Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
File: I1PVKkAkkfT5n-VHG90aXdb0K7w.mft (raw, json)
Hash identifier: 2vuEuJlVJAncLNn1dEwhkX5B/Jyu01whEUFCln5NLaY=
Subject key identifier: E8:42:F9:B9:34:BF:C9:39:C8:35:CF:56:D8:70:97:19:21:AF:69:9C
Authority key identifier: 23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
Certificate issuer: /CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Certificate serial: 019D296165D0C8AA7DAB54DE78DFC2FA3030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
Manifest number: 1881
Signing time: Thu 26 Mar 2026 09:02:21 +0000
Manifest this update: Thu 26 Mar 2026 09:02:21 +0000
Manifest next update: Fri 27 Mar 2026 09:02:21 +0000
Files and hashes: 1: I1PVKkAkkfT5n-VHG90aXdb0K7w.crl (hash: 8OMrITGYkbsS+YnqY0eMfhiODC/vD0iIrZ+BJGmPDaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:65:d0:c8:aa:7d:ab:54:de:78:df:c2:fa:30:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Validity
Not Before: Mar 26 09:02:21 2026 GMT
Not After : Mar 27 09:02:21 2026 GMT
Subject: CN=e842f9b934bfc939c835cf56d870971921af699c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:11:dc:60:ca:19:4a:37:b7:2d:1e:6f:c6:
10:37:9e:a7:78:7b:00:ec:5c:dc:76:69:47:37:09:
1a:88:ee:99:c0:bf:6a:e7:bd:91:3c:f3:4b:06:2b:
c0:e8:b4:cd:9b:6d:d4:85:78:cf:57:76:06:56:ae:
d1:70:b7:d1:45:26:fb:7a:17:e8:0e:dc:30:2f:b5:
56:9b:54:9b:6e:4c:11:8b:dd:ca:28:ea:1f:63:84:
1e:87:e0:05:f6:72:93:34:6a:32:e7:91:4f:f0:fb:
2b:f4:b0:f3:d3:23:5b:99:f4:df:ba:3c:76:b5:8d:
55:3f:06:a6:8a:b9:cb:ad:6c:b3:2b:a5:a1:64:97:
21:eb:b4:fb:70:4f:76:15:d9:af:6f:ae:62:31:4b:
f1:17:d1:b9:26:bd:fd:ef:81:18:65:15:42:81:23:
71:67:43:7d:1b:bd:ee:49:e6:5b:ba:fe:11:17:4a:
7a:70:c8:3e:dd:82:cc:dc:5a:b5:32:5e:1b:65:91:
37:3c:e7:62:f8:41:7c:40:cf:90:0b:92:19:2a:5a:
71:1c:46:8c:ac:df:db:19:6a:96:e5:74:e8:cb:6d:
a7:21:a6:69:ce:d8:88:e3:be:40:36:d2:6d:1c:94:
5f:bc:22:a8:cf:45:52:27:8d:45:39:66:09:54:4d:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:F9:B9:34:BF:C9:39:C8:35:CF:56:D8:70:97:19:21:AF:69:9C
X509v3 Authority Key Identifier:
keyid:23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:cc:e5:79:e1:8e:da:96:4c:13:38:d6:1e:8f:30:47:6f:
da:2b:79:3a:39:4e:da:c4:ad:3b:81:f0:64:d8:69:0b:b3:b6:
ef:6c:23:b9:5d:c9:af:b1:3b:3a:87:81:80:98:f9:aa:90:72:
94:21:23:11:d6:50:3d:3b:c6:ec:c6:05:e7:46:7c:42:1f:7c:
73:43:5f:3a:7e:fe:f4:22:82:0c:31:92:d7:89:5f:c1:e5:78:
be:84:c2:22:00:f1:02:28:15:1c:fb:ea:02:bc:08:fb:23:65:
a6:86:3a:5a:5b:af:3f:8b:82:bd:99:5d:8a:aa:ba:85:59:66:
79:cf:25:a9:ff:56:3c:32:3c:21:d1:dd:0c:37:b0:e8:fa:f1:
56:8b:2c:54:1d:a2:77:94:bd:32:85:83:10:be:b7:14:1e:af:
ab:2d:97:23:6c:f4:b3:e0:b3:f5:b1:7b:15:51:70:17:dd:f2:
a6:38:83:93:87:26:97:0f:a4:4b:2d:5e:70:8d:8c:90:27:87:
54:55:48:2d:df:61:0e:86:3a:9d:67:b9:2d:eb:c8:2e:20:45:
8e:50:f0:88:55:4c:8a:ea:16:e5:48:9f:09:ee:c7:fd:dd:f3:
e3:4c:76:98:f8:f5:99:25:bb:e2:d3:81:a5:06:08:56:0f:48:
0f:2f:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:03 2026 by rpki-client