Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File: ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier: 7azaPI9zs7Va6u9gdzo7rY8+8ASTpKAPZC9ftitlhL0=
Subject key identifier: AD:0D:E0:88:F4:D0:66:5D:DC:99:EA:48:43:09:E7:84:35:D1:3A:31
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer: /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial: 019D27A881D965E71BD9FDCBA26D582B57CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number: 0E8A
Signing time: Thu 26 Mar 2026 01:00:47 +0000
Manifest this update: Thu 26 Mar 2026 01:00:47 +0000
Manifest next update: Fri 27 Mar 2026 01:00:47 +0000
Files and hashes: 1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: hmdhfIYWgbTAsAsy6K2l5NZgrd1UqDoqicZAsL9LlDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:81:d9:65:e7:1b:d9:fd:cb:a2:6d:58:2b:57:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Validity
Not Before: Mar 26 01:00:47 2026 GMT
Not After : Mar 27 01:00:47 2026 GMT
Subject: CN=ad0de088f4d0665ddc99ea484309e78435d13a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:c2:c2:e4:78:cb:de:5b:56:18:71:e7:c0:
c5:87:4a:43:c9:0b:22:55:1f:e6:ba:8e:b8:c7:ee:
67:ce:86:87:7c:04:2e:fc:9d:37:95:9f:4a:08:58:
4d:23:f8:81:5e:ed:68:f4:e9:1f:de:64:7d:60:33:
c5:23:4b:67:ff:a8:a5:d8:a4:09:99:53:e6:dc:5d:
be:c9:63:9b:19:b5:be:d0:65:fa:68:bc:0c:22:7a:
cf:91:70:64:1c:2a:f9:51:ee:a5:0e:e2:21:1e:5f:
a7:53:86:84:8e:19:a5:e8:24:1e:91:8b:21:31:7c:
9c:4c:71:83:9c:0f:6a:de:bd:a3:f0:71:d4:f0:5d:
af:46:a1:e6:ea:5e:a4:f3:43:da:da:7d:8b:5b:6f:
fe:01:c3:d4:cf:75:47:16:bb:ff:cd:66:01:fa:bb:
68:e2:51:fc:5f:18:a7:5d:af:38:b5:77:d3:27:ac:
f9:ff:6a:2e:e7:bf:f9:f9:86:9d:59:10:d9:3b:0b:
5a:92:c9:10:08:b0:48:83:0e:d7:37:7d:5c:46:64:
18:7b:fa:89:f1:4d:84:97:bd:35:20:e5:ba:a6:03:
84:d0:60:f7:3e:d0:2e:cf:09:4f:4a:47:d5:ca:8c:
3b:56:c2:1c:54:f8:6b:de:42:2e:2f:0a:8f:9a:15:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:E0:88:F4:D0:66:5D:DC:99:EA:48:43:09:E7:84:35:D1:3A:31
X509v3 Authority Key Identifier:
keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:06:a9:a1:be:a9:8d:c2:c1:2d:23:96:49:35:03:de:16:b2:
d0:0a:74:42:2c:0c:e5:6d:60:06:7f:01:05:3e:ac:cc:2d:d8:
b6:dc:d1:5b:ea:c8:79:05:d5:50:75:a3:50:5b:cd:4b:57:9c:
48:d8:25:94:c6:3f:78:b6:ae:90:44:78:ea:de:53:72:e7:16:
33:c7:53:30:9c:c1:a1:00:b6:ab:cb:42:db:1c:7a:10:4b:77:
d6:fb:9d:f7:2f:1e:c8:b5:f7:a9:e2:5a:10:30:3f:70:15:dd:
a9:07:90:db:7c:e2:f2:ee:ef:e9:5f:90:4e:c2:3d:a8:c5:58:
01:0f:4f:61:4f:9d:65:c4:ab:aa:84:ef:d4:8e:a0:a4:fe:0c:
66:ce:b2:58:bc:62:de:01:fb:bd:93:94:00:5e:22:ef:34:70:
e7:98:9b:5e:7c:b7:47:47:24:b1:f8:b4:20:d2:c0:c3:06:ae:
c7:b9:7a:a2:b7:e1:c2:0d:bc:98:e0:7c:86:61:fb:ef:2b:d2:
ee:98:67:1c:d6:46:b7:b1:41:b0:83:8a:2b:32:b4:47:0e:01:
ff:17:43:22:6d:ed:49:ec:e4:aa:cc:13:2c:d5:cb:9b:98:7f:
71:f6:b5:3f:76:6d:7c:a1:93:92:7a:24:c7:8d:0e:be:05:5d:
6a:80:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:22:03 2026 by rpki-client