Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.mft
File: hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.mft (raw, json)
Hash identifier: CY2oBGq742jbdk7qeYB6Y0N950Nm1k1eDZEANQrErXs=
Subject key identifier: EC:0D:05:CF:84:DD:B2:F2:D4:5A:A5:FD:7D:3D:5A:24:EA:75:0B:14
Authority key identifier: 84:89:4E:4F:50:E8:C2:6C:F8:AC:74:7E:99:BF:06:7E:0A:7D:45:DC
Certificate issuer: /CN=84894e4f50e8c26cf8ac747e99bf067e0a7d45dc
Certificate serial: 019D273ADA35B23407527BE5269DEFE6CB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.mft
Manifest number: E2
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.crl (hash: FTcoiprU+QRuyWaOj5TbI25gNnwJ5dq6N2CWjfbFQgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:da:35:b2:34:07:52:7b:e5:26:9d:ef:e6:cb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84894e4f50e8c26cf8ac747e99bf067e0a7d45dc
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=ec0d05cf84ddb2f2d45aa5fd7d3d5a24ea750b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:46:0b:ff:da:ef:14:b7:ac:a8:26:a9:0f:
ce:53:86:d7:3c:89:04:8f:11:78:5b:bb:b0:b3:a0:
d3:29:73:54:f8:0b:81:f9:d4:fe:6b:b5:6a:50:85:
64:70:9c:de:69:4c:88:bf:43:b0:f7:0c:cc:01:fa:
6a:aa:5e:9f:15:be:c5:61:57:b2:db:1a:61:7b:6f:
5d:87:8d:72:7b:54:2f:88:56:ff:07:5e:bd:ef:fd:
c1:5c:18:77:5b:ca:6a:09:0a:28:54:c6:1a:a2:a2:
be:2c:1b:2d:c9:24:ba:38:8e:5d:ee:4d:d7:08:db:
5a:a7:d5:ad:b6:6c:2d:e0:4e:88:3f:dd:d2:56:60:
67:81:4d:27:cc:27:bc:fc:54:19:fb:7f:9c:eb:a7:
2d:f0:d4:34:65:08:69:7c:b3:e8:59:e5:22:29:65:
02:59:c7:05:fc:56:8a:9c:22:4f:65:1c:e4:b9:6d:
a5:38:ea:f3:8e:77:b8:59:09:d1:a3:76:c4:de:13:
ee:1f:d3:fe:4b:36:d2:b9:85:44:51:f9:6c:63:e7:
e3:6d:fd:d2:9a:03:59:8f:18:3c:e3:c7:df:da:84:
bd:4e:5a:56:13:78:9c:65:1d:fa:7b:92:17:65:e4:
4b:09:a9:37:f8:8d:07:a8:a0:ee:a9:41:2d:1f:6a:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:05:CF:84:DD:B2:F2:D4:5A:A5:FD:7D:3D:5A:24:EA:75:0B:14
X509v3 Authority Key Identifier:
keyid:84:89:4E:4F:50:E8:C2:6C:F8:AC:74:7E:99:BF:06:7E:0A:7D:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:81:91:57:5d:d6:4d:c5:e2:36:f0:67:99:cf:8c:85:eb:f7:
97:0b:8c:8d:e8:f4:fd:c2:36:fc:f5:9f:92:04:2c:22:aa:d0:
dd:86:fa:f1:bf:79:78:95:c1:a9:db:2e:cc:63:13:89:2a:8d:
34:39:16:ac:ce:80:10:d4:35:56:ef:38:cf:b6:5b:d6:b1:86:
67:ac:93:e1:1c:4a:e9:15:e7:27:ea:57:85:e4:92:c9:43:0e:
09:42:82:10:2e:12:c9:43:a8:74:14:bb:96:5f:ac:f7:59:0c:
96:78:57:07:6c:08:12:26:67:c6:46:7d:75:75:bc:f5:d7:5d:
ca:8d:27:bb:ad:4c:59:f8:61:ab:e7:59:a4:43:d3:9e:34:59:
4c:bc:5e:66:91:f5:94:7d:a5:2a:7f:dc:93:b6:da:3b:33:d6:
43:dc:e2:67:6a:d3:ab:69:ee:fe:95:12:79:77:82:d1:2b:08:
12:f6:33:87:dc:82:bd:19:b0:b3:28:01:aa:b9:9d:d5:0f:36:
df:65:87:60:db:ad:8b:81:e6:62:e2:b7:4e:5e:f2:2f:2b:0b:
f6:ef:f8:d1:75:9d:32:c8:f5:db:0e:44:99:fd:5c:0a:89:e6:
2d:41:9f:37:83:8e:e2:5b:60:39:0b:b0:50:2d:e9:ea:28:25:
e5:96:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:18 2026 by rpki-client