Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: 2iIBn1g3tFTGCTgzCq79L7ene8b/PQDLGbtc6JoAG0Y=
Subject key identifier: 65:32:1E:2F:67:5F:63:36:DA:59:BF:B5:AD:0C:C4:EE:11:B2:1B:37
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 019D29CEC986F289944124689EAB7F898C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0E04
Signing time: Thu 26 Mar 2026 11:01:50 +0000
Manifest this update: Thu 26 Mar 2026 11:01:50 +0000
Manifest next update: Fri 27 Mar 2026 11:01:50 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: xWb/PgAzsKEmEEluXS8tAqenFkSz2ZiITt7jOhj5O6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:c9:86:f2:89:94:41:24:68:9e:ab:7f:89:8c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Mar 26 11:01:50 2026 GMT
Not After : Mar 27 11:01:50 2026 GMT
Subject: CN=65321e2f675f6336da59bfb5ad0cc4ee11b21b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:6a:12:52:18:af:22:74:ea:67:bb:f3:2a:
44:48:56:31:32:5b:01:03:a7:2a:dc:f9:fa:47:e7:
2d:8a:64:3c:8c:fb:b6:2b:b4:65:14:7f:14:22:20:
20:98:40:20:a8:b7:4d:1d:44:bd:49:db:0e:56:c0:
80:39:35:d6:f1:6e:ee:df:e5:e2:fc:ee:c7:cb:67:
75:8f:60:23:cb:5a:9a:0a:b0:e5:9b:be:02:07:4a:
7a:53:cc:69:10:ca:f0:24:a0:b7:da:df:7f:85:a7:
63:d3:95:46:03:8f:df:58:84:91:47:e1:bc:ac:11:
88:59:95:43:b1:7f:5e:a2:43:0e:53:41:7a:7c:e6:
08:84:22:cb:1b:6d:19:ea:f2:b7:3f:04:f0:20:27:
02:e6:35:eb:2c:2c:5d:8a:97:be:99:49:f0:46:53:
32:d3:5c:d6:d0:0f:31:c2:5a:f6:dc:88:9b:95:0b:
0c:f9:23:a0:ef:f9:71:fc:ff:06:ec:72:be:6a:55:
85:ac:81:fa:13:7e:32:a2:49:bd:e8:9d:28:76:1c:
50:5e:81:3b:6d:d9:a2:ea:0c:7e:70:20:f9:35:ae:
00:2a:81:57:3e:57:9f:76:7b:c5:70:6d:b1:88:40:
c7:4d:5d:c5:46:3e:89:ee:8f:61:df:20:d2:bf:92:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:1E:2F:67:5F:63:36:DA:59:BF:B5:AD:0C:C4:EE:11:B2:1B:37
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6e:fa:18:f5:1a:46:85:19:41:2d:31:52:cb:75:17:3b:8c:
1d:3e:8c:63:23:6c:f0:d5:f2:44:ed:37:c4:fa:26:a4:f3:bc:
d7:00:f6:b8:34:b2:2b:bb:af:6a:b0:29:77:11:aa:de:2e:02:
36:c2:47:1f:ac:98:21:85:10:e1:0d:24:f7:82:57:95:49:75:
0f:4e:ff:6f:a4:21:f5:b3:ba:85:44:d5:5e:28:bf:29:9f:29:
88:0e:b4:58:a6:ef:a0:11:8f:a1:b4:a7:a7:87:13:a7:a4:4e:
90:28:49:5f:a5:4f:40:d9:b7:eb:30:67:b6:c1:f2:82:e6:90:
a6:2d:fa:fb:9e:f4:f1:a8:49:b0:64:d7:67:4f:17:a0:05:65:
94:a1:ea:7a:e3:e2:2d:10:7e:0d:a7:d2:d5:cb:aa:8d:db:e7:
83:f3:fe:4d:0d:36:ff:f7:b5:d3:c1:c7:1a:d7:75:48:58:d1:
3e:80:ae:0e:56:1b:6c:40:94:07:2d:d6:bc:c0:94:9f:78:d8:
aa:ee:f0:53:9a:38:c8:27:fc:ee:be:5a:4c:d8:9c:87:62:ec:
c4:5c:c5:cf:78:d4:f9:b2:60:e5:c4:2a:64:e1:8d:24:3d:3f:
d1:6f:69:4f:74:f0:83:a9:04:86:77:b5:08:e1:ee:9d:d9:98:
ca:14:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:03 2026 by rpki-client