Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: 2tr9thNNbgqp5qOQ8NOnkIhmi13wf7qHfnkP9kY9o9w=
Subject key identifier: 17:12:A9:1D:7E:F8:DB:73:70:8D:2A:7D:27:0A:22:C7:23:3C:08:99
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 019D25F1828981387B53CA1770C1541724D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 1506
Signing time: Wed 25 Mar 2026 17:01:17 +0000
Manifest this update: Wed 25 Mar 2026 17:01:17 +0000
Manifest next update: Thu 26 Mar 2026 17:01:17 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: ydnRBthVfdtUAgA+kPLm/l7qGmVAkYcibCNYvH4dTF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:82:89:81:38:7b:53:ca:17:70:c1:54:17:24:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: Mar 25 17:01:17 2026 GMT
Not After : Mar 26 17:01:17 2026 GMT
Subject: CN=1712a91d7ef8db73708d2a7d270a22c7233c0899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:4a:90:74:79:d9:21:db:4f:2e:fc:e4:01:
7f:ee:35:85:a2:0a:e5:23:2d:21:5a:c1:53:99:28:
14:8b:8f:cb:c1:7a:7f:bb:4c:09:93:9a:ef:c8:d7:
85:8c:df:33:e2:fc:e9:78:c7:90:2f:6c:7f:61:99:
0c:bd:ec:8b:bb:f3:fe:99:ee:dd:f6:1f:66:df:b7:
65:de:b3:ed:69:e1:0f:d0:7d:ec:8a:95:1e:9a:52:
c5:9b:46:9b:39:a0:1e:99:31:3b:d4:c4:a7:fa:16:
63:ae:d3:27:3c:91:91:64:b3:2f:90:4a:b3:a6:5c:
80:d5:f9:64:7d:07:23:80:83:00:47:bd:36:13:25:
fa:b7:0c:be:9c:8f:54:1c:9e:aa:69:de:a7:af:c5:
83:5d:8a:26:21:52:79:7f:da:42:5f:92:ea:49:bc:
a6:e7:75:15:b9:8d:9c:c8:c6:66:88:3b:1d:56:22:
a9:49:15:4f:34:1d:a3:8d:0e:11:69:70:9c:fe:72:
4d:2a:43:9a:2c:fc:d0:aa:e3:58:f2:6a:75:09:2b:
a8:35:2e:6e:e7:9f:3b:f5:3c:22:a1:07:81:0b:35:
04:09:06:33:43:b1:8f:32:50:2b:38:93:80:a1:72:
7f:9d:8d:5a:04:b1:e6:e5:03:9d:6d:2a:86:48:d1:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:A9:1D:7E:F8:DB:73:70:8D:2A:7D:27:0A:22:C7:23:3C:08:99
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:80:cf:5a:8a:28:bc:a2:9f:a8:a3:a0:a1:06:4a:92:e3:58:
15:4d:08:ed:c9:93:81:c9:c4:35:d2:b5:23:a3:47:57:8c:7e:
a6:96:f6:51:84:72:38:0f:83:40:16:76:2d:cb:5f:8e:2a:47:
33:2c:c0:95:6f:53:5d:83:ab:94:f6:a2:20:36:cb:7f:ba:89:
b4:e5:76:b9:67:c0:70:8c:29:b7:1c:eb:62:2a:ef:ee:87:5e:
a9:98:2d:f4:4c:46:9e:2f:7b:83:29:ab:2e:67:d6:81:77:84:
e8:64:7b:38:75:1e:9e:f1:a1:7b:2d:d3:93:31:e9:64:ba:d6:
a7:30:94:65:06:9a:94:c8:6b:f8:2e:32:2f:fb:12:a0:3c:9b:
db:78:b3:ad:40:32:eb:15:97:bd:82:a3:a9:6c:54:63:82:cf:
e5:dd:a0:80:36:50:23:0f:c9:45:11:49:f9:2b:4e:2b:3a:8d:
23:76:35:c5:3d:4d:f9:0a:94:8c:2d:43:c8:c7:31:15:79:b7:
c0:7e:bd:81:b8:07:43:98:d3:c7:69:98:ae:6d:b4:91:d5:51:
d7:aa:68:d3:f4:3c:33:e0:8f:77:b8:4b:34:a1:19:da:fe:5c:
63:7c:f2:71:d1:86:90:37:2a:eb:01:0c:da:c1:79:4c:b5:7f:
73:78:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:34 2026 by rpki-client