Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: TN3dYvV/8X3Z0lLHQYW1OqKchcSNf31V8/k5U7Payho=
Subject key identifier: 81:58:F2:53:87:7F:94:7A:BE:3E:72:F0:CA:FA:B5:7C:FF:60:2D:CA
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 019D389BEBF6EEC710C3198454C404A88775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 15AE
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: lnjCRA0qV0f1ZIUoHquwdwdT1PmxtYcrP9wvfvUmypM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:eb:f6:ee:c7:10:c3:19:84:54:c4:04:a8:87:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=8158f253877f947abe3e72f0cafab57cff602dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3b:ee:81:3e:c4:3a:7e:7e:36:1e:3a:93:1f:
fb:89:b7:ed:6a:50:22:6a:5d:71:15:9d:d7:21:d6:
7e:a3:8e:79:ad:cb:48:6a:ac:1b:06:bc:c6:c8:ee:
14:57:7c:56:c6:28:7d:4a:2f:da:4f:c4:a2:c7:e3:
47:c9:fe:6a:17:64:0c:83:4a:21:23:2f:cb:2d:b8:
04:17:3a:84:39:76:c8:62:00:c5:c8:f1:bc:a8:01:
f8:43:a0:b9:b5:b3:3e:47:60:31:cb:55:4b:0b:f9:
3d:24:29:d1:32:9d:17:32:b1:62:32:d2:c9:19:e9:
45:ee:49:de:27:a7:ad:c8:a2:f5:6b:eb:2d:ef:61:
b1:2b:12:c3:2c:79:03:25:d0:7d:b1:1a:bd:b8:fc:
1b:06:5b:81:32:ee:df:8e:cc:4b:70:69:0c:2e:b5:
dc:a8:7f:e9:b3:5e:5f:f1:21:c7:9b:f0:27:53:fb:
19:55:fe:0b:8c:a7:79:db:f6:74:e2:55:4f:37:d7:
fe:3c:f6:e5:3f:3f:a9:ae:58:1c:3e:49:08:40:56:
c5:a7:63:06:3d:be:1d:72:23:99:cb:87:d1:14:61:
bc:2a:5a:7a:df:8b:ea:d4:6f:cd:ae:ef:82:d4:29:
02:6f:d7:06:f0:ed:9e:cc:c8:43:b0:43:f9:a1:41:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:F2:53:87:7F:94:7A:BE:3E:72:F0:CA:FA:B5:7C:FF:60:2D:CA
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:92:51:a4:64:d6:2b:b5:7e:fd:9b:8b:f4:e2:97:9c:a5:
44:30:90:5a:71:68:a9:0a:31:35:b5:ac:25:a4:29:2e:55:20:
61:fc:fd:03:01:cc:8e:8b:5f:01:b5:22:e1:b8:8f:f5:21:cd:
d9:1d:80:92:7c:26:f1:68:43:ee:79:e7:af:3f:84:48:c3:7a:
93:8c:5a:ef:20:12:8b:10:fd:4a:ff:96:02:8b:16:a3:3f:56:
a8:29:9d:9b:d8:3c:1d:ec:27:02:37:a7:8d:8f:19:21:99:d5:
c5:c8:af:2f:b9:94:a9:10:37:0b:f2:93:a5:68:3b:1e:8f:ca:
26:36:6e:22:7e:07:2d:da:38:a7:7b:c7:5e:cd:23:6d:24:66:
2d:81:dc:a7:73:fd:f0:ec:6d:af:03:cd:22:b4:18:af:24:c5:
9b:56:ef:ea:4a:75:26:63:8b:ab:9a:f2:96:1f:fa:88:2f:89:
b4:da:83:ea:d1:24:a8:af:10:4e:7f:83:aa:25:98:42:3f:e7:
f1:cc:7c:e7:8a:ad:f0:ba:e6:2c:f0:be:52:d6:62:d6:1c:ac:
9d:ca:b6:22:3a:79:b0:10:ef:72:29:97:c0:aa:38:32:cb:4f:
32:d0:84:9b:13:03:44:df:4f:4e:6e:ca:9c:a8:1e:d6:ad:ae:
ea:50:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:09 2026 by rpki-client