Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json)
Hash identifier: OJgiXohLe6XQtVHPrqdcWymWlcpb9kGIjhPo5eIHmc8=
Subject key identifier: AD:F8:C3:77:28:08:2C:7C:4C:95:54:00:0B:A8:EC:2D:4B:A4:35:FA
Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Certificate serial: 019D2704513987E9295F9F901036AB08BD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
Manifest number: 092D
Signing time: Wed 25 Mar 2026 22:01:27 +0000
Manifest this update: Wed 25 Mar 2026 22:01:27 +0000
Manifest next update: Thu 26 Mar 2026 22:01:27 +0000
Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: 5anvltlQi46YZxYro5tjf9rFVExIahE+Gdo4hK46x50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:51:39:87:e9:29:5f:9f:90:10:36:ab:08:bd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Validity
Not Before: Mar 25 22:01:27 2026 GMT
Not After : Mar 26 22:01:27 2026 GMT
Subject: CN=adf8c37728082c7c4c9554000ba8ec2d4ba435fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:ff:3b:13:ef:00:ea:8c:91:72:28:69:ec:
1d:38:d6:c7:6f:08:24:16:8c:2b:d0:7d:e4:a2:5e:
13:2d:3b:02:6c:6e:27:46:03:f4:e1:b3:3b:a1:11:
49:25:17:3d:a5:60:94:5e:ab:1d:bd:c2:c1:96:6a:
e7:71:a4:69:4c:b9:d8:5a:29:59:87:b7:d6:81:6a:
be:f3:05:b2:f3:cf:27:a5:e4:54:01:3d:1f:f6:ce:
ac:06:c8:22:65:4d:91:e5:d3:48:ac:50:58:8c:10:
ba:c3:dc:f8:98:cb:51:5d:b3:5b:5b:cc:3b:5d:d4:
05:17:12:a3:d1:7c:c2:79:1d:63:d3:21:7b:12:80:
17:d9:aa:d6:64:71:61:d0:3e:2f:79:04:32:48:1c:
00:93:65:b5:e2:84:ac:bf:47:d8:20:21:32:43:cb:
dd:e8:76:3b:72:b4:65:1b:67:23:1b:e4:bb:f3:d3:
87:4c:62:dc:f2:04:b7:94:e5:fd:17:ca:f3:ab:cb:
90:36:70:7a:10:2b:e1:3a:5d:9a:fc:88:11:07:f6:
a4:f3:0c:76:fb:b7:d3:ad:14:df:7d:56:7f:89:8f:
9b:54:d0:8d:07:d8:ab:08:68:98:5c:67:96:00:f0:
6d:1d:c9:7e:da:54:67:37:17:9c:73:db:66:59:38:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F8:C3:77:28:08:2C:7C:4C:95:54:00:0B:A8:EC:2D:4B:A4:35:FA
X509v3 Authority Key Identifier:
keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:34:5f:d8:ac:c2:55:84:41:c4:e7:32:8b:19:6e:7f:a8:3a:
4c:f4:da:ed:9a:5e:08:25:db:c2:32:c4:ad:22:84:5a:4a:ce:
c5:ea:53:f0:fe:0a:2e:31:d6:d3:19:64:67:d1:2a:db:80:f0:
4d:cb:03:a9:00:80:e7:a2:36:5a:78:2d:f2:5e:6f:48:44:02:
e4:77:82:63:6b:a2:d9:8d:f1:ba:e6:b3:83:14:40:fe:6b:7a:
0b:4a:18:12:2d:ee:7a:ed:f9:48:06:a9:49:ef:33:c0:6e:6c:
cd:fb:d8:46:0d:ba:56:4d:3e:28:3b:5f:28:47:55:c0:3d:cc:
ed:73:5d:92:25:ec:20:d1:f7:74:48:1b:30:e3:44:e9:dd:86:
b5:2d:63:49:6e:0f:92:17:57:52:99:d7:ab:e5:4b:93:b1:f9:
12:72:07:d7:ff:0c:49:63:8e:eb:4b:7f:5d:ea:a0:5e:a3:8f:
c7:4d:f3:6f:58:bb:5d:35:43:65:b6:fb:55:a6:d3:f1:8b:d3:
69:c1:e6:ab:b0:08:12:53:00:39:5c:f3:95:2a:08:ce:dc:80:
d6:ba:67:71:1f:dd:a3:95:e8:33:81:67:97:56:0f:ea:e9:86:
b3:c1:5a:d9:e0:59:81:fb:a1:c1:0d:58:44:a9:04:ee:89:94:
08:e1:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:35:31 2026 by rpki-client