7e:9a:03:4c:8e:90:
d4:21:0b:da:71:2f:ca:21:79:4f:6b:0c:30:58:fc:
f1:20:c3:5c:e7:1b:35:a8:d7:33:36:4e:67:2b:db:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:60:B0:7B:34:EA:78:56:A2:B4:09:BE:CF:D7:80:0D:07:02:BB:AC
X509v3 Authority Key Identifier:
keyid:9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0d:cf:d7:07:7b:d4:21:9b:71:aa:da:00:ad:a2:35:49:65:
6f:ec:22:d4:64:53:0b:94:23:4d:35:b1:2e:e0:b6:61:8a:94:
cb:49:64:f8:aa:94:08:af:5b:f3:2a:9d:97:f2:a3:c0:29:93:
bc:00:c7:fc:3b:a4:5c:da:74:cc:37:32:67:05:cb:07:36:b5:
69:f9:8e:04:9f:af:5a:01:b1:7b:1a:9d:b9:a4:19:3f:2c:63:
9b:ee:13:dd:9a:06:16:f8:72:cb:94:83:e8:e1:cb:a6:a9:c7:
ed:79:69:ab:e4:a2:a9:f4:71:ca:dd:56:4b:f9:f2:81:89:89:
2d:f7:1f:4a:f7:6a:8b:49:fc:af:73:2c:32:b8:51:84:2a:c0:
fc:fb:e4:d1:99:4b:c8:ff:6e:69:0d:fc:b3:de:96:8d:33:34:
0a:e9:4c:bf:07:f5:8c:5b:ef:9e:1c:8b:f1:46:1d:79:05:cf:
8a:96:c1:08:b4:43:84:4d:db:59:19:ce:a9:71:1f:6c:cf:30:
e7:15:7f:89:11:c5:59:b0:7c:63:ff:8c:c7:cf:a5:78:5a:7b:
ab:6d:ca:61:f5:f8:06:af:36:8a:18:92:bd:d1:0b:c8:f1:d3:
d8:be:63:51:11:6c:63:1f:10:72:2f:54:59:49:42:fb:7f:93:
4a:1a:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:56 2026 by rpki-client