Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.mft
File: iR-FX-2H8edyh8ypigBhTGcCU84.mft (raw, json)
Hash identifier: WgeryOyMOPy9S92oHXNLwvRDSZwu8HJvx7+M9S2DxWs=
Subject key identifier: ED:CF:08:50:EA:BD:12:BA:7F:77:B7:DA:5D:B9:D3:8F:71:E0:99:BA
Authority key identifier: 89:1F:85:5F:ED:87:F1:E7:72:87:CC:A9:8A:00:61:4C:67:02:53:CE
Certificate issuer: /CN=891f855fed87f1e77287cca98a00614c670253ce
Certificate serial: 019D3307A5E231FBE49C2C60E4B17F557AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iR-FX-2H8edyh8ypigBhTGcCU84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.mft
Manifest number: 18
Signing time: Sat 28 Mar 2026 06:00:32 +0000
Manifest this update: Sat 28 Mar 2026 06:00:32 +0000
Manifest next update: Sun 29 Mar 2026 06:00:32 +0000
Files and hashes: 1: iR-FX-2H8edyh8ypigBhTGcCU84.crl (hash: XVn/Jgyah8wEKa2Vldz3DoatfbEDXvVPixYnzEb2/Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.mft
rsync://rpki.ripe.net/repository/DEFAULT/iR-FX-2H8edyh8ypigBhTGcCU84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:a5:e2:31:fb:e4:9c:2c:60:e4:b1:7f:55:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891f855fed87f1e77287cca98a00614c670253ce
Validity
Not Before: Mar 28 06:00:32 2026 GMT
Not After : Mar 29 06:00:32 2026 GMT
Subject: CN=edcf0850eabd12ba7f77b7da5db9d38f71e099ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:77:da:ab:78:08:49:2f:41:ac:6f:3e:71:
fd:fe:61:3f:7c:f9:10:6b:fe:20:6f:39:d6:1e:fd:
e7:bd:95:20:cc:46:02:2e:0e:cb:1c:f1:3f:38:2a:
65:93:26:8b:0b:75:90:75:f4:b1:49:48:9d:0b:77:
32:a4:3c:f1:ae:8c:37:f9:e5:16:63:71:5a:4d:73:
18:58:00:de:ff:01:bf:03:85:25:7e:59:8c:ff:8e:
08:5e:44:c4:68:b2:47:84:5b:78:f5:80:8b:7a:fa:
2c:8d:b9:2d:e2:16:1a:dc:c5:38:b7:c7:51:b1:0e:
a1:7e:14:e9:89:4d:49:b3:b3:33:37:50:74:bd:f7:
d6:7d:e9:1e:2d:1b:c4:9e:1a:da:4c:1f:87:30:bc:
aa:eb:91:70:e9:81:fe:3b:7b:a7:0d:92:1e:9b:a6:
42:03:e6:f3:02:af:dd:e7:51:6e:40:5a:c4:1a:28:
b1:db:50:1d:4a:5e:d0:06:e5:3d:b7:d7:69:53:c8:
8c:7b:bb:f9:e4:42:b3:9b:80:14:56:ef:d3:33:1c:
e4:26:39:70:43:bc:97:d8:92:2d:9a:3a:a8:3a:31:
76:e0:b1:97:c4:5c:32:d1:7c:e9:6a:69:b8:37:6e:
1d:9a:06:59:74:40:b5:f0:b0:ec:d5:cb:6c:3a:64:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CF:08:50:EA:BD:12:BA:7F:77:B7:DA:5D:B9:D3:8F:71:E0:99:BA
X509v3 Authority Key Identifier:
keyid:89:1F:85:5F:ED:87:F1:E7:72:87:CC:A9:8A:00:61:4C:67:02:53:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iR-FX-2H8edyh8ypigBhTGcCU84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e3:46:d3:76:d7:d1:bb:7f:bd:ce:50:fc:1e:1d:03:ec:e2:
56:e7:d0:04:e4:69:04:e9:24:50:1e:99:b3:24:89:98:6a:08:
a2:8a:f1:c3:ef:21:a9:a8:0b:82:a7:28:4a:c8:d6:f1:86:d1:
72:9d:4c:eb:33:5b:b3:8d:36:23:49:61:72:d0:b0:63:f0:68:
3a:c2:fa:c2:38:78:06:4d:11:53:5d:2a:96:de:fa:14:b4:20:
91:ef:d4:cb:32:94:20:b5:88:9d:a9:fc:75:39:3d:c9:99:41:
cb:03:6c:80:dd:cc:3f:e6:40:77:a7:12:71:23:f4:a4:9b:b1:
64:af:ea:f1:7e:86:5a:0c:fe:45:2f:cf:5f:cd:d2:f0:66:af:
90:18:c2:1d:f4:ae:38:76:fe:d4:f9:2f:be:80:f5:68:a8:d3:
fe:c2:4a:1f:3e:80:ef:eb:8e:9d:7e:2e:67:8e:24:bd:4d:a3:
a1:27:db:ef:c0:9b:90:01:ee:e9:8a:7f:a0:c2:ed:a2:cc:ad:
89:12:b0:9a:0a:d7:7d:9b:90:c5:7f:fa:45:7b:a0:71:a1:86:
7d:3d:77:68:e4:b5:72:cf:31:07:e3:fc:1b:d7:b8:56:06:51:
d7:f6:e3:6c:01:3d:af:64:c9:bb:50:e3:87:a2:2f:17:45:3e:
c3:03:d4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:28:05 2026 by rpki-client