Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft
File: Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft (raw, json)
Hash identifier: Ev7mE9ZX9UVSoGw8ub7s9dsfPNShwp1JkQTl4X+MJ+k=
Subject key identifier: 98:07:1D:39:25:14:B5:7D:F4:3F:17:CE:B3:36:09:2A:1A:E9:4F:5C
Authority key identifier: 22:37:F6:25:70:E5:0A:20:23:62:CB:60:99:F9:35:1C:F1:66:08:05
Certificate issuer: /CN=2237f62570e50a202362cb6099f9351cf1660805
Certificate serial: 019D27A8DDC435E024F527DECF51CDF26679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijf2JXDlCiAjYstgmfk1HPFmCAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft
Manifest number: 12
Signing time: Thu 26 Mar 2026 01:01:11 +0000
Manifest this update: Thu 26 Mar 2026 01:01:11 +0000
Manifest next update: Fri 27 Mar 2026 01:01:11 +0000
Files and hashes: 1: Ijf2JXDlCiAjYstgmfk1HPFmCAU.crl (hash: 41oYtQyNEVJ5Fg+ND6QXgLriKU418+dgtiZLSJ0UN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijf2JXDlCiAjYstgmfk1HPFmCAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:dd:c4:35:e0:24:f5:27:de:cf:51:cd:f2:66:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2237f62570e50a202362cb6099f9351cf1660805
Validity
Not Before: Mar 26 01:01:11 2026 GMT
Not After : Mar 27 01:01:11 2026 GMT
Subject: CN=98071d392514b57df43f17ceb336092a1ae94f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:1e:61:5c:db:37:ec:58:99:0f:6a:e1:f4:
51:02:c0:7f:4c:e8:c0:df:2d:0f:e5:3a:0b:5c:e0:
a4:f4:e7:a7:be:92:c5:13:33:64:a5:09:b7:da:11:
e6:3a:32:3c:c9:3d:8a:db:fd:00:f6:91:81:f7:36:
99:4f:b3:65:b4:b5:ff:ad:74:36:9b:01:71:b2:94:
47:6e:f7:66:7c:ff:0b:1c:d2:25:7d:a9:c0:bf:d5:
f1:7b:d3:91:d1:4a:dd:f8:9b:e7:74:35:45:b4:f0:
77:c9:bd:40:c4:ee:49:c3:10:19:b5:10:84:3b:ee:
a4:12:92:ce:1e:e6:0b:af:8d:d4:2f:5e:ee:a9:9d:
99:93:6b:3b:d5:a5:50:53:c8:3a:4e:94:77:94:e9:
a7:8b:d4:69:c4:55:5d:7b:f2:d1:e5:c9:4e:2a:92:
4d:cc:56:82:33:fe:32:d8:70:e6:a1:f3:9c:c5:65:
dc:42:ca:e5:d0:de:13:5e:da:9e:30:a8:84:63:20:
0a:49:ee:ab:bd:57:86:ad:0f:df:93:51:74:d0:c6:
50:b5:bd:b2:49:26:87:57:1c:ab:6d:33:97:d2:14:
c0:8b:45:8c:1a:23:60:07:0c:56:09:b8:42:a6:4c:
d2:f4:7d:94:7e:07:5d:01:57:37:9e:f1:d7:da:b4:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:07:1D:39:25:14:B5:7D:F4:3F:17:CE:B3:36:09:2A:1A:E9:4F:5C
X509v3 Authority Key Identifier:
keyid:22:37:F6:25:70:E5:0A:20:23:62:CB:60:99:F9:35:1C:F1:66:08:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijf2JXDlCiAjYstgmfk1HPFmCAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4a:d4:3a:1b:1a:41:6c:2f:ac:80:37:66:36:86:63:38:30:
93:44:d4:fc:7d:f0:d7:ac:93:2b:3b:c2:a9:f6:f9:2c:ad:a8:
c5:d0:4c:dd:13:3b:a2:eb:ab:4e:6c:b3:13:48:50:c3:cd:20:
e1:35:74:ec:09:c7:8b:cc:db:e3:1e:5f:15:e9:b5:7c:14:84:
2c:fe:0d:0a:1a:e0:3b:30:12:38:9a:02:15:c3:b2:cb:3a:a2:
16:5c:19:1a:30:cf:b9:82:0e:49:5f:9a:26:62:b3:81:e3:7b:
65:63:71:5c:7f:d3:a4:09:8e:cc:a3:5e:56:69:c0:cf:2a:5c:
a5:99:0c:cf:c5:42:8e:68:5c:5d:d5:2b:00:c7:72:54:8f:f2:
5f:e1:92:1c:58:eb:49:a1:07:46:ba:db:54:55:b7:f2:30:aa:
d8:89:74:5f:6c:6c:37:d5:cc:4e:2e:81:92:25:be:9f:34:6c:
f7:83:8b:f9:3b:ca:e7:95:ec:93:db:ee:34:44:c4:ab:34:ac:
f1:cc:6c:f4:b8:3b:ec:66:72:38:07:a4:b3:dd:ad:12:a2:36:
77:29:e9:c5:1e:db:ff:96:7e:9d:35:83:06:44:a8:2d:86:8f:
e3:ae:16:9e:39:9e:ce:5e:5a:8f:ac:96:20:99:53:af:70:a7:
9f:b1:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:38:45 2026 by rpki-client