Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
File: II3G2-Xnc9eq1wBdbP8m5HFDyng.mft (raw, json)
Hash identifier: NpDrecEm5v0G18V9TxY9tq9TbecZDjh8YHosqfOR+gs=
Subject key identifier: BB:C0:87:A6:CA:55:43:33:70:DD:E7:50:A4:7A:72:73:05:79:32:4E
Authority key identifier: 20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
Certificate issuer: /CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Certificate serial: 019D25BABED2FFAE7BC158DCA3A7C51BC85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
Manifest number: 65
Signing time: Wed 25 Mar 2026 16:01:28 +0000
Manifest this update: Wed 25 Mar 2026 16:01:28 +0000
Manifest next update: Thu 26 Mar 2026 16:01:28 +0000
Files and hashes: 1: II3G2-Xnc9eq1wBdbP8m5HFDyng.crl (hash: Tt8iU48pO8i5JTwom5F+OMhzWwyt4poKlXCt00AnNmc=)
2: QnnmbVsFipjGwWlkwterk9FW954.asa (hash: y28GAJ2BjstIR8PdtVgRbi1Xb18GoafeiPOI2Mgv9po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:be:d2:ff:ae:7b:c1:58:dc:a3:a7:c5:1b:c8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Validity
Not Before: Mar 25 16:01:28 2026 GMT
Not After : Mar 26 16:01:28 2026 GMT
Subject: CN=bbc087a6ca55433370dde750a47a72730579324e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:56:ff:11:42:77:d9:a1:cc:33:c8:e2:c0:
87:f8:cc:3e:63:e3:11:78:9f:f0:4c:be:4e:d6:3e:
71:a2:08:08:8e:f8:13:61:c0:f6:cd:4c:03:77:62:
04:7e:88:a8:35:9d:13:ca:17:84:85:3e:42:a0:4d:
d3:b9:ce:88:69:ce:b0:34:bc:3a:eb:20:39:5e:3d:
32:ed:a8:f6:fe:b1:06:d5:34:5e:53:91:8f:17:b5:
c9:82:4f:73:97:e2:b9:92:6b:df:38:f4:11:61:1a:
e6:40:91:ad:7e:a0:b3:09:69:9f:bb:ef:a8:02:ef:
49:e0:13:11:ed:02:2a:31:86:22:2a:c3:ec:2e:1d:
ff:6a:aa:7e:94:9f:eb:6e:7b:7a:de:34:a4:d2:24:
59:5b:c2:8a:7b:81:c9:64:2a:b3:db:1d:bb:0b:e8:
88:8e:e7:f2:b1:1c:18:3a:54:c8:9e:06:40:d8:20:
99:21:eb:0a:1d:44:a3:0c:42:2f:b4:ac:64:e4:22:
9f:ee:41:ac:30:fc:12:75:68:f4:8f:c2:66:78:97:
c5:1a:6b:bb:2b:3c:61:4c:0f:10:fb:48:83:82:dd:
c3:ea:51:d7:7e:c5:3b:c6:59:ae:2d:34:21:a3:a7:
86:3b:6f:33:5c:bb:ef:96:e6:81:7d:29:25:1e:fb:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:87:A6:CA:55:43:33:70:DD:E7:50:A4:7A:72:73:05:79:32:4E
X509v3 Authority Key Identifier:
keyid:20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:37:a3:61:de:66:3e:97:cf:65:f7:b4:ed:e4:a4:28:97:93:
68:ce:08:88:4e:c4:64:11:2b:52:f8:a1:8d:03:25:d6:2f:01:
48:f1:24:09:e5:50:b9:f5:a3:7e:d2:5d:29:04:77:57:23:cc:
fc:27:47:59:1f:da:62:c2:0a:45:22:3c:af:4e:95:7a:48:17:
ff:d6:d3:2a:ca:05:e5:3a:ee:85:8a:95:bd:30:ce:37:5b:9f:
c8:58:5e:02:2e:15:48:9f:92:68:e4:bf:ec:18:e1:c4:3f:28:
6c:9f:8d:bc:85:a1:c7:52:2a:95:a3:a0:bd:1c:5c:53:10:99:
6e:9e:9c:d8:ff:3d:17:f3:f1:8d:2d:57:56:86:15:dc:20:55:
06:ab:31:12:72:46:d3:66:f3:95:db:e3:00:7c:37:d9:73:1f:
fb:e5:f0:5d:b6:90:ab:76:aa:02:20:5c:89:99:86:91:c0:29:
97:1b:1c:28:4b:51:9c:ce:9f:af:0b:49:a7:45:19:7c:fc:9e:
98:24:9a:88:5e:4e:e2:fb:17:3d:6e:e7:1f:c6:92:6f:05:51:
6a:11:bd:da:7c:f7:66:d6:3f:72:a4:57:a7:fa:29:47:50:5e:
76:59:3b:0b:04:5d:c8:9a:11:94:39:b9:44:64:a1:f9:a6:bf:
96:5a:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:27 2026 by rpki-client