Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
File: IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json)
Hash identifier: IDsyGv5E6wkfNCD5gJl4+QLO1Q2a+hAJ59utKMZcNqA=
Subject key identifier: 50:08:31:1B:10:4C:DC:3D:B8:C6:52:73:B1:D0:5D:C7:E0:EA:D8:E9
Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
Certificate issuer: /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Certificate serial: 019D3865E7905789B09F3029E117C502E83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
Manifest number: 14B3
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: VeNqregEQacNObKnBVrzlCKcmvn8Dd5KiU4xjBMAZKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e7:90:57:89:b0:9f:30:29:e1:17:c5:02:e8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=5008311b104cdc3db8c65273b1d05dc7e0ead8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:31:00:b5:56:86:57:b8:94:ea:00:9a:76:
bf:9d:98:03:ae:a2:7f:f9:0b:04:36:76:97:97:3d:
e7:9d:25:9d:86:a9:09:50:46:5a:dc:42:e1:ab:c4:
1e:11:76:8c:23:f7:89:9d:6e:68:9e:b5:fa:b7:69:
37:20:bb:f2:d6:4b:ba:04:14:05:1d:1a:77:1f:11:
0e:dd:c8:16:b8:91:df:9d:3f:9c:a6:4f:93:61:dd:
42:eb:39:a2:be:52:97:98:97:9b:4c:57:4d:70:0f:
de:80:1b:8d:ef:e4:8a:3d:78:8a:36:85:f6:f8:f1:
93:49:51:c4:4f:5e:ef:26:3f:9f:4e:06:a3:c6:bc:
cc:1f:e4:2c:45:f0:52:61:8f:ac:4e:9c:9e:04:3b:
8c:fb:09:4f:5c:79:5d:de:cd:4a:df:dc:0e:a8:2f:
a3:c5:72:00:9a:e8:1b:a0:c3:4d:80:80:3f:44:4e:
dd:95:b7:ed:2c:86:b4:1d:62:3c:df:c9:b9:e1:bc:
71:33:7c:a5:aa:41:e3:3b:ba:33:ac:b2:3e:6a:0a:
f6:d5:be:fb:f0:22:c2:a2:c5:b7:e8:34:c9:a0:97:
14:d7:47:3f:5d:ae:64:82:69:90:21:26:50:11:b7:
e3:53:00:64:dd:8f:0c:6c:51:73:9f:20:a8:07:af:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:08:31:1B:10:4C:DC:3D:B8:C6:52:73:B1:D0:5D:C7:E0:EA:D8:E9
X509v3 Authority Key Identifier:
keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cd:6f:b5:cb:6a:66:7f:af:aa:5d:2d:01:e2:36:62:c6:c1:
6a:90:e7:ac:6f:72:29:55:b4:09:8c:b3:f3:c4:0d:5a:03:7e:
a9:3d:38:68:06:e5:57:dc:71:55:08:8b:b1:a3:de:2f:b5:9f:
fa:eb:fb:10:76:55:c7:7b:9a:99:7b:18:de:9e:26:0d:d5:2c:
c7:58:17:45:7c:04:62:21:5e:a2:23:fb:0d:37:df:86:0f:17:
95:55:02:41:1a:d1:d5:42:4d:5e:62:40:4c:d9:08:f3:e1:43:
ee:43:4a:44:c9:df:74:cc:ba:ff:f6:7e:b3:74:8c:f3:95:fb:
eb:ca:22:02:7b:81:d8:e0:3c:c4:b6:b2:82:62:8d:fe:e7:01:
6e:e7:e2:41:e0:5f:26:df:e0:b2:7c:81:cc:08:d6:e1:9e:84:
16:29:ff:88:32:37:e3:d5:f2:9b:d0:7e:9a:10:f9:73:68:7a:
52:5e:e6:fc:b1:7c:9e:7a:06:85:e6:30:3c:b9:8e:59:20:9e:
fa:07:22:d2:de:63:da:33:13:d3:3e:eb:66:cf:82:4e:e2:5b:
37:f3:d7:78:44:24:5e:15:b3:2c:15:7b:c2:09:8d:e0:57:0d:
47:83:90:e6:50:5d:9c:51:a1:93:0f:43:98:7d:28:d5:85:58:
0f:e1:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:31 2026 by rpki-client