Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier: IEXzl+yUkjKoJX6Y0+SpaPwc1xt6C4g26COcyxXPmIw=
Subject key identifier: 74:3B:04:A3:1A:03:89:21:67:55:1B:26:B4:63:41:4E:18:A3:98:8A
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 019D25BA7ABC4CB6C66EEC51F1CA908241A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number: 1813
Signing time: Wed 25 Mar 2026 16:01:11 +0000
Manifest this update: Wed 25 Mar 2026 16:01:11 +0000
Manifest next update: Thu 26 Mar 2026 16:01:11 +0000
Files and hashes: 1: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: hnY7yCoUjXxEYe9G1Gvok6ZKPY9GVSP4ig168XLhKjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:7a:bc:4c:b6:c6:6e:ec:51:f1:ca:90:82:41:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Mar 25 16:01:11 2026 GMT
Not After : Mar 26 16:01:11 2026 GMT
Subject: CN=743b04a31a03892167551b26b463414e18a3988a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:89:03:6a:ba:81:4e:60:d1:12:97:b4:e2:
4e:17:26:c1:b5:78:8e:ee:83:7d:ee:7f:cf:8b:d2:
b5:6d:75:88:21:6a:37:24:9a:b1:7e:65:32:25:20:
fb:e2:2d:ba:9a:9c:cc:d0:fc:1f:48:4b:e2:93:32:
d9:08:f3:e7:65:d2:d5:26:52:72:65:1b:47:94:5f:
b3:45:5c:0f:3b:14:d1:76:a2:0b:29:0d:32:7d:39:
5c:2c:f3:db:76:4d:90:76:87:61:3f:40:30:eb:2c:
93:d8:64:c2:55:90:bb:4c:97:b5:79:e3:16:32:5c:
22:70:e7:31:02:a5:e5:52:f9:9f:97:06:98:ef:3b:
d9:2b:d5:09:64:89:bf:f9:b8:c2:f9:07:48:fc:fd:
f3:0c:c0:ec:d3:42:00:c5:10:e7:44:c6:a3:29:77:
03:54:6c:f1:22:a5:f0:6d:22:18:a5:8c:6f:2c:8d:
cb:3e:83:e0:dd:42:5f:91:3b:0d:ed:3a:71:f4:f6:
94:8b:46:40:f4:f8:c7:95:6c:ab:e2:b4:21:46:0c:
61:4c:ba:36:e9:07:18:be:44:19:5f:d5:7d:7a:43:
a2:92:d5:38:7e:a1:d5:fd:65:e4:8b:d0:fd:48:9f:
84:17:0c:da:17:89:71:b1:79:f4:ab:a7:68:eb:88:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:04:A3:1A:03:89:21:67:55:1B:26:B4:63:41:4E:18:A3:98:8A
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:07:7c:9f:93:25:fa:cd:21:67:75:8e:b4:5a:30:7c:13:03:
2b:e0:0c:2c:64:c3:b6:f1:b3:37:8e:b7:42:ff:56:a5:b2:0f:
21:09:4b:7c:4c:f4:8e:3b:4d:16:78:44:05:9a:68:9a:c5:dc:
00:0e:92:30:a4:c9:8e:b9:79:4b:43:01:d3:fa:1b:12:5e:bd:
86:79:dd:ca:a2:1e:1f:74:d2:55:4f:ce:61:8f:0a:a9:8d:bb:
cb:9a:2d:9d:b7:ff:6e:9f:38:48:ff:99:65:3d:cc:d7:e6:d9:
ab:b1:a9:61:23:3e:f1:f7:1e:9d:46:29:55:4c:0d:55:2e:10:
51:de:60:89:6d:9d:f2:05:19:18:c6:f2:93:3b:1e:a0:83:2f:
1d:b0:00:0b:15:b8:c3:b7:a5:6b:bd:41:cf:96:ca:2b:a1:27:
0a:90:09:5e:30:c2:bc:85:72:43:76:f7:ce:da:18:8c:24:3d:
3c:e1:99:70:dd:4a:46:d7:3c:fd:fd:a7:3e:3d:b9:f9:da:66:
a6:da:17:7c:3f:dc:da:b3:41:50:93:ec:45:86:a6:07:03:43:
8a:81:aa:15:e9:3b:ab:9b:70:8c:2e:c7:cb:5d:66:36:24:da:
1f:47:ea:5f:91:cd:1d:61:87:98:e2:1d:76:fe:c2:71:ba:fc:
7d:7a:04:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lunq8TLbGbuxR8cqQgkGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDc0MTA4ZjBkMTQ1OWI2MmI2YzdhZGIyN2Q2OTM0YmEw
YmU3YTUwHhcNMjYwMzI1MTYwMTExWhcNMjYwMzI2MTYwMTExWjAzMTEwLwYDVQQD
Eyg3NDNiMDRhMzFhMDM4OTIxNjc1NTFiMjZiNDYzNDE0ZTE4YTM5ODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkOJA2q6gU5g0RKXtOJOFybBtXiO
7oN97n/Pi9K1bXWIIWo3JJqxfmUyJSD74i26mpzM0PwfSEvikzLZCPPnZdLVJlJy
ZRtHlF+zRVwPOxTRdqILKQ0yfTlcLPPbdk2QdodhP0Aw6yyT2GTCVZC7TJe1eeMW
MlwicOcxAqXlUvmflwaY7zvZK9UJZIm/+bjC+QdI/P3zDMDs00IAxRDnRMajKXcD
VGzxIqXwbSIYpYxvLI3LPoPg3UJfkTsN7Tpx9PaUi0ZA9PjHlWyr4rQhRgxhTLo2
6QcYvkQZX9V9ekOiktU4fqHV/WXki9D9SJ+EFwzaF4lxsXn0q6do64g2cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQ7BKMaA4khZ1UbJrRjQU4Yo5iKMB8GA1UdIwQY
MBaAFCEHQQjw0UWbYrbHrbJ9aTS6C+elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZWZiNDQtMDEyYi00MTVmLTgyMjAt
YzYyMjBlMTg1Njk0LzEvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZWZiNDQtMDEyYi00MTVmLTgyMjAtYzYyMjBlMTg1Njk0
LzEvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgd8n5Ml
+s0hZ3WOtFowfBMDK+AMLGTDtvGzN463Qv9WpbIPIQlLfEz0jjtNFnhEBZpomsXc
AA6SMKTJjrl5S0MB0/obEl69hnndyqIeH3TSVU/OYY8KqY27y5otnbf/bp84SP+Z
ZT3M1+bZq7GpYSM+8fcenUYpVUwNVS4QUd5giW2d8gUZGMbykzseoIMvHbAACxW4
w7ela71Bz5bKK6EnCpAJXjDCvIVyQ3b3ztoYjCQ9POGZcN1KRtc8/f2nPj25+dpm
ptoXfD/c2rNBUJPsRYamBwNDioGqFek7q5twjC7Hy11mNiTaH0fqX5HNHWGHmOId
dv7Ccbr8fXoEjA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:08 2026 by rpki-client