Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File: r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier: Eqy31tMpyB0eBeveYNAAYeBKFXi4viE4qU+c1feqdQs=
Subject key identifier: 71:E1:74:56:3B:88:29:DF:A8:ED:67:92:39:DA:46:30:5D:BA:0C:E6
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer: /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial: 019D26CD9ADDB095F9B1178961F5EA5D9155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 21:01:41 +0000
Manifest this update: Wed 25 Mar 2026 21:01:41 +0000
Manifest next update: Thu 26 Mar 2026 21:01:41 +0000
Files and hashes: 1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: L7WcqC/DrZTes17KUmtRujo00jLMDVRbSSBMWW9tesQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:9a:dd:b0:95:f9:b1:17:89:61:f5:ea:5d:91:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Validity
Not Before: Mar 25 21:01:41 2026 GMT
Not After : Mar 26 21:01:41 2026 GMT
Subject: CN=71e174563b8829dfa8ed679239da46305dba0ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:30:4c:72:8b:17:2d:2c:c1:b5:5e:9e:a9:
5d:13:bd:72:67:16:27:d9:fc:4d:f1:13:5e:39:c2:
65:c6:b5:4b:06:64:f5:fc:11:af:39:90:21:8b:c0:
91:24:41:c4:65:b9:98:42:25:6e:21:5d:43:e6:37:
4f:46:0a:2f:f4:5e:61:f2:76:6b:c0:1c:9c:95:04:
44:5e:92:28:62:96:3f:a2:ba:86:60:ad:c0:c2:82:
9f:00:54:20:dd:d5:4b:bf:28:eb:37:53:0c:88:f8:
ba:f6:53:f9:78:cd:17:c2:f8:e7:95:19:78:bb:67:
ec:22:96:b8:00:12:d7:e4:00:1c:b0:a3:26:b0:51:
b6:6f:c6:26:38:3e:f8:98:0b:df:58:0f:44:9c:a7:
64:d5:49:e3:39:3a:91:64:03:3c:18:cb:e9:b2:b3:
5b:3c:42:31:db:ac:0a:18:7f:e2:15:06:5b:83:79:
75:b3:8f:5b:19:9b:6e:48:4c:7b:80:d9:9d:c8:5d:
5d:1e:67:3d:95:b3:8e:13:a1:ee:d1:6a:9e:75:2d:
bd:a9:62:bb:29:53:07:6c:cb:49:00:84:70:47:59:
fe:9e:3d:91:e3:af:47:a3:bd:e1:7c:a1:42:81:3a:
04:e0:f1:00:29:a4:2c:17:ef:07:7e:f3:4e:89:f3:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:74:56:3B:88:29:DF:A8:ED:67:92:39:DA:46:30:5D:BA:0C:E6
X509v3 Authority Key Identifier:
keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bc:a2:21:76:34:36:a8:52:b8:83:6b:eb:66:cd:fd:29:af:
d2:51:55:7b:fa:31:d3:6b:f5:9b:38:ad:ff:e3:a2:90:b3:3b:
a8:7e:e5:c0:18:90:ed:e0:ff:b8:e5:db:26:16:e5:6c:6c:c0:
92:30:96:37:1a:28:dc:a1:42:4e:49:94:43:81:66:cb:3f:2c:
cd:33:13:a5:08:0c:af:77:09:cc:ec:a9:b0:8d:52:d6:e0:70:
bb:8e:f7:fd:fa:b0:98:e2:56:54:08:15:cd:7c:97:cf:a2:8a:
1d:d3:b5:9f:81:b4:0d:ec:9c:3a:a8:ea:5b:ac:08:54:98:d1:
20:e8:45:22:c3:26:e1:08:9a:39:85:0c:3c:6a:14:b9:82:17:
df:2b:d4:4c:1f:59:8c:e7:05:12:0d:25:32:13:6e:8c:db:94:
7e:0c:4a:b8:68:a6:d5:46:da:e8:c6:35:eb:e8:c8:1c:c5:36:
1a:1b:25:07:76:db:45:bc:33:e3:b2:c6:35:67:96:85:0a:55:
59:94:b5:87:25:62:a7:c8:2c:6c:6b:1f:0c:b8:74:f4:3b:e0:
31:8c:54:ba:11:be:4a:97:ac:a6:de:91:2f:6f:d3:a4:b8:25:
aa:5a:4f:90:01:91:f3:b8:6b:9d:27:2b:46:49:26:79:54:0a:
14:92:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:06 2026 by rpki-client