Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: HACDHbp9VU34i8yno1L4kW+StJFKFmV2wu65CdaKK2w=
Subject key identifier: 06:31:3E:E5:F1:09:90:8E:08:13:D8:79:E9:29:3B:B9:05:E2:91:ED
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 019D38D340CB1B628DE105F532F3A6FBF29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 07FB
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: mg/mqGpnKxEKhpQewFJngstohhcgjdE+w4zjv7wtPc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:40:cb:1b:62:8d:e1:05:f5:32:f3:a6:fb:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=06313ee5f109908e0813d879e9293bb905e291ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:eb:82:8d:02:d6:97:05:73:a6:17:0d:d4:c6:
f9:be:19:4c:17:c3:82:cc:7c:b0:02:cb:a7:92:1d:
f4:b4:70:33:eb:8d:8e:21:7a:23:f8:ee:14:a7:2d:
b3:f0:54:2c:d8:67:5c:12:7e:ac:6b:d3:00:37:06:
ac:dd:51:0d:1d:e2:6e:86:ca:41:56:e7:ef:56:80:
94:22:31:3c:fe:92:46:01:5b:65:0a:9f:80:80:c5:
93:d9:43:51:d3:4e:9f:2e:65:b1:bc:a3:ab:bf:f7:
36:c2:bc:ca:12:3a:22:c4:c5:eb:1d:f4:88:36:11:
cc:8d:70:de:c2:d0:d7:ed:07:d6:2e:a1:5d:75:36:
86:ae:c3:2d:ee:71:92:c9:f6:55:e4:f4:cb:f2:92:
b2:06:e8:72:13:fb:82:fe:9f:08:3f:23:97:e2:65:
dc:5e:76:2a:6e:f7:98:99:5c:85:0c:56:98:ea:ff:
d9:c7:2e:a0:d0:1a:d8:5b:3f:aa:05:3b:a8:98:2b:
30:e9:3f:42:f9:13:45:32:ea:38:06:e0:1f:3c:e9:
2c:68:f3:c4:f5:4a:b2:0b:72:a3:ec:3e:37:5f:ae:
ab:d5:a6:53:f2:91:71:cf:1a:4e:7c:4d:86:f1:55:
44:9c:01:13:14:ba:f4:cb:b4:80:ff:66:e5:02:a5:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:31:3E:E5:F1:09:90:8E:08:13:D8:79:E9:29:3B:B9:05:E2:91:ED
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e8:c4:a3:90:08:d3:bb:28:36:11:c8:81:ac:8f:0d:6c:e1:
6d:7d:66:03:6c:2d:93:49:08:ab:61:93:57:c9:16:82:2b:cc:
04:1d:bc:df:38:e6:fd:5b:d1:e0:88:c9:ac:af:52:d9:57:b1:
2a:92:80:c5:f4:13:28:a0:01:65:16:35:a5:84:4c:7c:0b:28:
71:1e:19:2e:f0:af:7a:ac:7f:c3:88:db:45:fd:d5:fd:e7:59:
c9:f2:34:a6:dc:c4:c1:67:76:74:de:a5:bf:93:54:b8:63:49:
41:da:cb:ec:0b:65:3b:5f:4d:16:a2:54:98:51:68:59:54:fe:
af:96:db:a5:64:ad:32:aa:2c:2d:2c:f2:53:68:55:38:7f:f1:
d8:83:ca:f2:33:67:bb:1c:ea:99:2c:f6:e1:d4:40:79:44:4c:
65:b9:ba:2b:43:a6:91:9f:a5:99:f0:6b:1b:21:77:eb:b0:52:
d9:3e:ce:93:bd:e3:52:de:fb:89:92:60:e6:4b:dd:a0:99:81:
9e:e2:5f:dc:bd:af:f7:8a:d0:23:c5:f3:d3:1d:86:32:a3:db:
2c:d8:43:67:2a:7c:59:5d:66:ab:47:51:e2:4c:e8:b6:37:75:
b1:60:35:39:d3:e7:ce:db:fc:51:dc:8c:29:0c:87:a6:f3:4f:
c5:57:af:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:57 2026 by rpki-client