Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
File: iuSaSeoGdwqH11pcg1b0Vk4asew.mft (raw, json)
Hash identifier: p8js3vPBbwk8WSbuxqmyqiR1dJEMMeJXuH4XZbJ/Brw=
Subject key identifier: D8:07:52:26:8C:E8:97:1F:BC:68:88:05:03:9C:13:42:B9:AC:80:F5
Authority key identifier: 8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC
Certificate issuer: /CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
Certificate serial: 019D37C0357A5084685702228C38734F8E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
Manifest number: 0625
Signing time: Sun 29 Mar 2026 04:00:36 +0000
Manifest this update: Sun 29 Mar 2026 04:00:36 +0000
Manifest next update: Mon 30 Mar 2026 04:00:36 +0000
Files and hashes: 1: iuSaSeoGdwqH11pcg1b0Vk4asew.crl (hash: nB+xdcZKPOwh6uGh+vzX8rJTZhrBNfu93NBhxooO3gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:35:7a:50:84:68:57:02:22:8c:38:73:4f:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
Validity
Not Before: Mar 29 04:00:36 2026 GMT
Not After : Mar 30 04:00:36 2026 GMT
Subject: CN=d80752268ce8971fbc688805039c1342b9ac80f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:65:ad:78:8e:f9:4c:aa:6e:49:b0:9d:f2:
36:b5:5c:4e:0e:e5:75:93:aa:21:b5:8b:06:22:34:
2e:93:6a:32:5a:cb:ee:70:68:7e:c1:cf:2e:f0:16:
04:90:9c:f9:af:9f:7b:ca:02:48:95:69:a3:76:3c:
cf:d8:35:09:29:92:c4:b8:9b:ad:e4:aa:72:3f:01:
a2:f2:76:a3:26:54:3c:0c:d9:39:c6:9e:64:13:db:
0a:e6:bd:38:39:b4:5f:31:cb:4f:63:bf:77:da:8a:
67:2b:a6:8f:9b:ce:05:bb:b5:b5:d9:fd:09:a1:8e:
95:af:73:2b:cc:1d:8c:35:ea:92:8b:7d:f3:1a:97:
ba:fb:cd:8e:96:0c:34:61:0d:92:a6:e5:81:d4:52:
67:bb:29:77:94:ad:c3:ed:ac:67:0b:7d:1a:df:ad:
8c:dd:ab:97:1b:08:14:21:3a:16:c5:0b:7b:f0:11:
a6:0d:d7:2f:50:46:15:7f:f3:98:5f:3e:af:cd:a0:
7d:68:cb:ca:26:61:3a:80:7d:11:2b:61:09:d8:9a:
10:20:00:75:42:2c:0c:3e:47:1b:d5:d0:3c:83:98:
b2:50:4c:b6:72:d4:e0:22:25:63:cc:67:37:a6:df:
cd:43:8a:32:a2:7b:1f:77:28:cd:61:ad:44:61:b2:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:52:26:8C:E8:97:1F:BC:68:88:05:03:9C:13:42:B9:AC:80:F5
X509v3 Authority Key Identifier:
keyid:8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6e:ec:e9:b5:27:1c:8c:9b:39:58:b0:7f:a2:d2:92:fb:ae:
7c:47:0a:89:c5:6a:29:38:06:6b:37:39:5e:1b:04:f7:6c:d9:
d1:c5:9f:8a:14:ff:b5:37:ec:5a:06:b4:68:c7:40:91:2d:e4:
66:46:c6:33:85:20:0b:4b:d2:83:24:9c:61:8e:59:d6:17:d4:
8a:26:7b:72:2b:fb:38:e6:88:dd:6e:af:6f:0a:6b:7f:0c:03:
93:fb:2f:88:80:93:88:3f:e2:d0:a9:0c:99:dc:5d:e4:d6:47:
bc:56:86:ad:21:7d:db:1d:f1:f9:d3:bb:73:17:a2:7f:67:40:
83:4b:03:04:3d:f9:a0:22:47:f1:49:3e:a0:0f:0f:a6:79:ed:
94:5e:5f:ec:2e:bd:9e:50:7f:3b:c3:98:55:e9:45:e7:30:2b:
3f:8c:9e:e6:1e:c2:5c:cf:2f:e5:52:41:89:c6:6b:cd:57:12:
86:c3:3f:26:dc:3d:ea:a4:d6:ed:d9:37:47:4e:ed:e9:b1:3a:
40:6e:88:4f:29:ea:16:cf:31:bd:92:5f:9e:4c:e6:78:94:16:
d9:f8:4e:27:3d:6c:71:fe:3e:8a:12:97:e8:7b:90:42:da:34:
1f:a9:5b:0e:70:65:72:01:b8:32:b2:38:cc:f5:5f:62:27:7a:
25:ef:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:42 2026 by rpki-client