Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: e9Nj699azPAxZgs+FkhK8bV1Pca+/m6gTC/SpXufh8s=
Subject key identifier: 2A:8A:88:DB:9F:BF:55:DD:D2:88:1D:94:FF:45:87:7C:20:C2:F1:44
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 019D37C11A7D0E3AB7D2ABAD3533D525DE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:35 +0000
Manifest this update: Sun 29 Mar 2026 04:01:35 +0000
Manifest next update: Mon 30 Mar 2026 04:01:35 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: u1iGUUilcjUJ1aNfDpdg0r95x2uMWn7melWncuCBSfo=)
2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:1a:7d:0e:3a:b7:d2:ab:ad:35:33:d5:25:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Mar 29 04:01:35 2026 GMT
Not After : Mar 30 04:01:35 2026 GMT
Subject: CN=2a8a88db9fbf55ddd2881d94ff45877c20c2f144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:11:75:1f:41:9d:bc:51:7a:e3:43:93:64:
6b:e3:18:0c:e0:0a:1a:f4:86:98:96:3e:dd:b8:b7:
e1:3e:77:b6:08:63:12:fe:ca:50:eb:a4:d8:39:d6:
5b:57:80:cf:b7:6c:1e:c8:35:ff:d7:e0:5f:78:49:
10:c2:8a:59:42:45:8b:2e:71:95:19:1b:e0:ef:0b:
c8:91:8f:d7:ae:93:a0:08:b8:1d:ed:f6:02:8e:aa:
ff:80:16:54:e5:d2:43:9a:bf:d3:24:67:7e:2b:e9:
ee:87:7c:a1:25:90:96:4a:de:24:8d:8c:b4:fb:70:
d0:67:09:71:50:12:e7:22:d7:53:21:97:ce:92:c9:
5a:95:99:c0:16:00:5d:68:cf:d6:df:d3:0e:76:45:
dd:02:2e:05:83:2b:8c:ff:05:13:af:90:2b:6f:b3:
08:de:a3:9e:ce:d0:50:de:77:0a:83:57:6e:d1:22:
c2:af:45:51:cb:90:6b:f9:4e:f9:2a:5f:93:41:ce:
4b:45:dc:42:d7:d9:4f:95:d5:e3:40:4b:f6:a8:d9:
df:d1:7c:c4:a5:af:b6:f0:88:da:c3:b3:bc:b1:f9:
c5:a4:9f:2b:e0:8f:41:98:d2:90:94:4c:90:83:a1:
86:8a:ee:2e:ab:ae:21:98:05:a9:5e:1c:90:39:a6:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8A:88:DB:9F:BF:55:DD:D2:88:1D:94:FF:45:87:7C:20:C2:F1:44
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d1:47:a4:34:d4:83:24:1c:e1:8c:75:b6:7b:63:18:28:8b:
33:f6:11:f8:ff:45:7d:25:24:24:b8:77:4a:36:40:6a:d8:e7:
96:58:c5:5c:1c:b5:98:d7:26:fc:6c:c3:b7:bb:86:25:b1:00:
df:b9:b8:91:f1:04:7d:bd:82:41:29:3a:1d:9b:dc:09:ba:e8:
c3:c4:8e:5e:76:c9:e7:97:7e:63:81:7e:15:d0:78:41:7a:c9:
3e:28:e8:ef:42:d4:b2:11:6b:78:bf:ef:92:f7:ee:18:35:17:
1a:21:60:0f:ff:87:de:24:5f:fd:22:75:cd:51:c1:22:fb:24:
60:4a:50:3f:3e:52:ad:f0:7d:29:66:30:ec:e2:3c:37:bf:9b:
b3:d6:05:b3:a0:8c:93:71:07:da:5d:64:6e:0f:4d:6f:96:5c:
0b:a2:0b:55:b3:58:b5:a7:73:fe:9b:39:14:09:42:2c:1c:10:
a2:9f:51:51:40:62:22:43:c2:34:c0:34:c3:5f:a9:c7:3e:99:
89:0c:a2:73:0b:83:8d:1b:dc:60:88:3a:73:18:3c:bf:4a:7c:
b1:cb:dd:8d:83:59:00:f8:4d:19:10:6c:cf:82:1a:6e:80:e4:
03:34:83:78:dc:e0:97:9c:fc:00:58:6c:96:95:10:02:ea:11:
b0:25:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:41 2026 by rpki-client