Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json)
Hash identifier: 6wxArJ+YvrzcEkdyYr3txNGLbm1Ah1caiuKCPKzG6TA=
Subject key identifier: F0:F5:25:82:19:3B:9B:01:CD:7B:C7:53:1F:2C:48:A4:CB:B2:F4:E3
Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884
Certificate serial: 019D258336E7DBB9BA8CAD3AD1BF6014CE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 15:00:49 +0000
Manifest this update: Wed 25 Mar 2026 15:00:49 +0000
Manifest next update: Thu 26 Mar 2026 15:00:49 +0000
Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: jGYnNHfVu7Q39Dq+4UyoTI+rvocBjXIBShlfkSmZINQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:36:e7:db:b9:ba:8c:ad:3a:d1:bf:60:14:ce:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884
Validity
Not Before: Mar 25 15:00:49 2026 GMT
Not After : Mar 26 15:00:49 2026 GMT
Subject: CN=f0f52582193b9b01cd7bc7531f2c48a4cbb2f4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:36:50:bd:c2:98:84:af:94:56:59:02:b5:
db:75:a3:21:56:57:ca:e9:01:09:22:51:86:0a:32:
ee:ff:8d:8f:00:3f:55:ce:bd:5b:32:8f:31:c4:71:
bd:7e:9f:4a:c6:71:83:5d:72:8b:26:e0:82:dd:62:
9c:4f:7e:37:48:c8:82:1b:43:90:8b:47:5b:40:85:
19:7d:a1:32:aa:2d:f3:bb:e1:8f:13:94:8c:f6:a2:
ad:3d:24:78:38:ce:f0:33:97:c9:4d:c8:16:a5:59:
19:93:94:e3:64:f3:bb:ca:17:ed:77:02:2b:ab:5d:
bb:8e:c9:7c:40:fc:c8:20:64:39:3b:c2:1e:21:63:
b6:1f:24:05:8a:c9:74:f2:8f:50:9b:d7:80:8d:fd:
d9:98:9c:79:8d:be:ba:ae:63:2e:8b:3f:2b:ff:ea:
62:f9:eb:bf:d5:7a:6e:19:a3:0f:80:e6:50:7b:f2:
ff:18:60:53:18:4f:df:56:14:8e:cd:4e:9c:23:96:
c9:e4:72:b2:06:e0:d7:5b:a5:44:35:06:34:08:f0:
fb:9f:3b:a4:95:fd:22:e0:ea:bb:3a:92:a3:c4:79:
86:77:04:62:38:f9:00:c8:dc:0e:33:c9:db:28:16:
32:11:ea:0c:36:38:1f:15:b4:c0:22:1c:57:33:f0:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:25:82:19:3B:9B:01:CD:7B:C7:53:1F:2C:48:A4:CB:B2:F4:E3
X509v3 Authority Key Identifier:
keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:41:0d:f4:84:17:b7:a6:1c:7e:3f:b0:9c:8a:98:a4:14:c0:
aa:13:53:ad:8d:15:5b:d7:34:e1:d4:d4:72:20:27:a8:3f:e5:
43:ef:0a:2e:e1:b1:71:6a:b5:77:4c:39:9e:b8:2a:53:43:51:
44:c2:8f:c7:c9:5a:1a:1a:ae:e1:b7:a8:13:1f:82:ad:dc:9b:
67:d5:7c:da:2f:bf:e7:f9:0a:82:96:d1:e6:fb:20:bd:52:b8:
2b:6c:cc:d6:ff:4f:98:88:5b:62:08:8d:f7:60:59:a1:27:00:
9d:9d:c7:96:4a:d4:3a:62:85:e2:46:55:29:f9:d2:09:ab:8e:
3b:2f:e7:87:01:70:d1:72:9d:c2:0a:c5:71:57:e2:c5:55:91:
77:c5:08:d4:9e:52:6a:4b:e0:a2:1b:19:d9:2e:fb:ec:42:cb:
b6:e1:44:d5:67:aa:c5:b2:4a:1e:92:ad:3a:7b:6b:08:0a:bf:
0e:d7:42:0e:fc:5b:f8:dd:7c:63:c6:ae:91:97:63:e0:a0:2c:
1d:ae:c8:fb:31:d4:88:6e:32:a9:ba:8a:6d:0e:ab:cb:95:a6:
00:c6:19:07:a7:09:59:d6:60:92:72:29:41:10:6a:9f:2e:27:
60:d0:64:4a:88:6e:68:a6:a3:d2:d1:0f:96:6b:a9:15:4d:22:
dd:06:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:08 2026 by rpki-client