Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
File: iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json)
Hash identifier: FJCft+Yy88jzfabEokTT0xezniadt7Rc9Y2QkcB7j/A=
Subject key identifier: 3F:25:88:10:21:A6:49:D1:B8:9D:9E:6D:4C:D8:F7:6D:6D:CD:3A:C0
Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
Certificate issuer: /CN=89a5aae3d7f72eece8396b41492208add5218435
Certificate serial: 019D27DF7AF99C37B3B54BB84F606FDF460E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
Manifest number: 1777
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: MaZpAa85fzBT50RXzDyRUpFr1EZdLm5HODMoBKBaVqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7a:f9:9c:37:b3:b5:4b:b8:4f:60:6f:df:46:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=3f25881021a649d1b89d9e6d4cd8f76d6dcd3ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:a8:53:39:0d:62:98:0b:2d:b6:f5:6f:23:
5d:fa:68:08:5b:1e:ad:d6:2b:8c:ab:cb:96:85:25:
df:3a:63:40:10:d6:e4:da:48:48:83:66:a3:5c:ec:
c8:93:62:4f:76:81:8f:e7:f8:6a:78:a8:74:80:de:
3d:1e:b8:b5:a6:11:8d:c9:1a:a3:3e:98:97:30:80:
a3:41:ed:18:57:bd:bf:28:32:0d:7f:36:01:e0:f2:
f3:b4:d2:eb:7b:9a:9d:c1:55:ce:31:a7:b2:08:e2:
0b:1f:dc:ea:b5:5f:a1:fe:c1:78:f4:cc:84:e9:01:
bd:1a:2d:5b:ae:09:f5:af:ee:d3:59:b3:6e:87:16:
a5:6a:50:20:e6:87:32:2c:09:bc:a1:2e:60:8b:ff:
f4:e1:3e:63:4c:52:f4:cf:4f:79:69:d0:d6:25:ff:
52:15:94:d3:45:ab:a3:e0:cd:4f:23:6a:2d:96:23:
f9:81:21:d3:cc:d8:6e:45:ba:d7:5e:db:ec:49:dc:
29:a9:dc:01:51:55:ec:59:c2:81:46:67:4a:4a:f5:
7d:0d:d8:25:d4:59:7a:35:a2:29:c1:d1:34:1e:01:
e9:c4:0a:10:19:fe:5a:fa:f6:44:bc:0f:33:a9:c7:
70:79:bf:bc:ed:bc:d1:73:6a:7c:ff:30:3a:2c:4e:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:25:88:10:21:A6:49:D1:B8:9D:9E:6D:4C:D8:F7:6D:6D:CD:3A:C0
X509v3 Authority Key Identifier:
keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e5:68:da:7e:81:71:6e:a2:db:39:a4:01:e5:33:dc:0e:28:
a1:e7:0c:ae:1b:80:5e:9c:9c:91:b7:0f:34:20:e4:20:ce:fe:
bc:05:9f:1e:90:d9:ec:7d:83:5e:5f:ec:c1:ea:be:2f:02:b8:
36:0f:65:08:97:1a:3f:93:ad:ea:f1:c8:ff:e1:53:39:7b:a4:
b3:71:da:c8:7e:a3:41:52:ae:bf:0d:f9:ba:4c:e9:b2:db:fd:
cd:cb:85:28:3c:a7:89:3f:26:63:ac:02:13:6c:f0:2a:3d:49:
dc:7b:6e:8f:7e:aa:ca:d0:16:4d:da:ef:8f:b2:b9:83:13:cd:
84:87:fd:f1:3b:9e:63:79:0b:13:55:ff:a5:fd:68:73:9e:c7:
67:6c:4f:4a:5c:94:ae:6c:42:4c:f3:50:46:36:27:b9:3d:6c:
06:ff:7f:75:35:77:62:6f:18:28:5e:75:5d:42:d9:d1:c9:d0:
90:7d:84:86:8b:a3:c4:a5:4a:0e:3c:a6:8c:f0:be:c3:f7:c6:
77:78:36:3a:32:01:5a:e2:60:14:66:86:15:0e:41:39:2a:fe:
c1:70:c3:8c:e6:47:82:59:12:ce:16:88:73:5a:f4:61:c9:af:
8e:2a:8b:1a:c3:69:7c:ff:f6:41:10:f3:bc:b2:0b:d4:b5:49:
ba:43:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:06 2026 by rpki-client