Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
File: i6gkldaDsIyIGoGM0B-kL_9v9tE.mft (raw, json)
Hash identifier: PL+boJ5RRTLMf28Lsi4RUf9krkZYrhJtngMq7mvjnxc=
Subject key identifier: 57:AD:60:FC:0F:B7:B0:D2:E6:AB:01:17:29:DA:F2:A6:9D:37:07:6C
Authority key identifier: 8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
Certificate issuer: /CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Certificate serial: 019CAAC722556B054DE3AF6B89E1D90073B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
Manifest number: 043B
Signing time: Sun 01 Mar 2026 19:01:43 +0000
Manifest this update: Sun 01 Mar 2026 19:01:43 +0000
Manifest next update: Mon 02 Mar 2026 19:01:43 +0000
Files and hashes: 1: i6gkldaDsIyIGoGM0B-kL_9v9tE.crl (hash: o0CS06YMFwug31hGipTGrCsrfO8iuUcS/6XsSOqHeA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:22:55:6b:05:4d:e3:af:6b:89:e1:d9:00:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Validity
Not Before: Mar 1 19:01:43 2026 GMT
Not After : Mar 2 19:01:43 2026 GMT
Subject: CN=57ad60fc0fb7b0d2e6ab011729daf2a69d37076c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:ac:2b:ee:10:55:56:43:37:b7:75:c1:9a:
68:ab:8e:f2:2d:fe:10:5c:f0:29:60:28:bc:ee:5d:
d6:f4:24:17:10:67:47:74:2e:ee:ce:64:b4:a0:06:
8d:bb:ba:e6:38:99:44:ab:3b:ed:cc:9f:e0:95:33:
e4:34:7e:66:f8:77:49:3d:e0:3e:63:24:4e:1d:46:
f0:2a:8a:ec:a3:58:ac:0c:3e:9b:02:ff:42:45:8e:
85:d2:a4:f9:5b:ca:e3:33:e6:8a:3a:ad:2d:53:b1:
8f:07:b4:c2:df:7d:89:3d:b2:44:fa:cb:47:89:5b:
a1:c4:b7:9f:54:af:6d:05:20:11:ef:ca:9d:22:f1:
3c:40:69:57:25:fe:42:f0:e2:23:1c:ab:d5:9f:74:
5e:b6:8c:8f:b8:2f:0c:d3:7d:ee:01:42:66:76:bd:
36:96:97:9b:0b:31:a1:cf:d5:b5:54:70:78:40:60:
d3:48:7b:ed:93:82:1c:98:bb:3a:9f:cf:e8:c2:1f:
e2:5d:cf:f1:40:a2:17:f1:c0:b3:85:bf:ac:db:2a:
4e:ff:4b:92:b7:2e:a3:a2:1c:f9:58:6f:5f:d4:ad:
41:a9:f2:18:4c:b0:75:cb:7a:29:74:f3:07:36:74:
fe:45:75:d9:6a:04:59:d7:a0:10:82:0e:bb:ca:35:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:60:FC:0F:B7:B0:D2:E6:AB:01:17:29:DA:F2:A6:9D:37:07:6C
X509v3 Authority Key Identifier:
keyid:8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:84:d7:18:dd:5a:56:4f:3a:ab:8e:33:49:e8:38:2b:08:ab:
12:b9:c2:88:5e:3e:6e:33:46:05:9f:e8:96:1b:93:59:18:4c:
0f:89:5d:83:d1:57:3b:41:da:f3:10:53:78:e2:02:46:75:70:
17:75:7c:c9:36:c7:43:ec:17:7d:cd:8c:c9:1d:f9:93:5c:2f:
cc:6a:7a:0e:77:cd:f5:cd:fe:cf:57:ff:ec:04:e4:58:34:98:
40:1b:79:52:0b:a9:a0:85:9f:3e:65:11:b9:f2:84:2d:cd:c6:
fa:29:ad:aa:fe:af:6d:f2:aa:2f:c3:46:19:42:1b:a4:11:1d:
4d:df:8c:ac:ca:ea:7d:b7:21:ff:13:d9:15:35:b7:e4:06:6e:
2f:ac:e8:29:b0:38:e6:14:a4:ca:27:26:b5:66:a1:d9:bc:24:
82:dd:f6:fe:e7:10:b0:fc:1a:c7:f7:da:6c:0f:7c:4b:f3:43:
58:d6:df:54:6f:95:eb:9e:e1:a8:ae:59:4d:35:46:c1:10:59:
4e:c0:cb:ab:5a:1d:bc:b6:3e:dd:06:5d:b9:11:c6:87:79:fa:
e0:60:c5:50:4a:ca:a6:50:28:22:31:1d:b4:4d:cb:24:80:c3:
9f:59:5f:a4:6e:81:c6:f8:56:67:ea:9d:6c:43:0b:ac:aa:56:
8f:bd:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:55 2026 by rpki-client