Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
File: IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json)
Hash identifier: 8UWsshe+ge+8GMKpcVK1ZNlnW/Rab8cfgR6xN8PyqCQ=
Subject key identifier: 14:21:8E:C3:93:27:E6:39:B8:7C:78:9F:94:A1:09:C4:E0:8F:9C:06
Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
Certificate issuer: /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Certificate serial: 019D28F24E5D564D3C901D383E4D96910EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
Manifest number: 14AB
Signing time: Thu 26 Mar 2026 07:01:01 +0000
Manifest this update: Thu 26 Mar 2026 07:01:01 +0000
Manifest next update: Fri 27 Mar 2026 07:01:01 +0000
Files and hashes: 1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: 6CsoPYdJs5iaA9rYu0aZ28WJTADRggampAamUhLFzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:4e:5d:56:4d:3c:90:1d:38:3e:4d:96:91:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Validity
Not Before: Mar 26 07:01:01 2026 GMT
Not After : Mar 27 07:01:01 2026 GMT
Subject: CN=14218ec39327e639b87c789f94a109c4e08f9c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:ad:af:37:94:db:eb:90:eb:dc:09:94:32:
25:10:d7:75:c3:f0:32:91:df:f3:e6:4f:e1:cc:be:
f9:59:ce:2b:00:ea:73:3f:87:4f:e9:1e:c9:26:7f:
7a:d3:07:2f:4a:92:01:f2:fc:75:c2:42:54:fc:ce:
e5:87:a7:22:7e:20:fc:7f:c3:cc:5d:36:32:fd:a7:
ed:ee:bd:02:ba:6a:b9:de:78:c5:50:3b:93:0f:3e:
6f:76:ae:26:d0:eb:b0:5a:bf:03:5e:33:b2:2b:f2:
88:9e:2e:8c:c7:dc:10:33:68:c3:cc:9d:bd:cc:5f:
81:d7:85:6c:51:ab:74:6f:b5:9b:ef:9b:2c:f5:4c:
54:22:91:12:6d:75:fa:88:51:b5:16:0d:c0:39:d0:
74:4c:ad:81:e8:23:4c:06:8c:ee:6d:d6:0b:83:6f:
fd:2b:23:03:2b:da:69:44:fb:dc:75:44:34:58:c4:
9f:d1:95:d2:24:72:b2:dc:84:6e:ff:34:b5:b6:89:
65:2b:59:ed:f7:61:39:8f:58:d0:71:38:aa:34:c8:
03:30:36:0d:7f:b6:34:04:ef:15:12:13:14:0e:61:
73:44:af:0d:14:6a:9d:65:c5:82:96:c3:16:ff:78:
f1:09:31:ce:e7:cf:17:cf:c4:99:cc:ee:5f:93:5c:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:21:8E:C3:93:27:E6:39:B8:7C:78:9F:94:A1:09:C4:E0:8F:9C:06
X509v3 Authority Key Identifier:
keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:08:b5:52:e2:57:2d:76:b2:64:8f:52:1d:ee:cc:9d:74:de:
48:9b:11:d2:7a:34:a7:a2:91:10:94:07:f4:55:c1:73:63:4b:
86:c7:0c:ac:82:2c:ac:b8:f3:f9:a5:72:e9:36:0f:81:da:f0:
81:dd:dc:48:2a:05:4f:09:0d:7f:60:6b:c0:4e:be:08:82:09:
bd:ae:45:aa:0e:d3:11:3b:04:12:bd:73:67:e2:7b:ad:c6:37:
a4:97:57:31:30:e2:26:33:c7:d9:4f:ed:39:c5:c5:6d:80:15:
3d:ea:ba:a0:2b:c5:81:e2:7d:d2:b9:77:75:b4:18:79:e9:82:
8e:59:b0:55:77:5b:86:32:be:26:01:df:e7:3d:de:cf:44:6d:
ea:51:a9:4f:7f:09:d7:1f:6c:fa:4a:f7:af:bb:68:d1:b3:5b:
bf:42:b1:8a:8d:e0:87:a9:b2:74:ae:39:a8:5c:a9:30:52:b5:
4c:f8:cf:08:8b:49:da:34:b6:8f:23:d3:32:fb:be:15:91:ca:
45:07:c8:fc:9e:97:fb:3d:42:40:38:c0:b6:0c:dc:cc:7e:03:
52:da:01:a8:80:23:df:55:ed:04:d5:83:85:37:fd:b5:14:80:
56:62:25:33:9a:45:d7:94:35:e9:79:c6:bc:e2:70:ca:eb:e3:
cb:69:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:06 2026 by rpki-client