Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
File: IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json)
Hash identifier: EGLIWShRSa0xChgYnZY1s1EXcDY9MjCWwcU8T1NvBxU=
Subject key identifier: 0C:C0:E2:3C:34:30:59:44:71:84:3F:36:1F:F9:71:E9:61:FC:B8:00
Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
Certificate issuer: /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Certificate serial: 019D3A8A74C497EBAACAACB82E5C41F95C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
Manifest number: 07C4
Signing time: Sun 29 Mar 2026 17:00:45 +0000
Manifest this update: Sun 29 Mar 2026 17:00:45 +0000
Manifest next update: Mon 30 Mar 2026 17:00:45 +0000
Files and hashes: 1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: qlxyJ8HYYZZFWfTT/5ZUd0opUUQQDOiqGL/alftB7JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:74:c4:97:eb:aa:ca:ac:b8:2e:5c:41:f9:5c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Validity
Not Before: Mar 29 17:00:45 2026 GMT
Not After : Mar 30 17:00:45 2026 GMT
Subject: CN=0cc0e23c3430594471843f361ff971e961fcb800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:11:49:cc:e7:b1:47:ed:45:f7:11:51:b1:
a4:15:82:4d:7f:02:ef:9a:ab:96:ec:a8:75:eb:5e:
f9:0c:e1:80:fa:7e:dd:82:da:b6:1a:7a:db:32:8e:
5b:d1:86:f6:b8:29:25:03:6b:bb:98:b2:ed:cd:49:
e7:cc:28:c1:0d:c2:2a:5e:3a:a2:2a:d5:0f:4c:c4:
1c:76:92:5d:fd:40:af:b4:33:b6:9e:37:1c:74:31:
8e:00:71:d1:c0:a0:b2:04:4e:ed:6e:ef:eb:41:98:
7c:08:49:95:79:52:56:e3:4e:0c:cb:d5:7a:95:05:
60:67:5b:9d:74:b9:22:1e:4c:e6:08:26:92:2f:97:
9f:df:2c:ae:9b:c8:59:4c:aa:49:ac:76:93:2a:a4:
41:40:c0:49:2c:45:7d:ba:c8:bf:eb:ba:9e:d0:49:
be:b0:e7:9b:91:8c:a1:e8:1b:27:69:6c:a3:41:25:
26:75:25:e6:ae:f4:96:c3:a6:20:ec:22:79:2c:c8:
b0:1f:16:c6:00:6c:85:3c:02:dd:2d:74:72:07:ed:
7c:5c:9b:91:84:d0:58:ca:c4:be:b7:af:06:cb:7e:
ee:f8:40:f9:17:24:51:36:2a:d4:0f:83:41:0f:f0:
df:0b:40:95:bf:55:56:06:93:1c:71:59:ab:b0:c6:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C0:E2:3C:34:30:59:44:71:84:3F:36:1F:F9:71:E9:61:FC:B8:00
X509v3 Authority Key Identifier:
keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7f:ce:eb:0e:6a:2b:39:5c:84:0e:a3:f7:9d:ce:dd:d9:41:
7a:07:34:0e:da:64:b9:82:da:4d:03:df:f7:2b:c1:3e:ce:a7:
48:d3:a0:fe:c9:a5:30:de:11:6e:df:b4:46:fa:17:7e:0a:5c:
97:50:e0:d4:d9:b8:d7:33:fa:c3:4d:d7:0d:6b:4c:07:a6:7f:
1f:3d:ab:dc:c5:b0:1e:56:b5:67:38:32:04:09:88:13:e8:57:
5e:ec:12:52:40:2b:af:3a:46:75:50:44:85:8e:cd:56:27:fe:
ca:81:19:a0:77:d8:fa:55:4f:f6:73:fe:a1:bd:9c:ec:d5:77:
ac:cb:f0:c9:af:9a:3f:61:3a:ab:b5:19:8c:5e:0c:83:e7:9e:
79:c4:bb:22:31:95:93:d5:7a:53:a1:1f:6b:60:f6:8d:94:65:
da:8d:08:4e:13:72:fa:29:88:f7:59:b6:37:6e:29:8d:09:77:
7a:1f:92:d4:76:88:2e:21:fe:43:af:23:e2:d9:76:af:41:0c:
cd:59:e3:6c:0e:5b:45:d7:de:44:70:74:1d:50:54:9d:9e:35:
f1:17:93:d9:de:1c:40:1b:17:d0:76:8a:2f:e4:da:cf:ff:fb:
14:21:2e:1a:9d:78:5f:fb:fd:be:1e:83:fc:cf:9c:44:39:26:
15:cc:37:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:25 2026 by rpki-client