Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier: oEECP5OFMPsIWH5NXkByJAItcRHMpbF4/bywUYQWITM=
Subject key identifier: 04:61:C8:FB:E2:B8:25:00:4A:63:20:CF:6F:28:A2:3E:23:E6:4B:47
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial: 019D2A3B692791A1C3BAA6007E0F7D61D782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number: 0D5F
Signing time: Thu 26 Mar 2026 13:00:29 +0000
Manifest this update: Thu 26 Mar 2026 13:00:29 +0000
Manifest next update: Fri 27 Mar 2026 13:00:29 +0000
Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: BbsI/8j2+LhQdpx6WnlcEVPLkmw2j/FVMPbMd+y88nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:69:27:91:a1:c3:ba:a6:00:7e:0f:7d:61:d7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Validity
Not Before: Mar 26 13:00:29 2026 GMT
Not After : Mar 27 13:00:29 2026 GMT
Subject: CN=0461c8fbe2b825004a6320cf6f28a23e23e64b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ae:27:25:b2:b5:b7:0e:88:8c:66:04:b3:fe:
36:af:c7:76:8d:94:9f:cd:2e:f9:97:ff:9b:e2:ad:
0b:c6:3e:d5:2b:35:17:78:09:59:da:4c:e2:a0:ce:
cf:a1:19:c1:b4:1f:c2:e0:b3:8a:46:f4:c2:f6:3b:
69:97:fd:06:6b:67:21:ba:41:d6:e2:df:88:ca:ff:
70:b6:c7:98:fe:11:e7:80:a8:bd:b8:00:9a:39:d4:
de:84:81:5b:f1:b5:df:68:c2:79:20:aa:d4:7b:ef:
fc:82:89:a8:d0:25:4c:fb:ca:a1:9e:ae:6d:9a:6f:
3e:c5:6d:8f:c5:95:a1:27:6b:8f:c5:f7:ad:62:32:
bb:df:d3:8f:8d:21:5f:89:bb:28:ef:a0:b3:03:48:
7b:e9:ac:1c:10:1e:19:71:c8:f4:01:e8:8e:4b:9e:
33:11:9d:2e:e8:86:82:de:62:3f:4b:c5:e0:80:9c:
db:8b:b4:cc:d9:a5:ad:3a:d6:25:c2:0a:c5:c8:ed:
5c:0e:07:70:da:3d:ab:ff:27:5e:d7:da:14:ae:6f:
4d:fc:ad:d0:a0:b5:95:9d:ab:96:e9:4f:6e:ec:88:
1c:43:51:7c:d0:c3:f8:d2:b6:3b:fb:81:e5:e0:54:
88:a3:52:75:fc:27:f7:f2:65:cf:cc:1a:55:38:ec:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:61:C8:FB:E2:B8:25:00:4A:63:20:CF:6F:28:A2:3E:23:E6:4B:47
X509v3 Authority Key Identifier:
keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cf:1f:24:9e:c4:aa:f3:d7:6b:43:e9:8e:32:f4:88:01:69:
fb:c8:05:0b:62:40:44:c6:c2:a0:85:0c:dc:43:f9:81:62:4f:
49:ee:6d:91:9b:74:eb:69:85:5b:ae:b2:11:a3:fe:a4:59:b2:
9d:20:ed:c9:89:8e:db:64:42:9f:9e:1e:88:61:c9:13:96:73:
f6:91:8c:fd:a5:52:77:f2:be:f5:3d:d4:36:7a:43:8f:3f:af:
8e:d4:02:df:4f:16:e8:b7:56:52:e3:67:c8:19:c9:26:f7:bb:
8d:49:3e:21:93:27:d1:97:87:6d:65:24:d5:93:3b:4f:e7:b7:
18:06:1b:36:44:e2:e3:97:50:34:5f:f8:07:f4:25:c2:16:39:
4a:2c:c3:fa:b0:86:95:a8:ee:24:63:e4:ca:21:ea:71:08:01:
93:6c:f8:d7:8b:2e:b8:e9:d4:02:ad:9d:f7:ed:95:79:42:3e:
62:d8:25:76:b2:25:4a:26:67:95:05:8e:9c:4b:fd:73:c0:65:
a4:0d:49:c8:d0:b8:bc:a1:d3:83:c4:43:82:a2:e4:2e:1b:94:
4b:8f:c7:30:f5:4d:cb:fd:df:55:c7:91:3a:ac:06:60:1a:0b:
af:7c:27:9a:72:f3:4e:12:f9:3c:96:4e:76:e8:d5:d4:a3:8a:
da:64:94:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:59:47 2026 by rpki-client