Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File: iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier: 9tl9l0oUcVhFq1IRHez2HHbZn3J5FZ7B9HPNh2d43KE=
Subject key identifier: 08:2F:4B:E0:E3:D0:E8:D5:8B:1D:68:A4:AE:F3:54:81:CD:37:73:FA
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer: /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial: 019D37C06E55C1BE8884990306CC803E632B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number: 08B6
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: AU+dHGABj///Tv8MK4NTJZQmm+VvRnE4OLGRM5w28yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6e:55:c1:be:88:84:99:03:06:cc:80:3e:63:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=082f4be0e3d0e8d58b1d68a4aef35481cd3773fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:f5:5c:e8:d7:6e:44:2e:63:01:f6:67:54:
71:26:f9:96:10:f8:0e:fe:c9:cb:a4:89:db:86:81:
9c:09:40:3b:91:78:db:d5:37:57:90:0e:5e:e7:c2:
b9:6a:f5:ec:c8:12:3d:81:49:37:02:59:f4:d7:89:
5a:6e:38:a1:20:0f:fb:5d:bc:d3:c8:b3:58:dd:6b:
87:52:bb:2f:ca:86:ac:56:3e:c0:ab:4e:23:32:6c:
f7:ab:56:fb:2a:4f:17:7b:24:52:1b:69:80:84:10:
fe:98:21:ec:80:d5:13:0a:cf:e2:8e:03:ff:f3:4c:
1c:db:6d:4b:fc:99:16:ef:d5:e7:58:9c:d9:3e:d8:
8b:0b:5e:56:50:96:3f:00:60:29:57:8c:d5:1c:fb:
87:98:40:7a:18:77:88:a0:bd:05:b8:68:01:da:32:
78:e1:6e:9b:bc:bb:a5:d2:87:8e:3c:39:7d:af:37:
0c:ce:23:6e:91:67:9a:a2:95:98:be:65:ae:9c:71:
95:c3:98:11:44:49:e9:bb:63:bc:36:13:0f:a4:a5:
06:3d:d3:cc:16:fe:94:78:ec:1e:0e:a0:0c:ee:6e:
c8:5f:1c:ff:75:e5:e8:0f:ef:63:b3:66:62:77:b7:
a2:15:d0:0d:ef:88:85:8a:a0:47:94:79:07:71:38:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:4B:E0:E3:D0:E8:D5:8B:1D:68:A4:AE:F3:54:81:CD:37:73:FA
X509v3 Authority Key Identifier:
keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:cf:b0:75:00:81:b6:78:48:b0:22:45:0b:77:86:df:bb:
e4:9f:f2:9e:b7:b4:8e:9e:70:90:55:bd:86:f3:3b:ee:03:13:
ff:f6:ad:03:57:eb:9f:b0:51:07:e6:21:40:31:28:43:c7:1d:
87:4c:8a:98:ba:d6:07:10:af:00:ef:6f:11:f0:81:2e:5e:59:
3e:f1:e0:21:54:4e:b0:ec:18:c5:90:41:37:fe:1d:f5:11:a5:
fb:e4:d6:a1:49:eb:0b:99:86:ba:35:67:15:5d:a2:09:63:2b:
f3:56:62:93:01:5a:e6:1f:46:32:81:6c:a8:f5:35:1b:ba:9b:
63:6b:e8:5d:a6:f6:37:3d:92:79:ad:15:74:34:f1:8e:9e:8f:
2c:5e:fd:7d:22:6f:f2:1d:78:86:a8:ee:07:00:10:61:d7:e5:
df:44:3b:1d:72:0f:61:5a:fe:6f:ff:f0:21:00:75:82:1b:3e:
6e:ed:3c:42:82:16:63:43:63:48:e9:b3:bb:f1:a8:44:d3:7a:
93:3a:9e:ee:83:7a:2d:b3:6f:15:bc:1b:32:17:09:fb:10:5c:
0a:c4:85:49:62:c3:e2:06:b2:98:c0:90:8e:e4:0f:03:a4:30:
c6:22:2e:a6:31:26:96:b2:30:1e:96:24:a0:dd:d5:88:b5:82:
67:41:58:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:27 2026 by rpki-client