Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
File: iqR9CPyFIT30_aLPlWG45ovCc9w.mft (raw, json)
Hash identifier: xMjY4CZhjjtxMBgZePbqPIS6fl8vFhUcDObjgXBk6Ko=
Subject key identifier: 32:5B:B1:37:61:DE:6B:8C:6E:BA:AE:F5:8D:D4:BD:81:EF:3D:02:76
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 019D273B2C961F8C924E0068994153FBCA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
Manifest number: 0D16
Signing time: Wed 25 Mar 2026 23:01:22 +0000
Manifest this update: Wed 25 Mar 2026 23:01:22 +0000
Manifest next update: Thu 26 Mar 2026 23:01:22 +0000
Files and hashes: 1: iqR9CPyFIT30_aLPlWG45ovCc9w.crl (hash: iANtw/HDUYudEJ7LpdgUU81VPMew9GySc0QD0Ew0rC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2c:96:1f:8c:92:4e:00:68:99:41:53:fb:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Mar 25 23:01:22 2026 GMT
Not After : Mar 26 23:01:22 2026 GMT
Subject: CN=325bb13761de6b8c6ebaaef58dd4bd81ef3d0276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:fe:7b:0c:b7:de:02:1a:03:e6:f4:58:0c:
4a:fe:e5:25:e9:2b:9f:dc:86:ac:ac:45:67:0c:4b:
11:8e:c5:7a:77:a9:58:87:9d:52:4b:eb:44:57:ed:
d5:17:80:c0:83:f8:f0:fc:7e:b0:c2:2a:64:00:9f:
f0:9b:cb:d1:44:04:0b:a7:0a:b5:0a:89:1e:5d:6a:
89:4a:2b:41:2e:22:31:54:90:a0:80:55:09:11:df:
df:df:35:4e:44:04:9d:b6:6c:22:69:6a:99:16:d3:
56:92:3e:db:de:24:5e:5d:05:e4:20:2a:54:bf:93:
f4:42:8d:e9:0b:f9:3d:d6:5d:7d:8e:5c:2f:1f:59:
b7:2c:a2:aa:0f:37:1f:8b:17:d1:a9:c4:8e:55:9e:
ca:68:fe:6a:87:bd:fc:c7:d8:b1:78:16:35:50:79:
79:a3:01:e5:54:c6:26:ca:01:6a:32:8b:e8:91:ab:
eb:db:cd:d9:0d:b3:b3:cc:4a:75:22:f2:90:4e:f4:
4d:0a:48:61:84:03:ce:0a:a5:c9:69:d4:c2:2f:a5:
aa:f6:88:35:34:4e:f6:cd:08:f9:99:58:36:c4:7d:
b7:9d:e9:c3:8d:c6:f0:f0:53:35:e9:0e:a0:6b:dc:
b3:69:f0:bc:41:86:de:a1:89:bf:29:e0:ae:ab:a1:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:B1:37:61:DE:6B:8C:6E:BA:AE:F5:8D:D4:BD:81:EF:3D:02:76
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:08:64:5d:8b:03:87:63:7b:0b:15:02:60:84:36:b3:8b:53:
c4:0a:cf:89:2c:14:13:8c:61:d5:ef:59:2c:de:6d:6d:17:1a:
98:56:14:58:7b:45:f7:74:27:14:55:61:a7:81:59:b8:9c:d1:
cc:2e:62:13:ed:04:f3:cd:2a:6f:f6:15:01:dd:e9:27:db:fe:
22:2b:e6:90:cd:be:d2:a8:c2:da:97:e7:76:71:7e:5c:f1:25:
9b:79:80:81:33:14:79:43:45:a1:a9:90:b4:da:49:9d:77:ba:
3d:83:31:2a:49:44:25:77:98:c7:4e:36:91:8f:78:04:4d:16:
51:28:08:66:05:77:51:96:7f:88:d3:4b:83:05:03:0e:81:6b:
75:54:ba:a6:67:62:3e:99:ba:8f:8e:4b:dd:13:bf:c8:88:1a:
29:86:08:f5:09:36:1a:03:d1:0f:72:e3:70:86:d2:4b:fe:1d:
73:90:9f:7a:4b:3d:e3:45:a6:89:e5:9b:5a:cc:a4:a0:3f:bd:
1b:6a:3d:ba:3c:bc:3f:d4:49:46:24:84:7f:ce:78:43:48:59:
23:0d:51:c7:f4:05:28:80:35:ba:12:86:9d:47:1c:4c:67:4b:
b7:b1:a7:99:d1:e5:46:fb:1f:11:ef:3c:e9:ad:e7:9e:82:28:
47:ca:bd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:34 2026 by rpki-client