Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier: KqHtS9MKG+Dho1hGwWvfdzeDXKmp89moKvybZllrXO8=
Subject key identifier: 98:D1:CA:40:5C:24:EA:82:ED:7C:72:CC:04:6C:29:C2:10:66:E8:73
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial: 019D28163EF627800A4BF15F7C8A11C79A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number: 0808
Signing time: Thu 26 Mar 2026 03:00:39 +0000
Manifest this update: Thu 26 Mar 2026 03:00:39 +0000
Manifest next update: Fri 27 Mar 2026 03:00:39 +0000
Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: lXv84thaNtseOGWxCfg6ma5LavmGBUi+f9XljfNs+Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:3e:f6:27:80:0a:4b:f1:5f:7c:8a:11:c7:9a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Validity
Not Before: Mar 26 03:00:39 2026 GMT
Not After : Mar 27 03:00:39 2026 GMT
Subject: CN=98d1ca405c24ea82ed7c72cc046c29c21066e873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:0c:cf:45:97:ee:f7:72:41:b1:b6:4c:b3:
56:5d:e9:1a:82:8d:e0:bc:94:87:e5:f5:97:15:62:
91:ef:e1:07:06:45:e4:ae:79:a6:bb:89:59:ba:f3:
43:28:78:fd:e7:95:d3:15:11:5e:59:fd:5f:90:85:
fb:79:75:5d:f2:a6:1a:19:65:41:a7:36:44:2e:e6:
ef:9a:bc:b2:8a:ef:1c:ab:79:f2:7d:eb:e6:c9:17:
4b:d3:b3:4b:98:69:a8:91:ac:cf:d2:2b:7e:b3:2f:
c3:40:58:c3:2f:8c:a0:b4:8a:a8:c8:8e:8d:2d:c2:
47:5b:1e:67:69:9c:0a:a1:8c:26:62:90:32:3d:02:
03:88:05:dd:e1:6a:ab:a9:81:a7:ce:70:02:ee:8c:
37:61:7c:70:dc:d5:a3:fb:77:70:1e:d8:01:b0:a1:
87:8e:c2:58:53:30:56:8e:72:8b:5c:a5:bf:86:ee:
9f:fb:6e:70:0e:99:8a:fe:67:4b:32:f9:d6:0b:eb:
a2:10:ec:0f:78:be:88:13:91:11:a1:3c:db:7f:cd:
78:52:6e:38:00:a2:e6:56:cf:64:8e:c2:5a:ac:e4:
c5:6e:e0:8f:39:7d:3f:36:25:27:54:08:17:4e:bb:
4f:13:af:c1:7a:bf:4a:4e:69:b8:e9:96:08:a1:06:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:CA:40:5C:24:EA:82:ED:7C:72:CC:04:6C:29:C2:10:66:E8:73
X509v3 Authority Key Identifier:
keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c1:36:69:1c:29:54:25:c8:2d:73:a5:69:b4:a9:e9:93:28:
e8:89:77:3f:46:98:bd:8d:59:3f:b3:1c:c4:38:ba:7c:6d:cc:
ad:6c:24:7e:dd:ce:93:e7:b8:2a:9a:27:3b:08:2e:91:52:5f:
85:9e:12:4d:3a:4e:d1:e1:11:8b:19:9d:dd:54:3e:3b:bb:d4:
f1:8a:b3:3a:b5:de:40:49:91:8e:6f:33:9e:30:ce:cf:ec:f5:
3c:d8:93:d1:0f:21:a3:83:37:31:0b:80:b8:17:67:24:d4:0e:
ab:60:6e:1e:f6:5f:77:2b:6e:b3:a9:26:5c:6b:8c:18:82:68:
08:75:19:75:5d:f0:33:7e:df:f6:c7:82:3f:92:65:b1:cc:88:
9a:4b:b9:ba:f2:cd:35:58:69:6f:9a:62:e6:ca:e2:35:f4:07:
62:1c:42:0f:b7:a1:15:7c:76:ad:c7:23:33:1f:8c:6b:4b:72:
66:f3:a6:26:69:64:55:76:a7:c9:7b:2d:9c:7d:88:56:d5:66:
59:5a:ce:3c:fa:e3:49:cc:55:60:ef:60:f5:b9:11:95:8a:ee:
c5:ee:56:8b:85:65:7c:97:19:4b:df:c1:06:ea:29:d2:96:dc:
7c:87:24:c5:14:af:78:f8:3f:62:a2:bc:5e:60:78:74:04:99:
fc:bf:fd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:19 2026 by rpki-client