Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.mft
File: iR-FX-2H8edyh8ypigBhTGcCU84.mft (raw, json)
Hash identifier: z67nbOlhhzHzpiv4azJcP4l/BoDsn+7wIww3KJq9qmo=
Subject key identifier: DC:32:DC:08:98:AE:08:1A:1C:12:02:75:CB:BD:C1:6F:27:4E:CB:25
Authority key identifier: 89:1F:85:5F:ED:87:F1:E7:72:87:CC:A9:8A:00:61:4C:67:02:53:CE
Certificate issuer: /CN=891f855fed87f1e77287cca98a00614c670253ce
Certificate serial: 019D38D2A76680D83D2B73568D441811AA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iR-FX-2H8edyh8ypigBhTGcCU84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.mft
Manifest number: 1B
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: iR-FX-2H8edyh8ypigBhTGcCU84.crl (hash: eZnEi1bRx4DIK6WLRlsCuD3+68nmrqD6chhYgCl++S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.mft
rsync://rpki.ripe.net/repository/DEFAULT/iR-FX-2H8edyh8ypigBhTGcCU84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a7:66:80:d8:3d:2b:73:56:8d:44:18:11:aa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891f855fed87f1e77287cca98a00614c670253ce
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=dc32dc0898ae081a1c120275cbbdc16f274ecb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:7b:f9:c2:51:f7:0e:81:2d:9b:61:e0:e8:
50:5c:71:31:93:8a:94:10:3a:45:50:73:75:40:e3:
78:d7:0f:89:d1:4f:84:35:8c:cc:dd:69:6e:0e:68:
7c:72:c5:f6:08:c7:43:c0:5e:45:d8:0d:f1:96:2b:
e0:ba:3e:97:f9:0f:96:e4:17:fc:1f:8e:fa:82:91:
e0:ed:37:85:ac:94:af:f3:24:a4:2e:7e:13:1f:41:
54:ca:3f:fa:f4:5e:3c:06:ae:9b:a7:11:45:54:35:
0d:92:b2:98:47:86:79:8a:14:cf:32:28:93:9b:90:
35:46:bd:0f:32:ca:f3:13:18:59:35:e1:13:4c:6f:
38:84:f7:e4:3e:c7:ec:97:ca:ce:a3:02:08:d2:9f:
f7:38:fc:28:34:ec:2e:c4:37:ec:8a:1a:96:ae:70:
5c:e5:cb:9f:d8:72:48:2d:09:17:d4:ae:06:ef:86:
e4:5c:e4:b2:ac:11:30:25:68:ff:e9:cb:c6:d7:f1:
9f:30:87:d5:c0:dc:ce:28:7b:57:bf:7e:9b:e4:e6:
ca:0b:fb:66:6b:39:47:bd:4a:72:2d:24:fb:3c:3f:
6a:8d:c7:63:a1:64:a0:92:c1:ae:fe:1a:e2:2a:99:
43:82:ba:d2:e1:c3:84:82:70:6f:77:8a:5c:4a:8e:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:32:DC:08:98:AE:08:1A:1C:12:02:75:CB:BD:C1:6F:27:4E:CB:25
X509v3 Authority Key Identifier:
keyid:89:1F:85:5F:ED:87:F1:E7:72:87:CC:A9:8A:00:61:4C:67:02:53:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iR-FX-2H8edyh8ypigBhTGcCU84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/95f723-5fd3-4272-939a-d71716e02464/1/iR-FX-2H8edyh8ypigBhTGcCU84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7e:ff:f8:40:dc:bb:b5:1a:fd:73:a7:71:e3:dd:7d:0b:e5:
92:32:14:86:7e:e9:4e:7f:a2:8c:88:68:22:60:0c:3c:e6:9d:
d4:d1:a4:ab:c5:26:95:8d:78:fd:91:76:81:60:62:e1:db:0f:
68:35:f8:88:fb:d3:97:fc:16:f8:5b:9f:04:0b:46:47:4a:dd:
9f:8a:00:73:2b:e9:8d:86:ac:d5:46:6c:64:d8:e0:5f:43:d4:
b5:e5:c7:22:0a:d9:c4:31:7c:72:9d:eb:7a:b5:6d:de:09:29:
24:2c:f8:e3:2b:8b:86:aa:e2:42:25:f7:6d:8b:56:85:54:f1:
a7:04:cd:c5:db:f5:9e:3d:b5:54:48:36:ec:c0:d9:a8:27:08:
37:e6:49:62:f4:56:06:5b:ae:ac:35:82:16:1f:14:6e:3f:b7:
97:65:be:46:68:9f:0f:3c:94:ea:cc:5a:62:71:d9:fd:99:d7:
f4:57:45:51:45:e5:44:af:82:c3:be:67:52:91:4c:15:cd:c7:
62:a2:39:b9:27:6d:7f:e5:e9:34:c6:88:6b:da:8a:ca:3e:d6:
2f:cb:eb:97:fa:32:8c:c3:94:2e:4d:79:46:5a:6a:a0:19:d5:
83:22:7a:38:05:aa:e9:4c:50:86:ad:f2:ec:35:32:e4:0a:f8:
a9:30:f9:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040qdmgNg9K3NWjUQYEaocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MWY4NTVmZWQ4N2YxZTc3Mjg3Y2NhOThhMDA2MTRjNjcw
MjUzY2UwHhcNMjYwMzI5MDkwMDIyWhcNMjYwMzMwMDkwMDIyWjAzMTEwLwYDVQQD
EyhkYzMyZGMwODk4YWUwODFhMWMxMjAyNzVjYmJkYzE2ZjI3NGVjYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHR7+cJR9w6BLZth4OhQXHExk4qU
EDpFUHN1QON41w+J0U+ENYzM3WluDmh8csX2CMdDwF5F2A3xlivguj6X+Q+W5Bf8
H476gpHg7TeFrJSv8ySkLn4TH0FUyj/69F48Bq6bpxFFVDUNkrKYR4Z5ihTPMiiT
m5A1Rr0PMsrzExhZNeETTG84hPfkPsfsl8rOowII0p/3OPwoNOwuxDfsihqWrnBc
5cuf2HJILQkX1K4G74bkXOSyrBEwJWj/6cvG1/GfMIfVwNzOKHtXv36b5ObKC/tm
azlHvUpyLST7PD9qjcdjoWSgksGu/hriKplDgrrS4cOEgnBvd4pcSo5T1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwy3AiYrggaHBICdcu9wW8nTsslMB8GA1UdIwQY
MBaAFIkfhV/th/HncofMqYoAYUxnAlPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVItRlgtMkg4ZWR5aDh5cGlnQmhUR2NDVTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85NWY3MjMtNWZkMy00MjcyLTkzOWEt
ZDcxNzE2ZTAyNDY0LzEvaVItRlgtMkg4ZWR5aDh5cGlnQmhUR2NDVTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC85NWY3MjMtNWZkMy00MjcyLTkzOWEtZDcxNzE2ZTAyNDY0
LzEvaVItRlgtMkg4ZWR5aDh5cGlnQmhUR2NDVTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFn7/+EDc
u7Ua/XOncePdfQvlkjIUhn7pTn+ijIhoImAMPOad1NGkq8UmlY14/ZF2gWBi4dsP
aDX4iPvTl/wW+FufBAtGR0rdn4oAcyvpjYas1UZsZNjgX0PUteXHIgrZxDF8cp3r
erVt3gkpJCz44yuLhqriQiX3bYtWhVTxpwTNxdv1nj21VEg27MDZqCcIN+ZJYvRW
BluurDWCFh8Ubj+3l2W+RmifDzyU6sxaYnHZ/ZnX9FdFUUXlRK+Cw75nUpFMFc3H
YqI5uSdtf+XpNMaIa9qKyj7WL8vrl/oyjMOULk15RlpqoBnVgyJ6OAWq6UxQhq3y
7DUy5Ar4qTD5hw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:31 2026 by rpki-client