Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: ywBy4i7ue9h2gyrr82Ekg/LZe7pBW7u3HxmRJGcdc/E=
Subject key identifier: 15:92:D1:00:9A:B4:F3:24:E2:77:6F:94:C4:9B:B8:64:1E:7D:E1:B2
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 019D2704776A278F9FAC1A69FB93547C87E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: 5+VVpGSsnoVu0ObNOhw0GUwQp7vxUZMTEYSUseWHYDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:77:6a:27:8f:9f:ac:1a:69:fb:93:54:7c:87:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=1592d1009ab4f324e2776f94c49bb8641e7de1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:6d:ce:c7:76:85:53:ca:01:73:90:37:72:
25:1d:10:6a:ac:16:4d:d9:2e:28:4b:17:7b:a8:6e:
83:a1:4c:97:fa:66:9e:08:88:70:1a:57:f5:f9:67:
52:c1:ec:92:bd:7c:fe:e9:fa:bf:4b:a8:79:47:9e:
df:87:ea:90:b3:b6:9a:0b:87:0c:25:9d:d6:70:c3:
f5:93:d9:80:b9:59:c0:78:ac:b1:11:6c:c7:05:22:
48:70:8b:8e:89:f4:55:be:62:53:cd:b1:44:5c:25:
ea:53:8f:23:38:f7:b0:1f:52:2b:44:d4:5f:3d:58:
db:0a:61:f2:4c:4b:10:9c:8f:6b:cc:b5:a0:51:5b:
19:d6:25:d8:a0:9e:26:59:50:a0:d8:f4:6b:cf:cd:
34:09:0a:59:83:33:01:83:87:26:94:47:48:68:9b:
b5:43:95:78:a5:48:c3:b8:86:ca:86:a9:8b:f8:f9:
24:97:98:e2:5e:d9:a1:09:3b:5f:53:75:f0:56:1d:
12:56:92:35:99:c9:42:dd:6d:d8:1d:a6:fb:8f:46:
40:3b:32:4d:7f:cf:cf:49:1b:31:59:99:ea:a9:6c:
ba:00:08:fd:27:34:e6:37:cb:bd:13:b3:66:d5:62:
8c:59:42:1d:22:e9:76:f2:09:44:f4:43:1b:1f:e0:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:92:D1:00:9A:B4:F3:24:E2:77:6F:94:C4:9B:B8:64:1E:7D:E1:B2
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1d:e9:ca:96:75:fc:0a:64:c5:e7:5b:33:9a:4b:a2:38:22:
1a:18:33:f0:a2:18:8b:e7:b1:d6:81:22:89:eb:a5:1c:6c:cb:
4c:c4:10:14:e2:d1:47:74:8a:d3:39:80:ed:c0:bc:ed:c3:ba:
f2:fb:0a:85:01:64:24:6e:67:03:9e:40:fc:da:3b:9f:b1:92:
ad:bb:70:4c:c9:19:87:af:9d:7e:fb:df:4b:76:14:fd:8f:3d:
3f:18:be:37:3f:54:81:22:d3:9a:12:b2:81:4c:10:8d:7c:6e:
7a:45:db:29:18:c1:bc:1b:f0:ae:3d:c7:5e:46:cb:19:35:40:
3d:4a:08:83:a2:e7:7d:67:8f:c4:32:ba:d2:11:26:cb:9d:49:
6d:7b:37:bc:f2:95:28:f3:ad:24:cc:7f:5f:0b:15:ac:cf:20:
ba:2a:a7:5f:96:8c:1d:97:6d:36:86:d1:a9:85:97:75:00:73:
f0:35:c3:bc:75:87:7c:d0:e0:c9:fb:5b:68:56:fe:69:25:51:
2c:9c:3a:b8:80:bc:2a:75:66:c4:4f:ea:75:52:6c:57:7f:ad:
9c:fc:7a:6b:3c:14:b8:96:8b:d3:e8:9a:eb:43:ad:b9:a3:24:
21:7c:4d:69:fc:bf:a9:95:5b:60:8d:c4:d9:b4:0a:16:74:08:
2f:21:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:22 2026 by rpki-client