Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: rRjr0Tvq+P3CBne+ic3C5NHT6qcXUGEXvwG6cFEtF9Y=
Subject key identifier: 8B:08:AC:96:88:95:91:6D:D3:77:70:91:D1:AD:C4:D9:86:29:87:35
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 019D27A8AFB668BD2E7523D796800E2CE231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 1632
Signing time: Thu 26 Mar 2026 01:00:59 +0000
Manifest this update: Thu 26 Mar 2026 01:00:59 +0000
Manifest next update: Fri 27 Mar 2026 01:00:59 +0000
Files and hashes: 1: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: Qatao6eoFHDXZ67RvmsBPrtdepjkI/NZHI8ERzkH7aI=)
2: oL7Va2kH8P-3vrFReEUhkCyRmcY.roa (hash: r6Ou/HXbegxpeXGw26fS8AHPIewd+N00kGGB9t5uCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:af:b6:68:bd:2e:75:23:d7:96:80:0e:2c:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Mar 26 01:00:59 2026 GMT
Not After : Mar 27 01:00:59 2026 GMT
Subject: CN=8b08ac968895916dd3777091d1adc4d986298735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:a4:7b:2f:db:98:ea:1b:c9:73:8d:f3:be:
bf:34:a5:bb:21:a7:d6:40:3a:a7:a7:6b:4b:5a:6b:
3d:0e:c7:59:f4:c0:3a:29:f5:a6:8d:48:a1:a1:a1:
70:7e:36:8c:9a:da:23:1e:40:94:4c:66:ee:0e:5b:
fc:6b:2c:f2:37:0d:ae:cb:ef:49:6c:e5:81:1d:25:
af:b0:85:1f:a8:c6:e2:25:83:38:d0:11:30:cc:93:
72:3d:72:bb:5c:34:1d:33:f7:4c:8e:dd:82:ff:7b:
97:9a:ba:5f:93:dc:c6:26:5b:ad:b4:9c:7b:5d:a3:
d8:a4:cd:46:17:5b:5d:ef:91:76:77:4e:25:4a:0d:
65:b0:dc:0d:ad:5d:d0:9d:6b:75:f6:5e:d1:5e:de:
a2:cf:10:36:71:17:43:0d:3b:98:9f:ee:fa:bc:46:
53:d9:a6:dc:fe:9f:6c:bb:90:ad:30:00:dc:37:92:
65:92:99:63:0c:e0:9e:8f:49:5a:ec:3a:8b:31:54:
d7:a3:f8:4f:e3:e5:59:bd:c1:4e:a8:87:20:1a:99:
ea:8f:d9:bf:8a:35:c0:08:03:d1:6b:1e:92:55:3b:
f4:3b:73:f9:5a:07:ee:f4:06:f1:80:9a:89:82:8d:
97:30:d7:0b:2c:b9:ec:3d:7d:1d:ac:cb:b2:b3:2e:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:AC:96:88:95:91:6D:D3:77:70:91:D1:AD:C4:D9:86:29:87:35
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e5:06:53:2b:2d:ef:80:98:05:7a:17:96:5e:89:f7:00:84:
7d:f8:f9:87:21:0a:68:2c:be:bc:c8:9b:e5:a7:9c:b1:77:66:
4f:51:51:6f:1d:4d:f2:7e:a4:88:0c:16:2c:40:1e:bf:c6:d8:
43:57:51:d9:ae:d2:0e:e0:ff:74:1a:5c:12:a2:ca:f1:5c:84:
45:42:e6:d6:9f:f2:38:78:5a:f2:44:48:95:58:55:0a:ff:17:
86:40:5a:a5:83:84:21:4f:d9:72:39:d2:4b:10:c8:4c:c4:00:
f2:5e:c8:a2:ab:ab:ae:25:74:e8:2f:99:bc:d0:4a:d5:77:61:
f7:cf:7b:53:c1:2b:e5:72:8e:9d:4a:73:b5:f0:23:ae:25:ee:
3d:27:9d:b5:f8:08:33:a8:57:01:a2:6d:1e:4a:fe:4f:35:23:
55:3e:65:3b:ae:9e:c9:39:e0:f2:43:f5:dd:63:77:64:10:d1:
99:67:e1:7b:b8:bf:34:31:f2:f1:53:e4:14:1b:bb:ef:9e:fb:
56:bb:b8:b3:d7:fd:94:e7:a9:5a:2b:9c:34:5f:f3:e0:d4:18:
4a:d7:bd:1b:1a:fb:1d:aa:6d:1a:0f:2a:61:86:45:67:66:15:
94:1f:cf:9d:77:9f:48:6b:df:46:03:86:1d:1e:4f:22:b8:fa:
57:c2:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:24 2026 by rpki-client