
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: nRairpY+dTeh0yjCCgdQ+yQLZzIGauMHND8blbEiDHM=
Subject key identifier: 90:23:90:66:EC:A7:7E:ED:51:89:36:02:F2:71:2B:44:F8:DB:A4:77
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 019D2960D6674216DB0C366E9D97E70E395B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 07F3
Signing time: Thu 26 Mar 2026 09:01:45 +0000
Manifest this update: Thu 26 Mar 2026 09:01:45 +0000
Manifest next update: Fri 27 Mar 2026 09:01:45 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: xRB5imDvAFQmqSN94piH1fb3r4FXFZFVSuaWb09q8lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d6:67:42:16:db:0c:36:6e:9d:97:e7:0e:39:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Mar 26 09:01:45 2026 GMT
Not After : Mar 27 09:01:45 2026 GMT
Subject: CN=90239066eca77eed51893602f2712b44f8dba477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9c:ab:1e:aa:fa:3e:09:3a:53:6f:24:bf:e9:
ac:a3:10:1e:f3:71:68:98:63:74:a4:fe:16:d4:a1:
a0:a6:0c:9a:76:2f:c7:e4:e3:4c:b4:22:95:67:84:
33:42:82:28:96:b5:71:0c:fb:57:f5:4a:2e:e4:5e:
23:af:0d:af:3f:02:ee:e1:ac:29:16:22:db:7f:5e:
ac:52:a1:28:a8:50:82:02:35:f0:26:0a:fd:d2:91:
45:14:44:30:d6:50:89:79:44:47:dd:17:0d:5f:ea:
1b:1c:da:dd:dc:ea:94:cc:87:22:10:6f:18:66:be:
ab:c8:81:da:52:f8:20:c2:01:b9:82:cb:31:21:00:
23:c5:de:6e:e9:c3:be:f9:7d:31:bf:a3:d2:d3:6b:
48:f5:e9:43:d3:a2:f5:dd:60:7b:e3:68:f5:11:63:
4a:8c:0b:fe:21:ab:ea:f8:a2:f2:11:fa:16:b1:61:
70:d4:75:d0:c7:6f:47:1c:bb:0b:75:be:41:1e:1e:
a9:4f:ad:d4:cf:26:80:8a:42:c8:d6:23:f5:78:6b:
1d:54:7a:61:27:94:2e:4d:79:52:8d:cf:74:69:71:
37:84:75:4a:78:4b:be:dd:60:46:71:48:a9:81:bf:
a0:16:4b:80:97:07:ea:ba:24:e7:8e:ea:b2:9b:a8:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:23:90:66:EC:A7:7E:ED:51:89:36:02:F2:71:2B:44:F8:DB:A4:77
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:81:44:c0:c9:46:13:ad:a5:6d:c7:0c:84:34:99:64:44:15:
0b:e1:e2:b4:eb:92:9d:a4:f0:c2:72:98:07:94:04:07:28:2d:
0a:77:ee:fd:b3:cd:0e:f4:a2:70:76:0f:8b:2b:f7:35:d2:4d:
48:be:2e:a0:40:02:2a:d8:96:e0:f2:5c:67:55:c2:75:63:5d:
50:73:bd:77:29:4b:6c:25:01:3d:b3:b6:2e:3a:b9:e5:39:48:
0e:4e:e9:17:32:ee:c9:c8:31:60:a2:26:ec:3c:05:04:06:cf:
3f:99:50:70:7f:37:ee:bb:68:49:44:83:f6:17:7a:50:7c:43:
14:3d:00:b4:6c:d0:a0:9d:00:3e:37:c8:9f:8e:55:0e:ad:d9:
e5:dc:2f:69:36:0d:11:27:7b:bd:1b:4f:ba:7c:8c:d7:0f:8c:
d2:22:27:a7:b7:8c:79:bb:68:bd:24:f4:24:ca:16:02:c0:7f:
25:5b:c5:f4:2d:30:46:71:e4:dc:8f:3d:14:f9:26:f7:e1:fd:
ed:8e:35:89:04:9d:4a:1c:04:95:d0:ec:d5:a9:80:94:78:a4:
dd:38:ca:9a:79:5d:1f:4d:70:ef:62:68:88:b9:21:65:a9:b2:
0e:2a:f4:c1:4a:eb:e0:94:f3:ee:e5:f7:54:67:f9:97:78:b6:
dc:39:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:00 2026 by rpki-client