Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
File: irxd5yn5l1idW-dpw3gkL3VFu4o.mft (raw, json)
Hash identifier: 8f9K4EjGhZgqJQ6k4tnBbcftQQeXUe63vXCVn9As8vk=
Subject key identifier: E6:28:92:B4:0B:F2:85:21:BB:11:40:15:1A:28:08:E1:D2:6F:07:8B
Authority key identifier: 8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A
Certificate issuer: /CN=8abc5de729f997589d5be769c378242f7545bb8a
Certificate serial: 019D27041C32B23C7FD44610BD20C67DEF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
Manifest number: 01C4
Signing time: Wed 25 Mar 2026 22:01:13 +0000
Manifest this update: Wed 25 Mar 2026 22:01:13 +0000
Manifest next update: Thu 26 Mar 2026 22:01:13 +0000
Files and hashes: 1: irxd5yn5l1idW-dpw3gkL3VFu4o.crl (hash: Nd0hZDIXI1jPWJoWzvr33Cz3fUVpAD7dtejkl+ZoHzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1c:32:b2:3c:7f:d4:46:10:bd:20:c6:7d:ef:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abc5de729f997589d5be769c378242f7545bb8a
Validity
Not Before: Mar 25 22:01:13 2026 GMT
Not After : Mar 26 22:01:13 2026 GMT
Subject: CN=e62892b40bf28521bb1140151a2808e1d26f078b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:80:e3:65:8f:cb:8b:d4:30:29:f3:bf:e6:
2e:a8:41:a1:87:ce:d2:99:2a:47:6c:37:93:8f:45:
93:75:74:99:ec:6a:f6:99:54:14:ef:8c:e2:97:be:
e8:b2:78:50:66:43:b0:2e:01:de:f0:a1:25:d0:22:
29:22:43:61:8b:5c:d7:6c:8b:03:2c:29:74:0a:5d:
92:ee:ae:08:3b:d8:a9:c5:c7:93:04:c6:6e:6a:64:
8a:14:99:f1:b5:ba:14:4c:9f:86:5a:77:00:b3:08:
b8:42:40:ab:4e:ec:92:65:96:25:ee:9f:26:f2:11:
96:c7:f2:a7:5d:fc:b7:35:33:af:9f:f2:5a:6b:a6:
06:ab:be:eb:df:62:0f:a9:32:7a:8b:a6:71:72:a5:
72:6a:44:e8:c7:ba:2f:ea:96:5b:27:b6:36:9c:42:
2f:ee:c3:8a:0c:f4:af:f7:df:68:46:68:e3:3a:56:
01:25:fa:d0:d3:a8:8b:17:5c:df:dd:1b:0f:5c:3c:
8e:a4:af:b4:cd:61:6d:bc:2c:db:47:06:a0:1c:df:
14:38:2e:98:9e:cb:7c:b7:91:b5:d6:9b:27:db:dc:
7e:b7:20:ad:a6:b7:7e:f8:60:7c:30:05:5c:ed:23:
42:74:d4:7a:f4:1d:62:d3:e7:ff:bf:74:79:06:6c:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:28:92:B4:0B:F2:85:21:BB:11:40:15:1A:28:08:E1:D2:6F:07:8B
X509v3 Authority Key Identifier:
keyid:8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c9:b7:3c:a7:4d:20:37:6f:7a:d5:d4:20:fb:d5:99:01:d1:
0e:8d:78:3f:84:32:ba:60:98:be:3b:4f:fb:5b:59:36:b6:d8:
25:5e:f4:f2:22:b0:39:cd:e4:25:d0:52:7a:8c:af:46:77:51:
53:59:08:89:c0:59:e6:7d:56:e7:2b:cc:36:b6:2c:9f:07:91:
2c:92:62:0f:ed:6d:de:a8:6a:81:f7:70:5d:39:c6:0a:aa:0f:
76:ee:72:e8:27:a0:d2:8a:60:d4:51:28:9e:79:18:99:1b:3d:
8f:52:f2:14:46:71:9b:18:73:7a:ea:4f:06:30:94:21:5d:ce:
f7:53:ed:a5:a1:5d:83:ac:27:b7:f7:91:e8:72:df:82:a0:99:
96:cc:4d:99:71:59:31:7e:c5:5d:ea:f3:6e:77:57:9a:8c:b0:
f1:9c:1e:d0:86:82:aa:86:7d:32:6a:63:23:ea:72:ff:a1:bd:
93:7f:a8:48:f1:fe:56:e5:3e:d2:30:8f:80:fd:45:2b:14:5e:
19:53:1a:ee:93:4f:c9:93:a7:37:f1:60:f4:52:a0:7f:70:fa:
75:99:57:e6:01:3c:e0:0b:5b:ed:57:5e:8d:4a:3a:2e:7e:c6:
f6:3a:32:c6:32:17:54:c6:ab:0a:16:bb:39:90:96:ff:ef:80:
17:70:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:01 2026 by rpki-client