Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
File: I6ec9SWGV3ZHm825K0L81ZANT9Y.mft (raw, json)
Hash identifier: JVnZBjhqLOKuwthCaMaZC7j88PDiuy35GcGWAbQmrKM=
Subject key identifier: F3:12:A4:0E:C4:C2:44:4C:64:7C:13:8B:01:A8:76:26:9A:AC:D7:1B
Authority key identifier: 23:A7:9C:F5:25:86:57:76:47:9B:CD:B9:2B:42:FC:D5:90:0D:4F:D6
Certificate issuer: /CN=23a79cf525865776479bcdb92b42fcd5900d4fd6
Certificate serial: 019D37892A3E7572CC237A596696D8C56A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
Manifest number: 024F
Signing time: Sun 29 Mar 2026 03:00:29 +0000
Manifest this update: Sun 29 Mar 2026 03:00:29 +0000
Manifest next update: Mon 30 Mar 2026 03:00:29 +0000
Files and hashes: 1: I6ec9SWGV3ZHm825K0L81ZANT9Y.crl (hash: KwtPlFCa71DqF36Jsg6965Z9oLYuoXawxDkdfVus+Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2a:3e:75:72:cc:23:7a:59:66:96:d8:c5:6a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a79cf525865776479bcdb92b42fcd5900d4fd6
Validity
Not Before: Mar 29 03:00:29 2026 GMT
Not After : Mar 30 03:00:29 2026 GMT
Subject: CN=f312a40ec4c2444c647c138b01a876269aacd71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:64:7a:02:12:bb:4a:0c:49:e4:c2:ed:d2:
78:c1:0c:89:7b:63:1c:d0:d3:78:a0:b6:28:8a:3c:
83:a7:8a:61:f5:c8:8c:fd:49:35:14:d7:b2:a5:a1:
8a:7b:bd:2d:3a:be:ea:fd:1f:87:a0:10:8d:2e:bf:
5f:31:44:3b:a8:34:6b:d9:69:61:79:f6:16:0a:38:
22:00:79:65:f7:07:58:08:ce:bf:10:ae:c5:59:2c:
30:d3:a3:bb:73:43:60:b8:60:7c:a2:bc:54:36:a0:
34:e8:48:05:cf:e2:be:65:e6:50:ce:b9:a7:e4:a5:
72:b8:05:2a:16:10:76:0d:69:ea:49:e1:ca:48:95:
6f:50:ac:4c:e5:5b:8f:ec:b8:b0:a7:d0:83:ac:7e:
24:4c:14:2f:d8:83:73:b5:8b:f1:41:10:f9:8d:02:
ef:0e:7e:c3:4c:a4:3d:92:d5:b1:39:1a:f5:6e:f3:
7b:a9:54:b0:14:53:65:61:39:50:62:a5:a9:71:29:
a9:8b:8c:c1:be:ba:b5:03:1c:2a:7a:e1:61:df:74:
a9:11:c6:97:99:27:3a:86:86:8f:fe:d8:7c:8a:af:
69:c8:0f:57:4c:54:2f:18:76:64:a4:f7:6b:31:2a:
0d:b7:4e:2f:f4:50:2e:1e:21:55:01:d0:6d:c3:96:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:A4:0E:C4:C2:44:4C:64:7C:13:8B:01:A8:76:26:9A:AC:D7:1B
X509v3 Authority Key Identifier:
keyid:23:A7:9C:F5:25:86:57:76:47:9B:CD:B9:2B:42:FC:D5:90:0D:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:33:b1:d3:e6:b9:8e:6d:42:1b:bd:03:0c:69:07:2c:dd:15:
99:fb:7b:71:21:a0:68:38:69:87:75:22:b7:21:c9:6b:9f:3e:
d2:21:3a:41:24:ff:a9:66:93:18:a2:4c:dd:ab:8e:94:fe:63:
cc:c7:7e:af:11:6e:f8:82:c7:90:8c:2d:ba:89:3e:11:ac:f7:
9f:2c:85:14:94:69:ef:c7:bc:6e:0a:0a:99:ac:fd:ed:eb:9a:
ae:fe:5f:39:dc:6b:d0:74:8d:f5:3f:fa:99:65:23:33:8b:f3:
0d:8a:b9:74:09:01:fa:7a:65:51:be:c0:2d:5c:6e:20:0e:c7:
49:d2:52:96:cc:4a:da:ba:bc:30:a8:ab:60:ab:e9:5f:20:f8:
4e:4f:ec:8c:41:54:7d:02:94:ab:72:ca:4e:6c:20:9c:09:4b:
0f:25:07:28:27:3a:bd:07:ba:0e:55:26:3c:9d:b5:a1:70:f2:
49:af:d5:5d:05:4c:63:59:5e:39:68:67:92:01:c6:2d:7c:49:
51:67:4a:5b:9d:bf:24:6b:f9:da:10:48:cd:92:e6:cf:ca:06:
21:71:8e:57:e2:bd:57:e0:73:91:20:c7:6f:e2:ad:c0:1a:f2:
18:7e:c9:75:38:a0:82:7b:5b:29:ba:ac:a5:62:69:72:40:67:
55:e0:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:41 2026 by rpki-client