Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: NB4ygGKJuGgWoZ87dG+LLWgIKIoiDeS4SfEYUiOV0DE=
Subject key identifier: 25:8B:B5:FA:08:BB:5B:18:86:BF:60:52:45:FC:CD:F8:67:58:9E:2D
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 019D27A8B83FF7D3C64325402ABE762DCF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: V74X0Pnob6H2eWGj7mMJm0+F6wus7nfp+zYOJYwNeVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b8:3f:f7:d3:c6:43:25:40:2a:be:76:2d:cf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=258bb5fa08bb5b1886bf605245fccdf867589e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:72:7f:9d:df:21:ef:58:fa:36:a5:bc:7e:
83:ea:84:60:96:06:9e:9e:3e:fd:e2:59:89:5f:08:
7f:90:24:3b:40:10:e1:c0:b6:83:05:d5:e2:5c:be:
12:d7:fb:15:a1:e6:94:91:ac:8c:cf:30:73:00:a7:
dc:0a:be:e3:ec:3a:05:5a:c1:38:b6:8e:5e:7e:33:
e4:ac:92:3f:65:a8:88:f6:ed:2a:98:10:0b:b3:2a:
42:64:cf:0e:49:1e:42:51:40:41:66:2d:bb:6b:09:
c0:d5:c1:0e:0b:c7:87:18:9e:b0:13:a5:0c:36:8a:
51:63:fb:db:4a:03:42:f1:b1:b0:f0:47:be:7b:30:
0d:8b:82:1c:ab:16:8b:c9:ef:ee:b5:4a:7a:90:ad:
64:8d:ba:f7:a4:4c:96:66:19:68:7f:6b:49:85:5e:
e6:d3:57:b3:6e:c3:43:f6:2b:e6:3a:7e:56:dd:a9:
27:6e:0d:64:7a:08:d6:5a:1b:37:b0:d2:82:1f:c3:
2b:e1:fd:9e:f7:d5:34:ce:ea:15:34:56:2f:f4:d2:
aa:93:17:6f:f5:70:ae:11:ae:1a:c1:ce:d6:78:21:
91:d0:0b:74:71:0f:17:27:ce:6d:b1:7c:a9:87:35:
2c:84:c3:d7:a2:a3:3b:6f:4a:e7:b6:52:c2:40:d4:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8B:B5:FA:08:BB:5B:18:86:BF:60:52:45:FC:CD:F8:67:58:9E:2D
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:84:30:75:21:3b:5f:20:d7:98:91:6b:d3:91:09:d5:f5:0a:
76:de:d8:bc:23:4c:04:5a:c9:1f:16:1c:c9:57:36:73:d2:98:
00:df:d3:cb:7e:0a:33:48:0f:a6:fb:8c:64:52:83:79:9c:37:
c6:0b:b0:e6:dd:ee:26:68:77:bc:92:93:1b:e4:a0:84:c8:97:
23:b8:04:ea:3b:8e:0b:9b:12:b3:ba:62:e7:2c:79:49:ee:4f:
fe:f8:63:1d:a2:05:fd:7f:96:10:11:d9:e7:92:ed:13:04:94:
c1:d5:cf:c5:8e:ef:49:35:54:6f:e0:e8:ea:06:39:f4:81:37:
6b:77:76:f5:83:e5:51:02:10:b3:b9:00:e4:56:ff:fb:35:be:
c6:78:32:83:79:1f:8e:d5:fc:fa:89:ef:a1:d1:ac:b6:82:7f:
20:96:dd:7b:85:07:ef:ed:f1:8c:f5:10:30:bb:4d:2e:32:69:
59:52:4d:78:f1:89:f7:49:7f:13:aa:b4:8b:3e:21:6e:ba:b4:
ab:03:e2:b8:e2:3f:89:c2:92:12:6b:e7:7a:2f:e3:50:1e:1c:
17:9a:f8:82:bd:a1:e0:9e:6d:85:af:9d:d1:8e:84:28:38:83:
68:90:d5:39:84:f7:45:84:9e:2c:38:14:3c:6a:97:93:d9:01:
59:77:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:41 2026 by rpki-client