Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: WDN/u4IqGsLTr9FhXlZKoSGBPPg9m3RCueEc1BWqg2A=
Subject key identifier: 38:12:B1:46:FE:17:63:FB:A0:E6:7D:FF:3F:10:6D:CF:F0:98:30:42
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 019CADFEC572872104847283B584EF8DCB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 10:01:20 +0000
Manifest this update: Mon 02 Mar 2026 10:01:20 +0000
Manifest next update: Tue 03 Mar 2026 10:01:20 +0000
Files and hashes: 1: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: AShNAvaWeQidmzlsQGWRS+KgfBrzGZVl0ZrJKBlO30E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:c5:72:87:21:04:84:72:83:b5:84:ef:8d:cb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Mar 2 10:01:20 2026 GMT
Not After : Mar 3 10:01:20 2026 GMT
Subject: CN=3812b146fe1763fba0e67dff3f106dcff0983042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b6:c0:84:3a:0b:10:b6:9f:86:c7:96:4a:e0:
fa:a0:5e:fb:ef:72:a5:4f:d9:79:6f:23:1f:38:95:
ea:da:f1:f3:d2:c4:44:e7:3b:63:8a:c5:51:be:56:
3b:82:98:3c:5e:0c:48:54:22:23:61:48:50:5e:6a:
36:84:e8:2a:0b:19:08:9f:34:bf:5f:4b:8a:19:3e:
6a:2b:62:a4:36:fb:35:bd:6b:3d:b2:37:0d:06:a0:
06:39:51:53:02:0d:c3:a7:a1:5b:55:cf:c4:bb:6f:
62:27:01:d0:12:fe:d9:d0:60:d2:b3:90:5a:be:ae:
91:dd:c6:e9:08:60:bc:7f:63:82:6a:a8:37:03:89:
a5:bb:b6:5a:f1:bc:e5:c4:f7:98:b5:1c:9e:08:5e:
d9:93:be:14:18:81:56:63:c7:dc:0a:00:57:8f:b8:
b8:87:93:87:fc:a7:1b:9f:a6:cf:6e:1b:c4:9c:67:
80:9a:e1:2c:19:7b:ff:e4:fd:1a:7d:4b:b7:de:b3:
95:c5:29:a0:9a:ea:dd:c7:f8:73:20:f8:de:a6:44:
e9:1b:10:f6:1f:7a:74:6a:8d:e8:f3:92:d4:80:e3:
77:82:72:8b:63:7d:1d:1e:3a:de:f6:e9:7a:14:72:
b4:63:a3:f0:ee:27:b3:62:ee:bb:34:16:c8:ce:97:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:B1:46:FE:17:63:FB:A0:E6:7D:FF:3F:10:6D:CF:F0:98:30:42
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ee:df:b6:d0:b0:48:33:fc:3a:e2:80:48:0a:a0:a2:f0:fb:
32:b0:95:8b:2d:fc:af:c4:c7:a6:21:ad:f5:9a:6d:0f:2b:c5:
b6:c0:5d:e1:41:fe:ed:38:e9:9f:d5:c5:e0:13:21:1c:2f:39:
09:93:df:88:34:fe:7c:61:46:ee:f0:54:17:3d:dc:d0:ea:d4:
f7:42:cc:5a:ff:50:ce:b8:8d:2d:52:6b:92:7b:7c:0a:d2:4c:
32:89:c5:9d:16:1d:bf:df:43:33:80:b5:ff:08:1c:07:78:71:
02:44:cc:1e:a9:33:55:78:42:c5:38:97:4b:2f:7f:17:0d:10:
87:e7:38:20:71:60:08:66:91:39:f6:ad:30:7c:f4:7f:d5:58:
d9:9b:c5:0d:ab:a0:2a:1b:8d:2f:3c:57:15:b8:f2:c6:84:1d:
ef:41:52:fc:f1:07:03:5a:46:e9:24:a0:77:1e:6e:84:3f:29:
d7:1e:3a:23:97:bd:5d:3b:49:b0:06:5e:a3:86:cd:cf:a3:48:
c8:a4:00:e2:1c:84:a9:fd:32:fc:5d:38:07:20:05:5d:08:8f:
23:8c:51:cb:5a:1a:3b:7e:3a:bb:8e:00:84:35:9f:3f:97:0e:
d3:07:8c:d4:5a:d8:43:ac:28:e3:43:9c:37:14:33:80:6a:74:
97:b0:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:38 2026 by rpki-client