Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: WCEqBGBVpql/3JLEv8q8kCc1AXw1prnKfUY3FCXaUM4=
Subject key identifier: 08:F8:24:8E:07:69:61:BA:76:E6:5D:42:DE:FB:2E:2E:8D:84:E7:BD
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 019D27A944662E68F22661026411D364303C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:37 +0000
Manifest this update: Thu 26 Mar 2026 01:01:37 +0000
Manifest next update: Fri 27 Mar 2026 01:01:37 +0000
Files and hashes: 1: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: hY/skwmNRKS5T9uk70H60rjpTdPtld4+pCOlUdginDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:44:66:2e:68:f2:26:61:02:64:11:d3:64:30:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Mar 26 01:01:37 2026 GMT
Not After : Mar 27 01:01:37 2026 GMT
Subject: CN=08f8248e076961ba76e65d42defb2e2e8d84e7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:d9:40:57:34:67:de:2b:f2:31:c2:2e:0b:
3b:73:f3:99:f7:29:c7:55:82:63:44:0b:90:23:30:
91:0a:79:60:1a:d2:7e:cc:18:0d:87:9c:2d:c0:0b:
fd:1f:da:ee:c7:18:5c:c1:26:21:5d:07:8f:e6:35:
78:c5:16:d3:d6:b0:13:bc:50:28:13:7c:ac:23:0b:
a1:3b:87:bc:60:73:96:a6:db:4b:44:ac:d7:c0:7d:
ea:bb:77:db:a8:43:d1:50:42:cf:e7:1f:f3:d0:47:
6e:ad:d3:6a:67:08:b8:15:e7:b6:5b:18:6f:13:1c:
cd:af:e2:64:d7:e2:ff:be:89:58:35:04:b4:93:3c:
7a:34:7f:8f:51:b9:e0:85:e5:d5:b4:44:8b:07:82:
56:9b:41:3b:51:74:0b:35:b5:a1:8c:f5:e9:0d:f8:
fb:1d:cc:50:7a:47:a9:9a:f0:89:7e:5f:f7:08:6c:
a3:05:c0:8e:c2:87:71:69:90:49:86:c0:a6:e9:76:
c8:60:49:9c:46:a2:5f:16:22:11:cc:6d:44:f6:dc:
ad:3f:59:f3:1c:0e:dc:c6:46:57:8d:9e:77:c6:b9:
5d:76:0b:dd:87:90:3c:59:14:04:ca:89:00:ac:eb:
1c:f3:fe:f9:8a:49:b6:92:ea:a4:a3:5c:d4:bc:8b:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F8:24:8E:07:69:61:BA:76:E6:5D:42:DE:FB:2E:2E:8D:84:E7:BD
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:38:74:85:a2:0a:cb:e1:01:bc:c2:e3:aa:20:78:99:a8:
a8:2e:de:51:3d:3c:ae:e5:46:37:6f:4d:d2:4a:80:ae:74:24:
20:c1:e4:55:a8:bc:6e:9b:69:08:2e:13:94:e2:27:58:7f:d7:
a7:a0:78:29:e2:5c:ae:f2:6d:58:ae:82:2c:1e:6f:1c:16:6d:
7c:71:5a:51:cc:b9:e9:97:56:24:b9:ad:5d:cb:74:c7:eb:c4:
ce:a5:0d:cb:85:6a:e3:fa:49:21:3c:d9:e9:09:98:0f:35:86:
63:7a:4c:d4:34:47:26:f3:47:59:dc:12:8a:a6:a6:f8:0a:06:
5d:40:28:71:3f:c0:7a:42:5d:a6:21:de:0a:d8:08:2f:cc:1b:
45:02:40:f5:6b:06:95:64:bb:13:85:15:bc:a0:e9:2a:c5:e3:
73:c9:1e:5d:7d:ae:67:a5:12:85:64:9b:e5:c7:59:b6:fc:30:
66:ca:9f:44:04:7e:cd:e9:0c:80:b9:29:03:5f:66:12:fe:88:
f1:a3:26:4b:74:1c:d4:93:e5:2c:73:ac:99:00:b5:98:fd:76:
36:6b:1c:5a:72:80:51:78:25:02:9b:04:79:7f:65:17:ef:97:
28:6f:c2:18:fe:fc:be:cc:89:94:61:ca:df:1c:99:45:c2:7a:
21:61:01:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:33 2026 by rpki-client