Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
File: IcABb7bLY4np0FbTkmLrRS-ZO9g.mft (raw, json)
Hash identifier: ZkhJWHndYhJGSXKNxVm8dz1SrSPhCz5Q314Bb1cFgQE=
Subject key identifier: 78:D1:E5:93:47:89:CD:8C:B8:AA:AA:BE:5A:15:5F:6E:F7:1B:AC:F7
Authority key identifier: 21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8
Certificate issuer: /CN=21c0016fb6cb6389e9d056d39262eb452f993bd8
Certificate serial: 019D284DD4FA15017D0ECECE542D564A132C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
Manifest number: 0142
Signing time: Thu 26 Mar 2026 04:01:22 +0000
Manifest this update: Thu 26 Mar 2026 04:01:22 +0000
Manifest next update: Fri 27 Mar 2026 04:01:22 +0000
Files and hashes: 1: IcABb7bLY4np0FbTkmLrRS-ZO9g.crl (hash: bEtVIbtfiDpEYQQxwBtkcFMu6ucvN0joac8t/EyoJWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d4:fa:15:01:7d:0e:ce:ce:54:2d:56:4a:13:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c0016fb6cb6389e9d056d39262eb452f993bd8
Validity
Not Before: Mar 26 04:01:22 2026 GMT
Not After : Mar 27 04:01:22 2026 GMT
Subject: CN=78d1e5934789cd8cb8aaaabe5a155f6ef71bacf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:6d:89:00:69:24:91:2e:b6:a0:73:a8:33:
b5:81:c9:8e:29:ce:79:bc:8f:ad:1f:3e:19:ab:5b:
f2:83:61:63:83:f3:aa:e6:43:fa:19:b4:9d:ca:38:
c5:8b:70:96:08:d9:c6:af:3e:b4:04:48:0c:f0:67:
f0:cb:66:58:17:23:19:d5:21:65:42:78:8d:52:49:
39:e3:fd:e4:33:2b:26:59:d2:ed:ae:e2:e7:26:65:
c2:c7:8b:4f:8a:ba:38:ca:8e:e3:88:4a:29:70:b3:
65:73:d5:1f:5e:56:81:35:c5:4e:2a:f5:c4:b3:b9:
b2:0a:49:bf:35:22:45:2e:5c:25:12:18:84:69:ce:
40:eb:8e:c0:d6:ff:11:4a:8c:7b:7a:77:be:a7:71:
4e:fa:a1:7c:b8:e7:36:cb:41:f5:95:16:09:b1:a7:
b8:ad:06:b7:2e:ea:07:cf:13:dd:7e:43:e3:cc:27:
f3:c6:10:3d:5b:7b:58:06:b1:b0:9d:5f:49:5e:14:
a6:89:64:dd:fb:9a:6e:41:c5:e7:14:64:3b:d9:75:
9d:ab:d6:96:53:f3:47:01:97:95:84:e8:fe:4f:25:
22:da:8f:5b:58:09:7e:80:17:c2:3d:40:c5:60:81:
03:5c:91:9e:ba:d5:50:f0:d5:67:17:1b:f2:56:58:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:E5:93:47:89:CD:8C:B8:AA:AA:BE:5A:15:5F:6E:F7:1B:AC:F7
X509v3 Authority Key Identifier:
keyid:21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:04:4f:1c:09:e1:d2:aa:32:99:ae:46:ea:b9:91:80:e4:c4:
e5:05:85:9d:d4:8a:92:da:bf:2c:6a:5e:86:99:17:04:3f:f3:
4f:1b:71:78:13:fc:51:b5:e6:2c:18:95:16:3f:c6:de:05:eb:
eb:c9:cb:42:bd:09:93:a5:e2:af:9b:28:ae:0d:9d:8e:7a:99:
78:16:ae:e5:de:88:d8:01:47:94:46:f0:53:a7:4b:12:c2:2b:
fc:b1:38:4d:51:08:12:7b:63:d0:05:1a:82:67:dd:73:96:d7:
19:41:c0:74:2a:53:01:a4:c3:72:a5:92:1a:44:e8:e5:96:7c:
5a:11:0a:45:0c:db:15:df:87:0a:3d:cd:b8:41:4f:9c:5d:30:
44:80:d3:df:e7:f2:62:7f:7f:cc:1b:39:28:5a:11:fc:5e:8a:
00:42:f8:d4:7d:13:49:d3:80:a7:69:f6:50:8b:16:77:5a:aa:
c9:54:e0:99:d1:c7:0a:39:2f:fd:f3:b6:7d:79:48:ed:27:15:
f1:85:6b:5d:f7:96:4e:e8:a7:d6:4e:a7:46:41:8a:9e:87:3f:
e3:b8:45:24:be:50:5e:be:0f:aa:ab:76:16:26:1e:c5:44:b2:
c6:de:b7:ee:f2:4a:0a:5b:cf:e8:f6:18:0c:8d:09:88:a0:b6:
f3:8c:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:16:12 2026 by rpki-client