Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft
File: iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft (raw, json)
Hash identifier: hZad2+fAUJXTzgci62qOEviy45CNoyn9KO/EgvbhFk0=
Subject key identifier: F3:AA:16:CE:AE:B3:AE:41:A0:23:F4:97:15:44:12:23:A6:97:A5:52
Authority key identifier: 89:8E:C1:02:37:91:F6:D4:3F:97:97:E0:52:D1:35:4B:EB:FF:C7:32
Certificate issuer: /CN=898ec1023791f6d43f9797e052d1354bebffc732
Certificate serial: 019D284DD3FA3AD9AAAF0CE3E75B27DA3588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft
Manifest number: 01D6
Signing time: Thu 26 Mar 2026 04:01:22 +0000
Manifest this update: Thu 26 Mar 2026 04:01:22 +0000
Manifest next update: Fri 27 Mar 2026 04:01:22 +0000
Files and hashes: 1: iY7BAjeR9tQ_l5fgUtE1S-v_xzI.crl (hash: HoibGacv/iZEyH4V7Qf6wFIzk6AfLGvSkLJYXttq7SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d3:fa:3a:d9:aa:af:0c:e3:e7:5b:27:da:35:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898ec1023791f6d43f9797e052d1354bebffc732
Validity
Not Before: Mar 26 04:01:22 2026 GMT
Not After : Mar 27 04:01:22 2026 GMT
Subject: CN=f3aa16ceaeb3ae41a023f49715441223a697a552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:a0:5f:2c:63:eb:85:c3:f7:31:0c:37:ae:
9a:74:b3:ac:99:fd:6f:80:d3:09:a7:04:cb:b6:89:
df:af:8e:44:5b:c1:a6:1f:8d:75:a5:eb:69:35:db:
99:bf:f1:bf:ed:1f:d0:49:3c:a0:08:a3:d5:8a:92:
3d:c5:93:08:1b:06:ee:60:9e:38:ba:42:85:10:9f:
5a:b5:a3:d3:cd:ca:31:64:6b:d1:81:ea:4c:11:bf:
3c:dc:1f:15:55:e7:ae:06:f2:2f:16:c7:69:3d:4e:
18:60:4b:99:e4:85:35:63:70:ec:05:e2:ca:cb:88:
cb:19:a0:ae:13:8b:40:9b:eb:da:83:21:9f:ce:a1:
d3:d4:ad:d8:f6:2a:32:a9:9e:fa:76:50:cd:ca:82:
ef:fe:b0:da:7d:d8:e2:8a:9b:1c:51:c6:28:cd:27:
e3:37:85:e9:ec:f6:d2:94:d3:43:1c:ab:c5:c3:37:
a6:12:e1:f7:27:0a:67:f1:bc:8c:12:1b:db:c5:f9:
9f:ed:f3:e5:03:cc:d0:bb:7e:fe:c8:99:3b:ef:37:
6e:78:27:7a:34:64:65:d0:a8:4b:8f:bb:98:34:5c:
3b:a9:69:d2:0f:94:d0:3d:70:61:91:d2:23:65:16:
97:a4:fa:6a:ec:1d:c9:66:32:6d:9d:78:aa:db:25:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AA:16:CE:AE:B3:AE:41:A0:23:F4:97:15:44:12:23:A6:97:A5:52
X509v3 Authority Key Identifier:
keyid:89:8E:C1:02:37:91:F6:D4:3F:97:97:E0:52:D1:35:4B:EB:FF:C7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab6a7b-65ab-4977-9937-ea9b6bb2e39c/1/iY7BAjeR9tQ_l5fgUtE1S-v_xzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fd:78:d6:a9:d1:62:ed:8d:f1:e1:75:b0:07:a8:3f:5e:19:
8b:34:c0:10:1b:43:52:6b:32:4c:18:eb:d7:aa:3f:30:57:e2:
09:57:05:d9:c5:a0:55:8f:35:95:9c:03:ab:2f:c3:49:d1:45:
62:8b:68:5a:af:c5:4c:5c:c5:0c:2c:42:68:b1:25:d7:f0:b4:
01:46:8c:29:a2:2a:4d:9d:ec:a4:f2:0e:64:d3:09:5d:4f:81:
71:96:4d:54:c4:67:db:45:95:87:de:b6:11:9e:4e:0e:39:c2:
6f:a6:15:63:d6:42:46:00:2c:1b:57:b5:e2:50:f0:a0:5b:06:
35:f7:0e:5e:c7:2c:0a:8a:95:24:f7:21:cf:30:e4:c4:bb:0a:
e4:1d:e2:75:06:c4:01:f1:6a:5b:61:0a:f1:05:8c:9d:84:ad:
ca:fa:d2:e7:4a:02:5c:15:4d:be:e1:b7:49:e4:c7:f6:55:a2:
2d:fe:fe:8e:c5:fb:a8:3b:67:e7:41:74:0c:c7:6c:ed:be:07:
59:5f:35:88:a7:bc:dc:ae:3c:9d:21:e3:9c:40:62:67:d8:76:
b9:ac:d1:92:c6:78:a0:b5:f4:53:91:40:4e:5a:73:09:ba:2e:
f7:07:1f:1f:23:e1:3f:44:e8:45:7f:4b:b8:be:7b:43:69:94:
33:0b:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:24 2026 by rpki-client