Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier: 4GtZNUEfN1NOygWqzvNbq7O8w+HKnKVpkskSPS2dAbo=
Subject key identifier: 06:3B:59:31:F2:76:EF:A3:23:8E:60:5A:6E:7C:4A:8A:C9:13:B5:32
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial: 019D39410C80AF9E397B6E5FED1CB8213838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number: 1285
Signing time: Sun 29 Mar 2026 11:00:57 +0000
Manifest this update: Sun 29 Mar 2026 11:00:57 +0000
Manifest next update: Mon 30 Mar 2026 11:00:57 +0000
Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: bc47mREat9qu6ybt8I6iJpWiMzwLTd2MrPIgtYOAxEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:0c:80:af:9e:39:7b:6e:5f:ed:1c:b8:21:38:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
Validity
Not Before: Mar 29 11:00:57 2026 GMT
Not After : Mar 30 11:00:57 2026 GMT
Subject: CN=063b5931f276efa3238e605a6e7c4a8ac913b532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:1f:a5:72:90:3a:a9:7e:a8:7a:90:6d:77:
d8:2d:62:3f:a5:e8:b4:66:5c:fd:41:ff:c4:af:28:
74:99:2b:46:f1:4a:29:d3:09:78:2a:dc:69:9d:28:
9a:9d:56:81:1e:e0:01:20:09:2e:e0:b9:e6:a5:a5:
7c:cb:4f:24:5f:28:50:1d:5c:1e:99:1f:79:f9:eb:
93:c7:c3:01:fb:31:0f:e9:dc:e5:03:f2:8f:8b:28:
07:5a:5a:b7:7d:92:5c:25:bd:e0:90:c3:ea:49:65:
33:d9:d4:b1:a2:00:4f:d7:b5:bf:88:73:61:7f:ac:
6c:3f:e5:7a:dc:45:d0:b5:da:58:69:8d:dc:10:42:
6a:14:f5:65:44:5d:31:a7:94:73:35:6e:6e:ff:bd:
e0:74:0f:21:62:e1:4c:6f:40:9d:91:a7:f4:29:73:
11:67:f2:d9:56:6c:3c:d3:62:a8:87:ed:c9:6d:cc:
f9:4b:17:3a:aa:3c:3d:d1:a7:15:1f:e3:13:9c:f2:
18:c2:d1:fa:61:62:3c:dd:fe:28:01:20:a5:05:96:
80:ed:16:8e:a9:c2:fb:c2:84:b5:d4:89:e8:72:43:
92:e3:3e:25:e5:ae:93:41:1b:6a:b6:42:68:5c:b7:
59:4c:2d:2c:9f:fe:f0:41:ec:43:c1:1f:17:26:00:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:59:31:F2:76:EF:A3:23:8E:60:5A:6E:7C:4A:8A:C9:13:B5:32
X509v3 Authority Key Identifier:
keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a4:ac:2b:29:51:fe:f2:e9:dc:9c:2a:7a:1e:ac:f3:3b:17:
46:e6:26:65:59:6f:75:55:87:1f:54:43:b6:af:db:02:7a:87:
03:5a:64:da:f8:b1:b8:74:02:63:75:80:18:47:cd:d4:16:2f:
6f:02:e0:22:e2:b6:df:79:82:38:27:74:f8:25:a5:6b:68:8c:
05:fd:b6:d4:eb:15:51:1f:34:5b:76:e3:22:b4:2c:3d:d3:fd:
68:4b:de:6a:9a:8f:d0:c4:ba:03:48:f6:3a:89:4c:92:e8:ec:
a1:e2:de:fd:ff:13:d2:d7:07:0e:24:5a:bb:f1:c5:20:8a:2f:
ed:93:d5:8f:57:04:e0:77:c7:78:fc:8e:f9:cc:64:dc:c7:90:
b7:be:bc:f9:60:86:9b:36:17:9c:dc:69:db:1b:6d:09:05:91:
fb:f2:c2:29:fc:1d:65:e3:7c:f2:7b:14:78:cc:82:ba:08:2a:
2c:87:12:9a:92:66:1a:c8:95:d9:99:e1:4e:f8:26:15:76:0d:
48:23:77:11:23:11:b3:be:64:58:ad:7a:45:9b:68:79:28:e2:
d2:f2:84:c8:88:61:30:65:bb:0b:62:4d:bf:1e:99:b3:60:5c:
d6:94:cf:cf:92:85:04:a8:60:7f:60:9e:af:3c:a9:0b:7f:99:
43:46:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:51 2026 by rpki-client