Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier: jnnwOzSpwn6mwskbn3S6g5EPzFzk86s46gbqCqYXpHU=
Subject key identifier: F3:BA:D8:44:63:29:7A:8D:1C:3F:44:D9:36:21:75:AC:78:E4:E5:AF
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial: 019D3978166FA1AD1F685ED979F5446FC2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number: 0811
Signing time: Sun 29 Mar 2026 12:01:04 +0000
Manifest this update: Sun 29 Mar 2026 12:01:04 +0000
Manifest next update: Mon 30 Mar 2026 12:01:04 +0000
Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: WJhNvA1gtsS2GzxNPgmHnXOFbDKy7YUPRMQ2AmIYHgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:16:6f:a1:ad:1f:68:5e:d9:79:f5:44:6f:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Validity
Not Before: Mar 29 12:01:04 2026 GMT
Not After : Mar 30 12:01:04 2026 GMT
Subject: CN=f3bad84463297a8d1c3f44d9362175ac78e4e5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:1f:36:01:3b:f6:6c:8a:1c:07:e2:16:7c:
a3:3f:f1:f0:42:fb:62:01:74:2b:8e:7c:ac:a1:df:
52:b4:80:d1:84:70:a8:0c:79:1f:7a:60:d7:19:a9:
42:2e:c0:1a:0b:0a:93:6b:81:a2:57:3f:5a:ac:f9:
71:b3:ed:e8:dd:a8:0b:05:60:54:5d:9f:50:a8:96:
77:28:48:5e:75:1d:c8:7a:07:4b:29:a9:b9:4e:85:
0a:5b:63:b8:67:9c:ca:c8:f4:dc:5b:75:4c:2e:85:
25:ad:a0:0b:4b:a7:ba:68:1e:93:a2:79:7b:3f:4b:
52:c0:eb:03:56:7b:9c:5c:be:82:5a:4a:94:42:d6:
64:91:b6:8c:c7:8d:23:0c:5d:7b:75:19:5a:ac:0c:
bd:62:dd:f1:af:d0:79:74:d8:4c:02:1e:be:91:d7:
e3:8a:9f:66:d7:92:61:d6:cc:29:77:b7:1d:4d:0b:
76:83:9d:ee:d0:1e:93:97:0d:ed:ed:c1:d6:2b:9f:
e0:24:fb:5d:72:dd:78:3d:7b:47:de:12:39:71:ef:
ae:e9:33:72:e8:f7:0f:79:b3:60:3b:bb:5e:6a:46:
fa:00:d0:08:8d:ae:81:2c:94:2e:06:dd:1d:35:d9:
78:1f:d2:31:6d:14:e7:aa:bc:ac:01:fc:ec:47:13:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BA:D8:44:63:29:7A:8D:1C:3F:44:D9:36:21:75:AC:78:E4:E5:AF
X509v3 Authority Key Identifier:
keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b5:b5:ec:70:16:30:b0:fe:04:f8:e2:83:0f:fe:0b:e5:77:
49:f5:85:1b:65:da:41:e5:19:51:96:57:53:3f:88:fe:a8:ba:
dd:85:4a:19:64:81:58:2e:c8:66:57:81:43:20:0d:7e:65:48:
85:04:c0:19:f4:63:11:df:77:9d:ab:a7:25:d9:55:55:23:2c:
cc:f8:fd:c6:2c:6f:7e:fa:58:50:f0:be:5d:42:27:15:17:a0:
43:03:c0:b0:aa:93:10:c8:7f:79:82:0b:be:28:c9:6f:22:96:
e6:97:48:53:64:d4:8f:f8:ba:5d:c4:ba:ff:d6:87:34:ef:e8:
ec:2d:2d:ae:7b:eb:b4:2f:62:a7:2d:86:d9:d6:b6:4c:b2:73:
dd:6f:96:35:12:64:22:44:1a:15:5f:ba:48:fc:e2:35:59:d5:
a2:96:c0:0e:f0:75:a8:91:ea:29:7e:fd:98:0b:8f:c8:98:ab:
69:0e:11:6f:58:2d:f3:08:55:4e:fa:d4:32:54:85:67:95:cb:
2e:9e:de:40:12:e6:55:f1:a4:34:79:c0:5c:d1:4f:bc:fb:cd:
3e:83:4f:49:95:ab:8f:c1:3e:6b:be:18:0e:2b:4e:b1:1d:7f:
42:81:b9:c3:1a:f1:1c:e7:68:6a:48:f8:4d:0f:e6:6a:e8:8f:
74:38:e8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:19 2026 by rpki-client