Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: EgRQThfq2yKfP/IEGESqFKzsP0aeemDHB73ugLEq/R0=
Subject key identifier: B5:04:66:79:E0:82:39:1D:16:9D:89:89:D0:CD:22:26:02:50:B6:DA
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 019D3866888700491C397350FFB1859661DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 08CB
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: c9HD7C4DYDRIo8riWLPRvarrR2AviBjBe/r2h9xEQMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:88:87:00:49:1c:39:73:50:ff:b1:85:96:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=b5046679e082391d169d8989d0cd22260250b6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:26:4a:15:0e:c5:0c:a9:22:5f:49:67:05:
d2:03:b2:5d:ff:0d:f2:6b:fc:ba:e5:15:2f:7d:05:
94:94:35:07:40:ba:bc:8a:85:73:a5:bb:82:64:8a:
9a:73:c4:3e:d5:80:3d:ac:dd:bb:b4:74:cd:6d:67:
e8:47:eb:42:e2:6d:86:e3:b4:c2:94:92:2d:00:4d:
26:0f:6a:31:28:36:6c:97:3b:01:b9:79:ab:a4:a3:
55:78:78:13:55:c2:32:b1:03:0d:19:8a:24:0e:c5:
c0:74:4c:af:6b:a6:f9:c8:95:15:7b:16:c0:c4:af:
e9:de:c0:10:1c:a5:62:c1:8b:d7:a7:01:e1:52:79:
e4:42:cc:e1:d7:e6:53:a4:42:71:9f:43:f4:7e:e0:
7b:ab:32:b7:aa:10:81:d9:39:17:56:48:07:b4:9e:
10:55:97:78:88:48:b2:eb:e7:89:f4:c3:5f:9f:1a:
d2:84:05:86:54:38:d6:d5:46:2f:6a:75:6e:db:94:
a4:b8:a4:9b:df:df:d0:98:30:13:54:ef:9e:f0:2c:
52:31:e8:25:ec:b1:1a:01:9b:d6:48:14:cd:75:d2:
dc:12:d3:3b:c4:f4:d9:ed:50:c6:d5:77:9a:c3:34:
56:c6:d5:2e:b6:1b:05:c6:db:11:b8:04:9e:fe:aa:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:04:66:79:E0:82:39:1D:16:9D:89:89:D0:CD:22:26:02:50:B6:DA
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a5:6e:64:91:3d:6b:cf:08:7a:e2:7d:6e:a2:56:1e:81:aa:
7d:54:4c:6d:eb:1a:29:f8:0a:e7:d5:a3:9d:c2:2b:27:9e:66:
ee:af:a6:68:e5:75:27:b1:2f:1e:dc:76:02:1f:0c:8c:01:2d:
05:56:11:b5:1c:06:41:9b:3c:48:14:d0:83:d3:87:12:83:a8:
d6:dc:3b:ba:8a:24:54:c6:f4:f9:e6:8c:43:e3:ea:81:f3:9c:
d1:b8:1b:f6:b7:83:fa:6f:85:d1:70:75:9e:f4:48:df:c2:4b:
fa:f6:5f:dd:ea:8f:14:47:48:8b:57:69:5f:fb:05:75:a3:5f:
d2:3f:43:f3:b1:2d:a9:1f:ae:b1:a0:f2:49:02:8d:c3:d9:c0:
2c:95:e9:97:f4:1e:43:1f:68:15:f6:d9:78:a3:0d:a3:5f:d4:
dc:4e:05:5e:8b:a1:c6:30:b5:f0:55:39:22:e7:62:79:e6:15:
8a:8b:b7:96:62:24:d0:4b:c6:ed:92:bf:31:6f:76:b5:93:46:
57:f9:ca:1d:88:b8:22:9b:1f:52:94:ad:de:fc:6d:6d:e3:87:
e6:57:25:a6:38:6d:d9:e5:7d:69:6e:3c:8a:57:26:7d:46:9d:
1a:e4:fa:1d:63:aa:61:dd:38:52:58:73:f4:2b:09:1d:63:c3:
32:a7:7d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:10 2026 by rpki-client