Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json)
Hash identifier: OW+OfMm1/NQt5koPl935mldFmO3WcScn43ZB9/j4Aw0=
Subject key identifier: D8:61:0C:F1:E1:13:2D:BA:82:43:3B:45:C3:AB:93:F2:BE:3A:0C:AB
Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Certificate serial: 019D38665A9809593A2C36619353DB457B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
Manifest number: 0936
Signing time: Sun 29 Mar 2026 07:02:05 +0000
Manifest this update: Sun 29 Mar 2026 07:02:05 +0000
Manifest next update: Mon 30 Mar 2026 07:02:05 +0000
Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: J64FT530dGIGgU064ItqiXYEGoDVpjKUsajhgKKAY+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5a:98:09:59:3a:2c:36:61:93:53:db:45:7b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Validity
Not Before: Mar 29 07:02:05 2026 GMT
Not After : Mar 30 07:02:05 2026 GMT
Subject: CN=d8610cf1e1132dba82433b45c3ab93f2be3a0cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:3c:d7:0e:8e:ef:a7:aa:a8:30:63:fa:f4:
4e:e5:fc:58:2c:a3:f8:67:0c:0a:c2:6e:c8:dc:d6:
38:94:f9:8a:ea:40:56:3b:54:42:d9:02:3b:65:cd:
c0:66:2c:bc:bf:06:7b:6f:3e:d8:9e:b3:6f:d9:c7:
61:39:86:95:b0:76:a6:f0:67:d3:d3:2a:b0:82:d4:
a1:fa:e2:b7:f4:8d:f9:f3:8a:0c:89:d7:d2:4a:ad:
31:02:c5:e3:07:78:37:da:1b:88:1b:ad:b8:02:b9:
e1:19:fd:1f:fa:06:d3:c3:38:36:ec:74:6a:d6:aa:
32:27:73:6e:e4:47:c9:cb:8b:1a:d9:a4:5f:62:a3:
b1:73:6a:81:3e:05:c6:71:f1:6a:59:de:1e:cb:5c:
b9:7a:2a:e7:46:cc:7c:68:a0:32:81:07:95:a5:46:
d8:03:b0:17:27:e8:44:36:06:f3:9f:8f:43:e5:2e:
5e:b6:0c:37:66:b9:e8:88:ae:37:ae:99:85:3a:11:
2c:01:73:1f:f9:f4:cf:60:65:d8:05:83:f6:d6:ca:
8a:7b:47:04:98:2f:ad:b2:6e:e0:52:6a:e6:6f:7d:
10:c0:be:26:8e:e6:df:d2:30:08:83:ee:ab:2d:91:
23:43:ef:c6:0e:bb:9c:40:0b:80:83:41:ee:cc:71:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:61:0C:F1:E1:13:2D:BA:82:43:3B:45:C3:AB:93:F2:BE:3A:0C:AB
X509v3 Authority Key Identifier:
keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:58:89:c7:4f:13:b6:23:d9:ee:62:53:11:2f:cb:cb:81:10:
2a:9f:e5:51:1f:44:77:8b:6a:5a:5c:1c:a3:32:50:55:95:ab:
8a:3b:2c:2d:66:c7:74:61:7a:16:c9:02:11:ae:76:6d:3d:f0:
39:88:f0:29:ee:b5:0c:4d:38:af:2d:36:84:74:9a:df:dc:ab:
64:37:9b:ee:93:87:de:a9:83:9d:31:ae:bd:54:3c:73:87:ea:
41:3b:20:cf:08:e9:28:bc:f6:70:b0:0d:72:ec:8a:2d:c6:ff:
ee:bc:c7:fa:34:bc:22:6d:bd:19:70:79:46:94:d0:6e:a1:69:
81:0c:45:2a:da:11:91:f2:c7:ed:2c:ca:12:ab:e8:eb:6b:7c:
6c:75:8f:47:45:ce:bd:b1:33:da:3a:5e:b1:48:98:3e:59:8a:
12:18:f9:5b:dd:8b:6d:90:38:04:aa:cd:a5:e0:11:eb:72:1a:
c6:0d:75:6a:c6:49:76:8d:58:cf:48:9d:53:1e:b4:22:fa:8e:
06:95:50:2e:58:2d:e8:aa:b6:03:31:c3:85:b0:70:5c:2f:6b:
85:b2:61:68:71:98:99:b1:92:51:a8:e2:94:b5:82:38:12:86:
5a:97:3b:4f:93:4b:2f:41:10:dc:b8:9c:c3:6f:c9:8c:32:35:
ed:e7:d5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:47 2026 by rpki-client