Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
File: IxogKGMGhumbv9Xhyw3Ti424IuA.mft (raw, json)
Hash identifier: +xjYEZvsUfdaodkzQUKkKR0oMw3wyc728fJ7zIGj5Gk=
Subject key identifier: CC:1E:D8:4F:20:B9:EE:3A:26:B5:26:01:12:04:89:64:4F:2B:7A:34
Authority key identifier: 23:1A:20:28:63:06:86:E9:9B:BF:D5:E1:CB:0D:D3:8B:8D:B8:22:E0
Certificate issuer: /CN=231a2028630686e99bbfd5e1cb0dd38b8db822e0
Certificate serial: 019D3909D654974ED1FF361680B84BB85953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
Manifest number: 01B8
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: IxogKGMGhumbv9Xhyw3Ti424IuA.crl (hash: sJqpO2ZVpCbZ0vJaluCOxxgl/HiUQ1qrHItHFMwdm+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d6:54:97:4e:d1:ff:36:16:80:b8:4b:b8:59:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231a2028630686e99bbfd5e1cb0dd38b8db822e0
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=cc1ed84f20b9ee3a26b52601120489644f2b7a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:4a:98:60:8f:ba:9d:06:f2:ae:fc:b2:d5:
fc:0e:a4:32:03:a9:06:10:64:0f:e3:80:a6:bf:25:
5e:83:d7:dd:03:6c:8b:89:96:8e:27:83:ed:67:c6:
99:5f:1f:da:ff:90:7d:8e:f2:47:30:00:87:6a:87:
a8:bb:ba:75:ba:b2:c1:30:66:8c:86:fc:54:1f:88:
49:72:13:17:3b:92:e5:0e:ac:b7:e5:36:77:73:44:
84:c9:69:15:8c:53:d1:14:7e:09:98:77:13:f0:26:
de:4c:84:08:29:88:65:3e:cd:80:c4:1c:e0:2a:11:
96:4f:cc:e4:50:5d:3d:a1:11:54:db:c9:55:9f:5a:
16:e5:1a:f8:da:70:55:73:4f:d2:ed:ce:16:83:cb:
ee:4c:51:7a:3b:9a:2f:87:08:d9:42:f3:9e:f1:2f:
ae:51:fc:77:a4:c8:51:84:23:33:dc:54:37:e5:60:
f3:49:19:61:c9:c7:2e:0f:01:38:b8:9f:20:88:74:
15:68:c6:10:c9:bb:ac:ed:fa:1e:ce:eb:aa:72:cb:
e7:3f:95:ea:18:06:5e:9b:e5:68:f8:52:ad:0c:d4:
16:6b:1b:c0:19:a6:ea:a5:92:8c:dd:bc:37:04:b8:
4e:b4:90:05:63:2f:b9:ab:f5:59:bf:68:57:5f:73:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:D8:4F:20:B9:EE:3A:26:B5:26:01:12:04:89:64:4F:2B:7A:34
X509v3 Authority Key Identifier:
keyid:23:1A:20:28:63:06:86:E9:9B:BF:D5:E1:CB:0D:D3:8B:8D:B8:22:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f5:86:9d:ac:b4:fb:d2:ad:b5:d5:16:f3:71:e9:83:3f:73:
e9:9a:60:aa:67:71:57:f0:8e:8a:50:f9:d2:1f:5f:93:e8:39:
19:73:c1:c2:ec:8a:28:b6:af:c8:f5:b7:ae:52:19:b9:70:aa:
80:eb:b1:d4:45:91:bb:65:2c:3a:8f:0e:28:05:89:91:73:cc:
21:9f:d7:07:19:da:25:f9:33:e7:6d:c6:58:d3:50:5a:38:d0:
c6:c7:2e:f8:dc:a2:80:3c:10:ef:3e:8a:93:d5:88:30:00:d6:
98:bc:21:60:93:f4:8a:9f:4a:67:2d:1c:58:98:3c:16:72:66:
79:c5:a0:63:b4:ad:23:48:5c:4f:51:10:b6:2e:4a:f0:bb:94:
5d:24:d6:5a:17:43:99:4b:e5:8e:ff:1e:1f:07:09:75:09:db:
e4:75:40:53:7a:8f:4e:71:7a:6b:ad:89:b1:54:50:6e:26:01:
4e:5b:66:2a:ce:f4:50:c7:cb:5b:70:e1:27:81:e6:31:7e:85:
77:ce:29:9b:65:0d:84:f1:1f:55:1d:fd:1e:0d:76:70:5b:a4:
09:74:6b:71:0c:eb:10:5d:47:22:ed:5f:6a:3a:1e:27:ca:cb:
9d:b7:0b:d4:b2:e5:d7:2d:da:2c:e5:0a:75:4d:2f:0d:c7:c7:
92:b7:d8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:49 2026 by rpki-client