Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2fbdc7-e55f-4841-b704-6cbb0acf84e7/1/IHBtyFxJaqb0yhHYQJGEbI3jWAY.mft
File: IHBtyFxJaqb0yhHYQJGEbI3jWAY.mft (raw, json)
Hash identifier: pAnWXOV7dd2y8h1TOZnIDfRE26lMrXiB76dx7UcN8wI=
Subject key identifier: 01:C8:56:9C:05:12:D9:FB:59:05:F6:E0:DC:CD:FA:83:4A:19:39:9F
Authority key identifier: 20:70:6D:C8:5C:49:6A:A6:F4:CA:11:D8:40:91:84:6C:8D:E3:58:06
Certificate issuer: /CN=20706dc85c496aa6f4ca11d84091846c8de35806
Certificate serial: 019D31F5C5FCC6D25229E4B61D95532F8402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHBtyFxJaqb0yhHYQJGEbI3jWAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2fbdc7-e55f-4841-b704-6cbb0acf84e7/1/IHBtyFxJaqb0yhHYQJGEbI3jWAY.mft
Manifest number: 0109
Signing time: Sat 28 Mar 2026 01:01:23 +0000
Manifest this update: Sat 28 Mar 2026 01:01:23 +0000
Manifest next update: Sun 29 Mar 2026 01:01:23 +0000
Files and hashes: 1: IHBtyFxJaqb0yhHYQJGEbI3jWAY.crl (hash: 3yCFx6AW9l2Ok1jMNz6dnEVz7Gz6QAXEIaHLp32GMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2fbdc7-e55f-4841-b704-6cbb0acf84e7/1/IHBtyFxJaqb0yhHYQJGEbI3jWAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2fbdc7-e55f-4841-b704-6cbb0acf84e7/1/IHBtyFxJaqb0yhHYQJGEbI3jWAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHBtyFxJaqb0yhHYQJGEbI3jWAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:c5:fc:c6:d2:52:29:e4:b6:1d:95:53:2f:84:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20706dc85c496aa6f4ca11d84091846c8de35806
Validity
Not Before: Mar 28 01:01:23 2026 GMT
Not After : Mar 29 01:01:23 2026 GMT
Subject: CN=01c8569c0512d9fb5905f6e0dccdfa834a19399f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:6c:99:90:2b:a5:17:8e:f2:bf:c8:ed:b7:
fb:54:03:1e:40:e7:1b:d9:88:61:94:dc:2d:3b:73:
2e:f2:41:49:1c:0a:97:62:a8:5b:8c:3f:f9:0c:1f:
ff:be:fb:f4:b6:23:2f:8d:c8:92:53:88:cd:ca:75:
c8:51:71:d2:0b:3c:10:cf:a2:13:70:3c:e3:2d:0e:
e2:a5:12:09:1c:0d:2e:b6:04:62:e6:09:dd:c6:16:
3d:3d:61:2b:3c:a1:e4:7f:5e:73:d3:c9:a3:b8:ff:
7a:5b:fd:84:77:dc:69:c4:30:ca:83:f6:25:8a:02:
3b:5a:3b:2c:e9:67:81:50:36:b5:d5:a7:61:4b:b9:
8c:1a:96:68:9c:61:4e:8e:96:a6:9a:f8:02:53:b9:
9f:9a:48:08:6c:a8:5d:5d:c6:a6:f3:ad:a1:b8:3d:
29:a1:b8:66:72:b8:61:7f:bb:9e:18:e4:02:17:e0:
f1:c1:d5:3d:84:2c:3c:4a:68:19:47:2a:3f:1e:65:
56:bf:58:f7:6b:72:8a:a0:4f:77:09:3f:a1:97:9e:
16:9a:d2:70:4b:48:43:fb:3b:e8:6d:ff:a2:4a:ab:
40:78:42:6d:29:41:47:c5:86:80:0f:e6:06:12:c1:
91:f0:8e:d0:87:7e:73:39:ba:95:d4:2b:8b:5d:b8:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C8:56:9C:05:12:D9:FB:59:05:F6:E0:DC:CD:FA:83:4A:19:39:9F
X509v3 Authority Key Identifier:
keyid:20:70:6D:C8:5C:49:6A:A6:F4:CA:11:D8:40:91:84:6C:8D:E3:58:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHBtyFxJaqb0yhHYQJGEbI3jWAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2fbdc7-e55f-4841-b704-6cbb0acf84e7/1/IHBtyFxJaqb0yhHYQJGEbI3jWAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2fbdc7-e55f-4841-b704-6cbb0acf84e7/1/IHBtyFxJaqb0yhHYQJGEbI3jWAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b6:3d:2b:20:fa:85:44:e2:da:92:35:b8:fe:60:cd:98:a4:
ea:56:d5:d1:1c:7e:5c:46:a6:1f:4e:90:f7:27:7e:3a:42:ba:
a8:40:ce:f7:89:80:15:24:a6:e9:8e:95:1f:88:2f:aa:77:46:
02:38:54:99:fb:37:48:f3:47:e9:b2:8d:e6:b9:5d:a8:c6:df:
9a:39:58:73:54:3b:6d:81:05:cd:f2:af:e9:32:97:63:d4:2a:
fc:89:4d:c8:bd:3e:7b:67:8e:52:1d:cd:cd:87:0f:ea:08:40:
a9:80:70:92:a4:7e:7a:6d:34:62:54:7a:2f:70:80:70:8d:ca:
fc:43:06:ce:05:c2:41:5a:d8:af:3e:16:5a:ed:20:85:e7:18:
a5:63:c7:5b:27:d5:b0:36:90:66:75:c4:09:fb:b0:bb:6f:90:
22:7a:78:8c:1c:59:b0:e2:51:89:b2:23:90:e1:dd:f6:65:ee:
03:f0:bf:42:73:84:4c:a2:d2:7c:4f:61:72:a9:83:22:dd:25:
ad:87:0e:91:05:1d:17:e2:77:4d:e4:d3:cf:32:40:ff:35:4a:
aa:f6:5f:9b:1e:5c:29:bc:c6:50:26:0b:ed:69:38:89:27:73:
35:31:6c:71:f9:c7:a0:3a:de:6b:7c:87:a2:f4:5b:dc:e2:ae:
3d:63:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:40 2026 by rpki-client