Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft
File: iT19gAU9AYpRb_UWSNFp8DjIlyo.mft (raw, json)
Hash identifier: NWa3/KpFVKlbrvd0B4eDyx7kYfANGpyGMZ6l27Y9XVw=
Subject key identifier: 68:CE:D0:85:0B:03:9B:52:1B:DE:72:69:D1:2F:CA:14:3C:CC:39:70
Authority key identifier: 89:3D:7D:80:05:3D:01:8A:51:6F:F5:16:48:D1:69:F0:38:C8:97:2A
Certificate issuer: /CN=893d7d80053d018a516ff51648d169f038c8972a
Certificate serial: 019D38D392C616869F098AE197E528E21B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iT19gAU9AYpRb_UWSNFp8DjIlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft
Manifest number: 86
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: iT19gAU9AYpRb_UWSNFp8DjIlyo.crl (hash: UAKyOH1LfKjq/c3R7rbA4/cXowPQVAg2LRshMrocEyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iT19gAU9AYpRb_UWSNFp8DjIlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:92:c6:16:86:9f:09:8a:e1:97:e5:28:e2:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893d7d80053d018a516ff51648d169f038c8972a
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=68ced0850b039b521bde7269d12fca143ccc3970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:cb:a2:fb:19:2f:6b:fa:59:b5:6e:52:03:
89:9c:be:af:7f:6a:32:2f:23:0d:47:e1:02:3c:ec:
5c:2f:14:d2:29:6c:d3:9e:e9:43:5c:8b:00:fc:c5:
a5:e8:ce:86:a3:3d:4d:6a:45:74:fd:9b:76:af:9f:
b7:6e:67:d3:cb:00:e2:7e:21:36:12:9b:03:09:98:
4b:d4:f1:28:17:e7:74:b2:7c:a5:2f:db:b9:fe:ff:
cb:50:c0:ce:f7:b9:00:b2:e5:5d:49:1a:42:5a:a2:
b0:75:92:bf:99:b1:68:af:81:03:ee:45:23:93:64:
26:37:20:2a:ec:79:13:8a:4c:80:3d:d6:f6:99:f0:
f2:12:61:f1:22:58:23:d2:d5:fb:cb:2a:d0:71:16:
7b:28:67:fc:13:63:4f:df:04:0e:24:a2:47:70:eb:
bd:d2:11:1f:ed:6b:71:37:51:f2:ff:81:98:dc:ea:
d9:fe:5f:81:90:29:37:ae:c7:ec:3f:92:4e:50:79:
92:ac:91:a7:9f:9d:57:7b:e6:bd:90:25:50:8b:4e:
bf:59:8a:74:c3:bd:cf:fb:34:52:9c:da:92:f9:21:
81:c9:b0:4e:ea:19:21:62:58:05:20:c9:8c:15:a1:
d8:ac:4d:d1:81:5b:00:0b:4a:91:96:b1:bd:32:b7:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CE:D0:85:0B:03:9B:52:1B:DE:72:69:D1:2F:CA:14:3C:CC:39:70
X509v3 Authority Key Identifier:
keyid:89:3D:7D:80:05:3D:01:8A:51:6F:F5:16:48:D1:69:F0:38:C8:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iT19gAU9AYpRb_UWSNFp8DjIlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/820988-fb0d-40ba-8272-321033aa6348/1/iT19gAU9AYpRb_UWSNFp8DjIlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:48:f2:cc:fd:12:70:68:b4:38:52:3e:8b:67:1a:b2:26:f7:
a0:81:83:08:e7:8e:35:5a:26:a3:c3:75:df:bc:07:dc:91:91:
df:5d:60:4e:ce:68:e4:cb:3d:28:c7:bb:8d:8b:97:a9:82:ad:
09:54:83:06:7f:53:45:a5:12:46:2a:61:20:15:78:5a:20:12:
25:83:6e:7d:f9:8f:06:4b:64:35:71:ac:d0:aa:53:5b:27:31:
81:c5:fa:27:8d:aa:ae:5f:99:aa:08:6b:df:da:57:2f:c5:f4:
ea:74:4e:00:15:62:cd:f6:58:5b:fe:26:d1:7a:f1:37:64:3f:
3c:83:c9:c1:40:aa:96:c1:11:63:a3:65:7b:9c:02:cb:20:d0:
4b:d3:4d:9a:65:f5:db:bb:e5:34:35:5d:39:b8:dc:eb:8a:5a:
ef:db:4b:7a:9a:e6:03:f5:a2:ba:64:75:88:2f:2f:c3:ce:f4:
98:5e:86:d7:5f:2a:12:6d:6d:65:24:b6:5c:a6:35:6a:a6:87:
3a:33:a0:2f:53:12:0d:2b:65:bf:7a:6d:e7:f7:81:29:b4:e9:
01:ff:4e:22:d7:cc:aa:d4:66:36:f5:02:6f:8e:d1:3e:91:6e:
4c:04:5f:15:28:35:9a:d6:80:0f:3d:b1:05:17:ae:44:a9:8c:
d1:ec:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:29 2026 by rpki-client