Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier: jfxIHkAOk0BhmPRccH8VQYPtOtA7dee9rDazBYpreOA=
Subject key identifier: C3:A8:03:21:1B:E2:8E:DD:8D:DE:AB:89:6A:D9:23:0A:E7:F3:E3:A8
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial: 019D29CE588C8F81B1207FC6000335CC5EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number: 1088
Signing time: Thu 26 Mar 2026 11:01:21 +0000
Manifest this update: Thu 26 Mar 2026 11:01:21 +0000
Manifest next update: Fri 27 Mar 2026 11:01:21 +0000
Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: xDAZnTV2sH/gPkzEt0y28KKISx10pHuV8PtWIUHFvcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:58:8c:8f:81:b1:20:7f:c6:00:03:35:cc:5e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Validity
Not Before: Mar 26 11:01:21 2026 GMT
Not After : Mar 27 11:01:21 2026 GMT
Subject: CN=c3a803211be28edd8ddeab896ad9230ae7f3e3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:96:7f:63:c9:eb:63:d2:0f:96:17:48:1f:
80:23:b5:5f:33:e0:1d:cf:c6:76:18:03:9f:f4:90:
e2:3d:32:5e:b0:59:ae:97:03:c6:9e:d9:ce:85:2d:
cd:d8:5b:0e:22:d3:4b:81:67:7f:11:be:7f:84:e5:
a1:50:96:07:ee:e8:98:28:90:88:e2:90:1a:dd:f3:
c1:c5:99:a1:5c:e8:e9:cf:4c:d5:9f:9b:fe:d7:ea:
eb:2b:63:f7:51:6f:c4:93:d3:14:38:93:bc:69:c1:
76:ba:f6:5c:b3:c4:84:22:2b:71:f8:b4:68:2b:c4:
a5:38:78:18:2c:30:0c:c1:46:5b:43:e3:b0:e8:d5:
2b:0b:03:74:06:84:eb:91:82:b8:79:6c:91:a6:a3:
2c:16:0c:6c:f0:c2:7b:72:c4:88:95:49:7f:19:bc:
a2:16:f8:21:fa:6e:fe:34:04:16:85:43:09:d3:b4:
32:a0:62:b4:f6:37:11:91:b3:b5:97:34:07:26:da:
ca:a0:09:7a:68:f8:a2:97:e6:c5:f4:82:c9:cd:4f:
50:62:9a:b6:10:3e:af:fd:f4:4d:c3:eb:da:81:2d:
2c:7a:ca:a9:cc:6b:1d:47:fd:4b:4a:14:67:90:15:
e9:4e:37:98:f3:de:b5:89:16:65:7f:1b:9b:b7:1b:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A8:03:21:1B:E2:8E:DD:8D:DE:AB:89:6A:D9:23:0A:E7:F3:E3:A8
X509v3 Authority Key Identifier:
keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:12:bb:fb:18:0c:07:7b:4f:2c:20:a2:f2:d5:a2:72:cf:43:
bd:da:5f:62:44:aa:3f:06:6d:f3:54:3d:af:01:24:fc:b4:6a:
a2:d1:57:b2:36:4b:30:94:12:15:2a:9d:f6:86:c7:3e:af:0c:
e8:2e:c2:26:8c:71:d0:6a:e0:4d:8e:37:43:1a:4a:5c:ef:37:
b8:ba:15:4f:e4:f8:b2:bd:85:48:30:c5:5e:71:c5:2f:ff:09:
90:6a:4d:00:7a:1e:80:5c:22:dd:1f:8c:5e:3d:60:53:9c:31:
aa:4e:7e:ba:d4:f6:df:59:b5:1f:d7:4f:05:8b:96:84:32:7c:
92:1d:fb:ff:82:33:90:e1:29:39:6a:9b:4a:d5:96:41:3b:15:
8c:87:98:31:fd:f4:d1:96:18:c8:a8:7f:41:41:1d:df:bb:1d:
d1:be:0f:df:03:db:33:65:fa:10:c5:7c:21:45:89:66:a3:9a:
2b:65:5b:ce:42:66:18:7c:04:0e:9e:13:dc:7c:fc:04:88:e6:
70:5e:c8:a2:b7:2c:99:e4:17:b0:4c:7c:c0:02:b4:6a:fb:75:
b7:4d:e5:cf:d4:20:c2:c3:4d:76:9a:f2:83:b5:5f:cf:ca:5b:
cf:21:e6:97:82:ee:c4:4b:7e:20:a4:72:01:f7:ba:e7:0a:f2:
3d:dc:bc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:39 2026 by rpki-client