Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
File: Iycd4-AQWavm0aWTxKJP9uGI1k8.mft (raw, json)
Hash identifier: FaeYfIEl8wDxqd4HJYBHF62vZ/BsNAhTu2aGztwzZtw=
Subject key identifier: 7C:E4:66:C3:41:6E:86:2F:09:C3:5C:B4:C8:9F:AD:2D:10:03:6F:40
Authority key identifier: 23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
Certificate issuer: /CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Certificate serial: 019D2703DA3747E82D58E1582929FBC9C01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
Manifest number: 1086
Signing time: Wed 25 Mar 2026 22:00:56 +0000
Manifest this update: Wed 25 Mar 2026 22:00:56 +0000
Manifest next update: Thu 26 Mar 2026 22:00:56 +0000
Files and hashes: 1: Iycd4-AQWavm0aWTxKJP9uGI1k8.crl (hash: gNCnulGcRak/7QlO0eOiu1onP7GwA6e8dFTEZYOP1CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:da:37:47:e8:2d:58:e1:58:29:29:fb:c9:c0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Validity
Not Before: Mar 25 22:00:56 2026 GMT
Not After : Mar 26 22:00:56 2026 GMT
Subject: CN=7ce466c3416e862f09c35cb4c89fad2d10036f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:5a:30:e0:6a:fc:3d:cf:34:d4:1e:34:d1:
0f:4c:c9:95:f8:ae:ce:5c:66:93:5e:34:3f:0f:47:
51:38:03:c9:59:56:e1:ef:d0:93:78:a3:49:35:1a:
dc:64:60:cb:35:33:93:26:0d:57:57:85:84:c8:e5:
41:e2:01:0d:23:98:6c:ca:12:70:f8:1b:78:d6:1a:
4b:69:df:7b:b0:65:0e:5f:b1:cc:a4:e6:22:5c:0b:
12:01:cc:dd:b6:d0:c7:18:97:c5:b8:bf:53:50:89:
bc:2f:73:b5:50:4e:7f:2c:e2:65:a1:2c:52:20:e7:
69:74:be:fb:67:e2:21:b2:1e:2b:e5:2c:fa:d6:b0:
c8:eb:8b:33:ff:72:d1:6a:8c:31:13:df:b8:6a:ac:
b2:42:5c:d9:b3:6d:ab:94:1a:a2:13:d6:40:4e:2a:
38:20:04:e6:13:71:6b:ea:23:75:64:a1:93:d0:1e:
ea:3a:69:c8:df:4f:4a:c7:be:07:be:7b:62:bd:86:
1d:39:76:f9:99:4c:05:b9:9c:b9:77:90:43:2f:b9:
ab:97:64:2b:d7:d9:54:7e:7d:a5:0a:e5:f6:37:cc:
16:7c:f9:ff:7a:87:5d:5b:f0:73:d0:f3:26:5f:67:
4f:c6:99:4d:77:91:56:23:54:ab:7e:16:e7:b6:e7:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:66:C3:41:6E:86:2F:09:C3:5C:B4:C8:9F:AD:2D:10:03:6F:40
X509v3 Authority Key Identifier:
keyid:23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f4:06:c1:1c:8e:a6:ee:53:ef:8f:d3:e8:15:73:dd:d2:da:
cc:b8:b5:85:7d:33:87:70:ff:ac:f5:47:63:b9:44:f1:3d:a6:
79:3a:f3:b9:81:b6:45:fc:5f:7f:b1:9e:9c:a5:80:26:ab:5b:
d0:52:35:57:a9:e4:e2:ad:91:58:7d:6e:fa:a5:33:c0:6c:52:
14:5b:1e:e9:09:15:35:25:b0:2f:2f:59:a1:21:18:10:11:6a:
ff:f4:a8:10:d2:3e:26:b3:1c:52:37:13:40:f0:9d:67:a9:0a:
56:ec:0b:c2:e7:0e:dd:ee:a0:33:99:19:81:08:21:0a:14:9a:
c2:7b:8a:ed:03:c4:17:11:5e:c0:5d:6c:25:4e:2a:22:15:c0:
3d:5a:06:73:ca:6e:11:c0:20:4f:99:08:d6:fd:af:01:74:6e:
ec:0f:31:13:f2:f9:37:18:08:e2:c2:11:78:7e:69:bd:77:56:
b1:af:d5:2b:96:02:fa:9d:0b:14:49:4e:5a:23:81:30:33:71:
92:f9:cd:30:c4:d0:9d:e9:50:09:16:1b:48:a8:fa:0e:72:d6:
d3:0c:8e:aa:dd:b2:67:7a:11:28:53:43:84:1c:9c:61:26:22:
43:fb:c1:c1:07:ac:10:db:de:ed:30:41:28:06:7a:96:ca:61:
5f:a2:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:51 2026 by rpki-client