Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: /80+yD/XSKGqUkhc/QFUlE430/mSmfLj6p9AtRIHcW8=
Subject key identifier: 78:09:C5:53:34:2E:4D:E8:A6:96:75:28:4D:4E:68:05:50:63:40:B6
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 019D27DF9585E26C580FDFC5EB8DE0C963E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 09B8
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: 4NlwW0ljcQwCE6ijvjNvk8s8aTxG3yswr/Oz6bYZgxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:95:85:e2:6c:58:0f:df:c5:eb:8d:e0:c9:63:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=7809c553342e4de8a69675284d4e6805506340b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:7b:07:a8:58:7c:0e:7d:72:64:21:24:4f:
04:7a:7e:ae:9c:04:10:9d:0c:8c:ba:7c:e7:d3:f3:
e8:4d:ba:bc:f9:c1:cb:f4:a8:37:fb:f5:15:f7:5b:
af:e3:53:6a:de:7a:af:dd:d7:dc:63:3d:9b:4f:3a:
0d:3c:32:5f:bb:98:06:2e:af:5a:39:62:fd:3a:59:
c2:8c:6c:64:c4:50:f0:c2:c8:d2:f0:be:ef:50:84:
87:e0:f5:36:41:3e:ee:de:3d:2d:2c:aa:d4:8f:16:
b4:a8:2c:28:ec:11:6f:98:21:2d:84:48:d5:d6:29:
63:43:01:1a:64:f4:e3:a3:82:01:a7:b8:4d:be:d1:
a0:1c:a8:a6:00:96:9d:cb:64:da:0e:ca:09:ba:c0:
92:14:a9:70:99:1a:8e:40:0c:0d:e5:61:b6:cd:eb:
e9:44:dc:d4:74:bc:ae:18:74:08:e8:a8:26:8f:74:
f9:c4:30:f7:77:f6:0e:b4:eb:6b:42:34:de:4f:e3:
8a:1b:e5:a3:46:a6:08:56:ef:77:a6:5f:7d:a0:a7:
d9:7a:61:d3:c9:f2:a9:09:fd:b6:4b:78:ee:17:41:
4c:72:59:cd:34:82:c3:0f:bb:9f:40:d9:eb:bb:88:
75:d2:c4:c3:da:54:17:8b:89:bb:cf:49:91:35:92:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:09:C5:53:34:2E:4D:E8:A6:96:75:28:4D:4E:68:05:50:63:40:B6
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d3:2e:5d:e3:fa:03:af:e0:59:0c:cd:9e:10:b3:e4:b1:8a:
15:8c:0c:f7:9c:05:07:1b:f5:24:7d:18:59:f2:a8:ce:90:69:
e7:5e:50:58:a9:d9:46:f2:38:7a:c2:36:f8:da:13:32:e1:8e:
ad:9f:82:73:b3:bd:7c:73:46:7a:bd:9c:f4:60:3f:9e:98:1e:
ca:99:01:62:30:d2:4b:71:6a:94:10:30:7c:f1:e0:5b:e4:f2:
fb:b5:e7:cc:63:01:3c:49:e7:f8:d1:df:a7:31:44:08:6d:95:
5c:ca:d4:7c:52:63:f7:e8:fa:f0:4e:04:65:85:3b:19:72:d6:
c7:8e:b5:a1:7b:cf:a5:70:89:ca:53:54:25:ad:d8:ad:2f:c7:
67:c7:d1:ca:75:aa:30:6b:4c:2e:b5:99:7d:d4:e4:bd:84:58:
ec:f2:b8:d1:26:8e:51:20:77:53:eb:fe:2f:8b:34:4c:7e:f9:
7f:e4:c6:e3:70:3a:51:c6:62:c5:71:06:89:e8:cf:57:4b:18:
62:7f:07:55:28:59:f6:1a:06:24:fc:43:c8:e1:ba:7e:af:b7:
f2:73:01:0d:44:cb:d5:77:4d:9c:77:08:53:cd:85:e1:40:df:
a0:99:31:79:1f:72:70:c1:9d:0b:9c:26:f8:d6:7c:f5:24:3b:
ee:1d:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:16 2026 by rpki-client