Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: Us3FGzhfdtABQK4F3JgCFWXDG9p3XfuJx6RWaFxajLc=
Subject key identifier: C7:E4:0F:F9:AF:9B:FA:2E:7A:80:59:36:6B:A6:4F:2F:6D:66:DC:56
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 019D33E45408F5ED9BB94AE0EF97A190C368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 048E
Signing time: Sat 28 Mar 2026 10:01:34 +0000
Manifest this update: Sat 28 Mar 2026 10:01:34 +0000
Manifest next update: Sun 29 Mar 2026 10:01:34 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: UDk3GhPd5ukjhxP/s5JDNgSnQDUGJKPOr1ObIjyUlXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:54:08:f5:ed:9b:b9:4a:e0:ef:97:a1:90:c3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Mar 28 10:01:34 2026 GMT
Not After : Mar 29 10:01:34 2026 GMT
Subject: CN=c7e40ff9af9bfa2e7a8059366ba64f2f6d66dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:79:41:39:d4:45:ec:e9:91:ca:c0:7a:e1:
27:46:92:c1:a5:f6:74:09:22:94:a6:c1:5f:ec:fd:
08:b6:90:1a:09:64:85:4a:03:f0:67:69:ef:f5:b9:
fc:3b:5a:59:b0:70:d9:a9:1b:0e:10:74:7d:ff:0f:
21:24:30:2f:f2:90:42:b5:7a:0e:df:96:d9:4a:1a:
19:53:5a:84:cd:2b:0b:d5:5a:32:72:91:7f:bf:82:
b8:98:d8:70:3a:9a:15:5d:28:ec:c2:f1:8d:0b:c7:
e6:1d:04:a8:14:72:a4:35:9a:74:14:c5:9f:d0:d2:
66:48:a9:ba:f0:99:14:bd:29:3c:b8:bf:d9:2b:66:
ac:cd:20:7f:08:73:08:30:72:31:7c:6e:fc:7d:ba:
8e:10:6d:fc:70:77:17:b4:7e:42:6b:73:f9:2c:62:
d7:60:2d:ee:2c:a3:06:b6:c2:e3:d3:2e:ff:35:57:
30:0b:69:06:04:e2:d6:ae:cd:67:68:88:02:9a:d4:
8e:b9:d0:45:08:04:3f:c0:11:f1:98:21:d7:6a:b2:
e4:6f:34:47:07:73:55:14:b3:9d:f1:d0:ee:0e:36:
47:18:fd:11:c1:97:a4:11:0c:73:ec:95:5f:ce:63:
04:e8:e1:4b:d1:66:81:2b:60:07:d4:83:68:79:d6:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E4:0F:F9:AF:9B:FA:2E:7A:80:59:36:6B:A6:4F:2F:6D:66:DC:56
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:1d:5f:3a:c4:94:97:9d:14:24:c0:71:c6:3c:e8:b1:4e:ac:
21:14:62:fb:98:fc:b6:7b:b3:6f:10:7f:db:21:11:8d:5f:ec:
0e:7d:49:a6:aa:b4:8f:ac:31:22:c1:03:40:7a:a9:67:79:36:
1b:2b:5b:b4:05:ef:b1:6e:11:d5:e0:b3:46:83:11:16:8a:f6:
a1:5a:12:c7:ea:d2:8d:88:fc:5c:25:ed:ff:33:d7:11:92:27:
5a:83:f2:be:38:68:16:e2:da:c9:58:73:2a:7f:da:47:0b:77:
53:f2:61:42:be:bd:14:6e:11:d4:93:9d:3d:13:80:78:8d:38:
e3:04:65:af:e7:69:98:46:42:11:7c:b7:b2:c1:44:31:79:db:
7e:04:a7:32:cb:d9:13:9c:9e:8c:68:a5:d9:6f:ff:72:4e:cc:
86:f3:c4:19:fd:21:55:d0:55:af:20:09:b5:72:73:e6:46:80:
dd:74:67:4f:1c:90:f3:88:5a:98:bb:2c:c3:c6:bb:79:2d:64:
8e:7d:80:51:c9:2a:ca:89:50:dd:21:92:37:cb:1f:8e:31:ec:
b4:08:81:f8:4d:69:6d:ec:93:57:30:57:7a:e8:c2:7c:80:e2:
84:d7:2f:16:ca:e3:eb:df:11:5d:92:cd:cf:be:f3:3b:3c:b1:
ff:cf:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:06 2026 by rpki-client