Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: etUhL2boC75OLgJAgvBVi/M/rpUbMHkglPxlKJ8qows=
Subject key identifier: FC:14:13:17:4A:2D:9E:A7:CF:E1:08:D4:44:E6:57:A7:EA:98:CE:BB
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 019D269619E498410A62BAF4EDAD042373C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: 0321
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: mvSd+AdUgf5Xm0u2PlajcGuN6Xbvhrxsu5wpv4rOImU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:19:e4:98:41:0a:62:ba:f4:ed:ad:04:23:73:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=fc1413174a2d9ea7cfe108d444e657a7ea98cebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:49:24:8e:91:80:1e:a8:e0:16:5d:f6:9a:
7d:40:b9:38:69:02:94:13:5d:f9:2a:31:cc:89:76:
05:3a:81:47:72:66:17:2f:13:bb:e5:70:48:da:81:
96:76:0c:21:c4:bf:30:64:ed:f1:80:6a:aa:7f:e7:
de:3f:16:c0:66:9d:c2:09:39:e4:c3:ae:45:90:73:
9e:a3:7d:de:8a:fa:7d:b0:c8:24:61:60:1c:d1:60:
46:0b:71:3c:97:d7:a6:05:90:ed:af:19:7c:f7:e5:
0f:1e:d5:ea:64:04:53:88:5b:ac:f0:d1:d8:d3:c7:
e2:da:ea:e4:98:5b:3f:c1:12:b6:f5:86:44:03:1f:
fd:dd:62:3d:f9:61:c6:ce:a0:36:63:38:85:71:88:
9d:18:51:a3:15:a6:b2:0e:f0:5b:73:bc:17:b1:c8:
4d:32:71:3d:5c:a9:3c:55:d1:50:7f:3b:c6:e0:8e:
66:02:22:66:b7:bb:75:99:cf:da:f6:a0:fe:62:a2:
f5:fb:11:c7:f5:6a:ee:d7:96:4f:68:82:fb:26:9d:
a9:3c:61:69:34:bf:74:4d:a7:9f:a4:c0:9b:e4:87:
c8:fa:1f:95:34:2a:f0:d0:10:26:91:17:42:03:cc:
c5:f9:06:82:25:d4:ca:26:c3:f1:30:d8:f8:71:05:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:13:17:4A:2D:9E:A7:CF:E1:08:D4:44:E6:57:A7:EA:98:CE:BB
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:70:2a:b5:3a:4a:74:5b:46:33:65:8e:85:79:c8:fc:97:49:
25:df:c3:cb:08:ba:62:78:fd:67:52:bd:39:52:7e:3b:a5:21:
b3:92:12:79:42:db:8d:97:9c:1c:b1:a3:46:a6:93:fe:61:2b:
27:b6:86:67:da:c0:fb:17:80:87:a4:e2:13:2b:f8:5c:93:f3:
97:fa:44:6f:98:f3:dd:07:72:fd:43:f5:25:b5:22:1a:84:8d:
34:c5:86:3f:f1:27:2b:3c:b2:5e:6f:8d:e3:e1:2c:48:5b:4e:
11:28:6f:77:c2:11:83:f2:b2:d5:63:0f:38:1e:dc:87:52:a7:
be:1e:8d:e1:27:fd:73:a2:f5:db:4b:57:c2:b0:c9:36:9a:aa:
b2:04:f6:f9:9f:b7:db:1e:29:b0:17:23:fc:f2:03:11:62:36:
14:ba:a0:fe:21:53:90:96:96:d5:a3:7b:bf:0f:b5:cf:1f:52:
53:7b:7d:b4:dc:18:98:85:79:6e:88:8e:75:26:44:6b:55:79:
59:09:0a:8c:1e:e6:44:0f:d4:55:22:5f:e0:78:7f:b4:e6:b3:
00:1a:ba:17:19:98:a5:3c:26:87:62:2f:4c:d3:8a:bf:26:0a:
3c:aa:92:1f:69:08:b9:06:c4:94:68:cc:83:b1:9e:f2:ee:9b:
9c:3d:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:22 2026 by rpki-client