Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
File: IxogKGMGhumbv9Xhyw3Ti424IuA.mft (raw, json)
Hash identifier: UYMTsu0tDdbNPF46nDIUMzgESuwOwlMCgEnkZjGHSzA=
Subject key identifier: AC:7D:8E:04:C9:E6:94:9C:72:00:B7:DC:C4:FB:3D:1B:DA:F7:54:97
Authority key identifier: 23:1A:20:28:63:06:86:E9:9B:BF:D5:E1:CB:0D:D3:8B:8D:B8:22:E0
Certificate issuer: /CN=231a2028630686e99bbfd5e1cb0dd38b8db822e0
Certificate serial: 019D27A92160395CD5FB33865A5DF21A5F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
Manifest number: 01AF
Signing time: Thu 26 Mar 2026 01:01:28 +0000
Manifest this update: Thu 26 Mar 2026 01:01:28 +0000
Manifest next update: Fri 27 Mar 2026 01:01:28 +0000
Files and hashes: 1: IxogKGMGhumbv9Xhyw3Ti424IuA.crl (hash: fDjLzCEND+LM1ZwRUS3+6qAPDCl6f5y4/jlnfXD7TkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:21:60:39:5c:d5:fb:33:86:5a:5d:f2:1a:5f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231a2028630686e99bbfd5e1cb0dd38b8db822e0
Validity
Not Before: Mar 26 01:01:28 2026 GMT
Not After : Mar 27 01:01:28 2026 GMT
Subject: CN=ac7d8e04c9e6949c7200b7dcc4fb3d1bdaf75497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:7c:6d:49:c6:16:e2:98:7b:87:22:18:0c:
22:2d:6f:f5:be:d8:4b:00:cd:8e:47:26:02:79:9d:
37:01:a0:03:63:b4:d0:8b:88:46:28:50:8b:f3:6b:
d5:31:7f:56:16:3d:04:68:dd:0e:b9:b6:fa:6c:cf:
12:a1:7c:14:30:2d:8b:89:c2:17:f1:f7:fe:ae:08:
10:63:0c:fd:ad:dc:d8:7f:c8:b8:c1:08:99:15:24:
b9:8a:f6:a4:9d:fb:aa:cf:20:16:58:6b:aa:2c:64:
2f:70:80:fd:50:56:ea:2b:a6:d9:2a:5d:60:95:ce:
2d:32:a0:ff:c6:ca:29:a9:6c:6f:d1:d6:0c:ca:ab:
35:b1:d4:71:36:a5:89:b4:a7:36:70:57:95:9d:fa:
5c:22:55:c2:6f:d4:40:dd:64:5d:52:78:82:91:f9:
41:92:ab:7f:5a:05:df:0f:e9:71:35:93:a6:83:fa:
d1:b1:49:35:cf:f0:12:9a:83:e4:17:2f:63:23:8a:
c2:fc:ed:90:1c:c4:64:f1:be:d9:96:29:fd:e7:34:
a5:06:28:76:de:a0:6d:30:73:ee:a4:17:38:ea:06:
ef:ee:86:75:6b:88:23:bb:61:41:a3:fd:d9:4d:ec:
f9:e4:cd:0d:9e:9c:e5:51:5e:17:4a:cb:ac:11:5b:
f4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7D:8E:04:C9:E6:94:9C:72:00:B7:DC:C4:FB:3D:1B:DA:F7:54:97
X509v3 Authority Key Identifier:
keyid:23:1A:20:28:63:06:86:E9:9B:BF:D5:E1:CB:0D:D3:8B:8D:B8:22:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:58:29:bb:32:c2:d2:35:a6:44:ab:c3:5e:c0:a8:9c:b7:13:
95:2c:05:cd:d0:7d:45:60:08:42:b5:4d:84:97:9d:4d:88:b8:
1c:20:7a:91:a4:e7:b9:c7:3d:4f:c1:8c:6c:a3:f4:91:33:49:
57:12:1a:c2:91:70:e2:99:9d:b5:b6:90:53:cd:b4:3c:7f:37:
a7:15:91:56:37:ea:65:d2:87:8d:dd:fa:ff:d5:28:8b:e5:dc:
ac:de:24:1f:6b:52:0c:77:2f:d0:5e:d2:19:fb:56:e3:df:98:
cc:bf:a3:20:88:3c:ac:68:1a:e2:e9:81:a5:3f:f3:e2:2e:33:
bd:24:28:e0:2d:3e:70:33:b0:0d:24:1d:a0:7f:81:bf:0e:cf:
55:56:7c:be:d5:72:23:05:fb:96:ba:95:9b:a1:ad:0d:ab:eb:
bb:85:07:b3:61:96:36:dc:93:e4:99:00:0c:ef:4d:43:da:cc:
79:42:ad:c1:36:ec:5b:91:f6:52:9b:c5:d4:8d:42:ff:ab:3a:
0e:13:2b:d9:1c:62:8e:2e:31:28:7f:c1:31:ae:7a:4b:e3:d4:
36:bf:a4:55:3e:6c:10:e4:6a:db:81:33:69:55:4c:f3:4e:d5:
69:45:40:18:b9:43:e5:ce:ec:ec:98:2e:5f:22:0b:64:eb:26:
6b:0e:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:49 2026 by rpki-client