Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json)
Hash identifier: ynYSKyar6W+me20bRC4HasAyosNGgwhMdeffUKe8vzo=
Subject key identifier: 51:E5:80:2D:D1:97:3E:C7:4E:7E:49:C3:BD:3F:E2:DF:72:3E:51:1D
Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
Certificate issuer: /CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Certificate serial: 019D329A717BD4516844A1518AB12891EF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
Manifest number: 0F05
Signing time: Sat 28 Mar 2026 04:01:15 +0000
Manifest this update: Sat 28 Mar 2026 04:01:15 +0000
Manifest next update: Sun 29 Mar 2026 04:01:15 +0000
Files and hashes: 1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: 6pPDrGVJnodVOchQIJTw4ZlNylotPCe/joB4dWw8jGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:71:7b:d4:51:68:44:a1:51:8a:b1:28:91:ef:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Validity
Not Before: Mar 28 04:01:15 2026 GMT
Not After : Mar 29 04:01:15 2026 GMT
Subject: CN=51e5802dd1973ec74e7e49c3bd3fe2df723e511d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:f9:6c:fd:78:f0:e8:4f:2f:83:17:12:4c:
1a:10:cc:56:8a:1b:94:31:97:58:5d:b4:12:5d:14:
ef:3d:f0:30:cb:7b:ce:07:84:9c:2b:10:c0:fe:82:
c4:0a:79:44:28:00:76:49:3c:d4:5d:95:b2:5e:0a:
c6:b2:58:76:28:ea:7d:f5:24:0b:91:5c:3a:0c:b9:
22:05:b3:d8:f5:ef:4b:73:6c:9c:bc:8d:75:e8:43:
1d:a5:a1:3c:c4:64:a6:0c:80:9d:4e:3b:b5:90:7c:
b4:23:49:e1:b1:4b:ed:6d:c4:0d:fb:36:e8:77:a5:
82:bf:b9:f7:35:07:0f:db:47:3a:dc:54:87:16:bc:
df:32:5f:1f:d3:30:88:42:d4:f9:9e:ea:08:ce:82:
96:1f:3e:7d:0d:c5:57:c9:d8:6f:4f:f5:64:66:f9:
63:bd:b5:58:65:5f:6d:49:44:1b:5f:f0:24:32:5a:
69:e2:4a:65:d6:a8:e1:8d:f3:76:6c:59:d7:29:f5:
bb:24:3b:7f:41:97:4c:3c:ec:e7:ed:48:a6:51:34:
2d:52:07:a9:cb:6e:0f:a4:3c:99:60:83:bf:07:25:
6c:71:f4:55:bc:e6:a1:b3:4b:51:0f:f0:8a:c6:7c:
33:e3:2b:03:bc:c0:e4:23:60:fd:19:c0:5c:88:a4:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:80:2D:D1:97:3E:C7:4E:7E:49:C3:BD:3F:E2:DF:72:3E:51:1D
X509v3 Authority Key Identifier:
keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e2:72:0d:0a:cf:ec:1f:fd:0d:c0:96:5b:1c:6e:4d:a3:47:
55:fc:a6:34:33:17:0e:21:8d:b3:6e:4e:2a:2d:cc:b7:ae:8b:
ef:1d:24:20:87:c3:fe:21:4f:77:17:0d:98:b8:16:4f:da:99:
5b:24:58:40:9f:d9:f4:8c:d3:80:a8:b6:ce:7d:e9:f3:0c:1b:
e3:34:67:f3:01:af:ff:3a:d9:9f:b1:c1:c7:76:bd:7c:bf:e2:
91:62:2a:10:e2:de:ff:54:fe:83:57:ae:47:6b:f8:10:f6:7f:
90:5f:15:04:61:dc:53:09:8c:4d:9d:bc:5a:b3:23:02:7d:e8:
7a:86:83:74:03:b7:39:0d:53:f1:8e:e4:f5:1f:db:da:f1:57:
71:cf:01:35:0c:3f:e5:6c:23:cd:a5:d2:f4:63:f2:5f:4d:4e:
9a:39:34:3a:7f:a0:26:bb:43:c2:ca:cb:35:05:6f:30:b1:a0:
11:71:26:88:fb:77:8e:61:4f:4e:30:a3:9d:91:e9:88:6f:80:
66:d6:d3:4e:b9:22:c1:a4:f9:53:8f:54:d3:53:0c:cc:1e:13:
73:4f:03:3b:76:62:57:87:71:1c:d2:91:b7:20:f1:cd:42:e1:
41:ee:0e:d7:82:97:b2:f1:b5:95:80:8d:94:b3:b3:70:27:4b:
fa:03:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:55 2026 by rpki-client