Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: y2+ku8MWYjIscqekYcLfnRafdy6tJEHkYTkZcfZ0tec=
Subject key identifier: 25:9F:47:C4:30:57:44:5E:B3:13:D5:C0:62:96:88:57:8A:BA:5B:2A
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 019D3909C267251B0527464DA5FC8BF003A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: 1F26mcqInAx8nqKd3SVY4hDLHSW+bPLYKoBspw7u7Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c2:67:25:1b:05:27:46:4d:a5:fc:8b:f0:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=259f47c43057445eb313d5c0629688578aba5b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:c7:11:4c:9d:14:df:fa:75:b9:3f:54:0e:
79:57:35:c4:93:f2:41:16:47:2d:a9:21:e6:4f:30:
ae:d5:a5:18:01:6f:91:3a:c3:94:05:53:f3:2b:d2:
25:98:4d:5f:7d:88:08:ae:cd:5b:ae:1e:32:c0:26:
53:bd:5d:b0:cc:f6:19:e3:21:4b:ca:22:1f:ef:3a:
41:d0:30:45:0f:13:7f:cb:96:a0:5a:20:2f:45:04:
1f:bf:ab:77:2c:9f:c3:a9:3c:98:58:c0:5f:cb:bc:
2a:32:61:de:1e:0d:ee:b8:0c:ea:bb:b7:67:8c:a4:
5c:5d:da:6b:c1:a5:f5:38:ec:1a:28:a3:1a:96:6a:
68:66:3f:7e:3c:42:9a:26:28:92:ce:aa:7d:ae:88:
e9:87:f1:fa:1c:11:b2:69:fd:87:be:45:75:e3:a4:
a9:9f:4a:17:70:88:8e:b3:9e:8b:63:f6:32:7e:d4:
74:62:b9:cb:1f:c7:5b:d6:9b:a0:36:40:8d:23:0b:
a1:c7:69:1a:ee:84:8c:67:2d:6f:cb:e2:f3:ef:ec:
f4:f6:8c:83:22:51:7a:19:a6:1b:42:b4:af:d1:a8:
65:ef:4d:11:15:68:66:6f:8e:11:d8:d8:d4:53:a4:
87:cd:d8:ab:4b:07:a6:4a:e5:a7:ae:28:eb:1c:a6:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9F:47:C4:30:57:44:5E:B3:13:D5:C0:62:96:88:57:8A:BA:5B:2A
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c7:b6:88:22:14:91:5e:06:36:d6:05:16:d0:60:94:ed:67:
b0:73:7b:48:4c:65:bb:30:29:6a:c9:e6:d5:e3:81:5d:46:7a:
6a:5d:59:74:6f:f9:10:2e:82:ff:55:33:37:c6:6a:28:a3:2e:
ee:65:d3:1e:17:8b:bb:04:69:21:53:60:17:7e:d5:57:df:64:
eb:71:87:48:02:98:29:84:10:de:f3:89:dc:f3:83:17:f4:50:
88:f3:06:9c:92:c6:01:46:22:f8:e6:13:8c:ae:50:07:1c:ef:
58:e8:58:90:89:9e:5c:e2:0c:ff:b1:fd:9c:98:59:ff:5e:02:
0c:9d:0a:a4:6e:4f:b3:84:e7:2c:75:7a:4f:1e:9f:7d:a9:b8:
ef:e9:9b:d5:59:64:9f:f6:07:99:14:e0:c4:bf:ff:4c:50:f1:
83:ae:c0:41:b5:6e:6b:34:69:4a:8e:fd:82:d1:ae:9d:b9:8a:
51:b8:76:dd:1d:b5:b6:eb:bb:de:ec:de:05:6e:d5:12:1d:ed:
dd:f9:37:7b:d7:a0:87:c2:eb:96:61:7e:3e:bf:9f:18:67:34:
3a:63:2c:60:9c:4c:cb:29:8f:c7:6a:17:f5:16:b1:fd:5e:be:
02:23:b6:bc:92:a8:14:1d:e0:00:c3:15:98:7d:7e:0c:95:9a:
de:70:21:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CcJnJRsFJ0ZNpfyL8AOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWZlYjMyZWE3OTRjOTQ1MDkyMDg5YWU1YzEzNTAyZjc3
MTZjZGUwHhcNMjYwMzI5MTAwMDMzWhcNMjYwMzMwMTAwMDMzWjAzMTEwLwYDVQQD
EygyNTlmNDdjNDMwNTc0NDVlYjMxM2Q1YzA2Mjk2ODg1NzhhYmE1YjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdXHEUydFN/6dbk/VA55VzXEk/JB
FkctqSHmTzCu1aUYAW+ROsOUBVPzK9IlmE1ffYgIrs1brh4ywCZTvV2wzPYZ4yFL
yiIf7zpB0DBFDxN/y5agWiAvRQQfv6t3LJ/DqTyYWMBfy7wqMmHeHg3uuAzqu7dn
jKRcXdprwaX1OOwaKKMalmpoZj9+PEKaJiiSzqp9rojph/H6HBGyaf2HvkV146Sp
n0oXcIiOs56LY/YyftR0YrnLH8db1pugNkCNIwuhx2ka7oSMZy1vy+Lz7+z09oyD
IlF6GaYbQrSv0ahl700RFWhmb44R2NjUU6SHzdirSwemSuWnrijrHKZ0eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWfR8QwV0ResxPVwGKWiFeKulsqMB8GA1UdIwQY
MBaAFCPv6zLqeUyUUJIImuXBNQL3cWzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYt
ZGZiZDViNWVhNzYwLzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYtZGZiZDViNWVhNzYw
LzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXse2iCIU
kV4GNtYFFtBglO1nsHN7SExluzApasnm1eOBXUZ6al1ZdG/5EC6C/1UzN8ZqKKMu
7mXTHheLuwRpIVNgF37VV99k63GHSAKYKYQQ3vOJ3PODF/RQiPMGnJLGAUYi+OYT
jK5QBxzvWOhYkImeXOIM/7H9nJhZ/14CDJ0KpG5Ps4TnLHV6Tx6ffam47+mb1Vlk
n/YHmRTgxL//TFDxg67AQbVuazRpSo79gtGunbmKUbh23R21tuu73uzeBW7VEh3t
3fk3e9egh8LrlmF+Pr+fGGc0OmMsYJxMyymPx2oX9Rax/V6+AiO2vJKoFB3gAMMV
mH1+DJWa3nAhbg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:59 2026 by rpki-client