Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
File: _izVtrb_hGG7l5eGHJuBZ2oHU6o.mft (raw, json)
Hash identifier: mFXL1+ych7o3k1HzYKNd3vi49l+Rutkg8o/NKZE0WMU=
Subject key identifier: 4E:BA:8B:F9:A1:C9:D3:D0:2F:1E:48:71:34:3F:EC:7A:04:7D:DE:BE
Authority key identifier: FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
Certificate issuer: /CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Certificate serial: 019D273B394560C19509BFDE98D048F2074E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
Manifest number: 0842
Signing time: Wed 25 Mar 2026 23:01:25 +0000
Manifest this update: Wed 25 Mar 2026 23:01:25 +0000
Manifest next update: Thu 26 Mar 2026 23:01:25 +0000
Files and hashes: 1: _izVtrb_hGG7l5eGHJuBZ2oHU6o.crl (hash: uo3V4Rb6LCs2fn7+7cTlChN26NFVy7Gl5mr+qoP4cVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:39:45:60:c1:95:09:bf:de:98:d0:48:f2:07:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Validity
Not Before: Mar 25 23:01:25 2026 GMT
Not After : Mar 26 23:01:25 2026 GMT
Subject: CN=4eba8bf9a1c9d3d02f1e4871343fec7a047ddebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:a4:c4:d6:ac:ee:8d:50:3e:73:9b:39:63:
84:05:3c:3b:ca:b1:7a:39:1a:c9:d7:a4:e7:c6:e5:
1e:fb:57:bc:fb:f1:d8:e8:a4:10:79:59:52:72:f1:
ff:f3:cf:90:e1:88:c1:fd:38:f4:c9:d1:cc:c4:b0:
0a:dd:fb:0d:06:48:20:91:c1:ed:0b:5e:c9:31:2a:
ca:c6:2b:6e:20:d2:e1:df:3c:57:19:f5:6c:f2:39:
fc:a0:9e:04:40:46:66:87:fa:4d:0e:6b:e3:c4:bb:
da:90:52:12:16:b2:21:26:5e:79:2a:79:62:37:cc:
e6:6e:48:7f:cd:07:dd:5a:a0:ed:2c:dd:2b:25:1c:
2d:8d:19:2a:d1:a8:28:54:d3:47:0d:18:b6:6a:63:
d5:01:17:ba:e9:a2:f1:9c:4d:20:34:c9:93:94:ed:
e2:f1:41:41:02:9c:9a:43:7e:50:d0:08:2b:37:a1:
35:74:54:4e:9a:78:68:c6:61:c0:23:15:1a:1a:db:
76:81:57:b5:c2:4d:e5:ee:3f:28:4d:6c:d9:4c:d8:
ec:ed:07:82:ea:56:4a:5a:27:28:d9:31:7f:28:22:
3a:40:6d:3b:fd:0a:4a:2d:03:0c:a4:15:05:22:f4:
d4:85:b5:c8:c7:01:11:b1:47:0a:c9:bf:cc:bf:7e:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:8B:F9:A1:C9:D3:D0:2F:1E:48:71:34:3F:EC:7A:04:7D:DE:BE
X509v3 Authority Key Identifier:
keyid:FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c9:2e:1d:fb:63:91:9b:35:9e:6a:b1:0d:e7:65:52:7a:02:
b1:ec:85:19:1f:e4:8d:17:f4:83:54:35:e7:f6:ac:28:a8:2a:
30:51:b9:30:8a:7e:b8:72:07:2e:9e:b1:b4:ab:85:fd:2c:3a:
97:91:7d:47:1e:0b:f3:e2:9b:b1:9f:8f:dc:da:02:12:87:35:
c2:38:a0:ac:ca:d4:65:45:1a:eb:dd:64:19:39:7b:a2:fb:40:
0c:b6:10:f3:9a:5b:bf:1e:ce:34:61:b7:24:42:fa:94:23:74:
89:35:8e:db:35:6f:86:97:6b:c3:fa:c1:e6:4e:dc:1d:8e:8c:
50:78:b3:fd:ab:dc:7e:9a:65:ee:a4:0e:c0:c7:b2:2e:a7:73:
98:24:c9:e1:75:11:bb:43:f4:09:10:95:7e:aa:7a:ce:bd:21:
69:19:f6:bf:7f:94:f9:cd:be:af:63:8e:4a:a1:9b:bd:f1:a3:
ac:51:b0:f3:f3:84:1d:28:f0:1a:a8:a7:41:85:6b:90:b9:15:
cb:31:9c:61:93:e1:9f:7f:75:ef:c5:05:56:e7:b2:8a:bb:11:
2e:28:c4:f5:db:8a:b4:ac:71:6d:73:8d:48:ec:96:b2:28:7f:
ac:3e:b3:bf:9a:de:fd:d4:44:43:8f:4f:af:30:05:66:f1:49:
a6:59:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:50 2026 by rpki-client