Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
File: iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json)
Hash identifier: 8GsPWYmkVelXk7vSWg/Kad0JE88Tmc3lm0BvlXpMOu8=
Subject key identifier: A7:D9:0F:F9:34:99:6C:32:A7:65:A1:84:1C:FF:EB:4B:38:BC:DA:B1
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 019D2A3B8C782F10187B8FBABAD2388AC546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
Manifest number: 06BB
Signing time: Thu 26 Mar 2026 13:00:38 +0000
Manifest this update: Thu 26 Mar 2026 13:00:38 +0000
Manifest next update: Fri 27 Mar 2026 13:00:38 +0000
Files and hashes: 1: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: n4Q0HLJ+xw27lA1HCuuA5Jsg5Md2SYfvX1bmXBeY2wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:8c:78:2f:10:18:7b:8f:ba:ba:d2:38:8a:c5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Mar 26 13:00:38 2026 GMT
Not After : Mar 27 13:00:38 2026 GMT
Subject: CN=a7d90ff934996c32a765a1841cffeb4b38bcdab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:3c:06:2c:94:22:bd:0f:ba:81:1c:44:91:
fe:fa:47:72:50:25:96:a1:3b:2b:0d:87:21:42:6b:
d1:64:5e:ad:5e:5a:65:1b:ec:bd:6b:09:a0:a7:e3:
b7:8c:72:33:31:05:d3:af:d3:b3:1f:f6:2b:57:6b:
ea:43:5e:07:b8:7c:e2:3f:71:37:b9:7d:d6:59:d4:
b1:a5:9b:22:ff:4b:04:f6:e5:b7:21:67:12:9f:ac:
87:5a:07:57:b7:6a:81:ac:80:3d:09:84:1e:cd:fb:
16:d4:04:05:1c:92:54:55:04:3b:7a:7a:44:f6:9b:
23:73:16:76:4c:5c:82:cd:fb:cb:df:42:61:ec:7e:
91:00:a7:f9:ec:eb:6a:20:01:d8:5b:53:fa:0b:e7:
12:f2:16:ed:9a:7e:49:d7:fa:45:21:af:2c:1e:7d:
42:e7:61:cf:6b:ea:aa:16:cf:4e:c8:1c:7e:d9:db:
03:10:79:28:2c:a7:4b:c8:6e:82:9c:07:88:44:56:
af:23:a5:69:84:68:f1:b0:30:05:43:fb:66:a8:95:
d8:a5:34:9d:e4:5b:96:42:fc:cf:e6:a9:ad:5d:dd:
c0:73:b9:75:8c:c7:f2:a6:2a:c3:aa:c0:2b:46:9f:
ec:92:98:f7:01:b6:ae:3f:04:31:8f:c2:01:66:2e:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:0F:F9:34:99:6C:32:A7:65:A1:84:1C:FF:EB:4B:38:BC:DA:B1
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:21:6d:9d:fa:44:a7:43:8d:9f:fb:29:ed:8f:70:f4:68:cd:
2f:d2:e5:4d:e0:e0:11:ae:ac:7f:18:fc:33:d2:76:0a:8c:7d:
4f:8d:7a:e9:c9:e8:91:8b:9c:9b:47:1f:4f:e3:3d:b7:b6:05:
f9:93:39:89:b8:e9:b8:a0:da:c1:60:1a:18:9a:50:50:24:3d:
87:16:94:51:b1:c6:12:d1:42:32:01:ea:ce:0a:6d:69:4c:ef:
bd:c9:f4:6a:1b:8d:96:bd:8c:91:bb:3d:60:44:b9:b3:cd:59:
e8:1f:b5:47:19:89:86:32:40:4a:fc:b8:57:42:6e:02:e1:e6:
15:02:1f:f2:12:49:af:ef:45:9c:48:11:03:ad:51:54:61:3e:
5a:75:2e:4c:28:80:df:de:78:b2:c9:99:30:9d:0f:7f:2b:a8:
cb:ad:00:e0:77:52:9d:38:7a:2a:06:4b:2b:1e:32:6f:03:43:
99:52:c5:9f:a1:49:e6:78:da:7f:37:c5:80:6b:32:e8:42:f2:
16:7e:fc:13:9c:e8:18:c7:af:d1:1b:db:8e:cd:3b:fb:90:92:
aa:f4:80:18:35:2f:c9:b2:92:a1:12:35:bb:4b:59:69:a8:91:
8c:54:e8:af:58:10:16:99:4d:f6:6b:8a:c6:ef:ef:3b:d5:9e:
91:86:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:31 2026 by rpki-client