Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: Fx1pyy0bZDJc4ut0V8GDW8QMnCM9/p9KK8W4FLMiDsw=
Subject key identifier: FD:37:24:18:68:5B:B4:79:37:C4:1D:3C:2C:AC:1D:8F:52:F1:EA:E5
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 01A08C0DBEBB29BF8408BA6B0E0FA3D435F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 1A44
Signing time: Thu 10 Sep 2026 16:01:46 +0000
Manifest this update: Thu 10 Sep 2026 16:01:46 +0000
Manifest next update: Fri 11 Sep 2026 16:01:46 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: 6xhOyhW2gGgDFx2TLc7kFT/A0VOaVHyrFHgpv5bbzfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:be:bb:29:bf:84:08:ba:6b:0e:0f:a3:d4:35:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Sep 10 16:01:46 2026 GMT
Not After : Sep 11 16:01:46 2026 GMT
Subject: CN=fd372418685bb47937c41d3c2cac1d8f52f1eae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1e:1f:c1:62:34:34:a2:d4:27:9f:51:e4:b9:
aa:86:9f:e2:83:83:08:f2:5d:a4:da:c6:e4:3d:96:
47:55:de:76:5a:d7:7e:c2:80:fe:93:db:97:47:2d:
7e:ea:df:ec:96:2a:25:e9:84:c9:aa:83:a0:27:16:
b2:93:59:e4:5c:6c:8d:1a:0c:19:96:ab:d0:46:43:
96:93:d5:e1:26:67:cd:19:3b:90:c1:b9:8d:3c:4a:
22:c9:e2:d6:92:be:bd:c4:86:aa:bb:62:f5:bf:cf:
a4:b7:ca:52:a8:9d:d5:1b:9b:29:aa:67:69:83:6a:
d3:ca:ea:a5:18:ce:1d:45:05:6a:08:16:74:d5:6e:
63:5e:51:70:37:fd:06:e6:1c:8e:9a:73:3b:0a:f4:
4d:14:59:9a:2e:7a:fb:d1:6b:d1:fe:92:0e:77:01:
70:b5:68:db:85:f7:12:37:5b:cd:7f:dc:70:7e:13:
20:e8:96:be:ab:93:a1:41:6d:b4:74:97:48:e5:5c:
28:68:09:f0:9d:85:1b:bf:7d:5c:7b:6a:ab:64:c3:
aa:db:c9:e2:fb:56:98:74:47:68:02:84:f7:41:06:
e8:d1:b8:3d:ba:e5:01:2f:39:a9:94:47:a1:31:2c:
ad:05:07:d3:16:ab:3c:02:91:32:53:04:8d:33:ca:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:24:18:68:5B:B4:79:37:C4:1D:3C:2C:AC:1D:8F:52:F1:EA:E5
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f2:77:99:12:09:aa:4b:21:04:f3:eb:35:53:82:38:13:bd:
07:27:8b:18:07:43:55:cd:dd:6f:4f:76:6d:88:f8:17:94:db:
9e:6c:f1:b3:28:ee:c4:be:dc:e2:0c:d9:42:f9:d3:09:32:fa:
fd:43:a2:13:f9:c7:fc:1f:80:71:9f:b8:f1:ee:09:8e:71:d1:
85:b6:51:ed:c7:ee:1e:65:90:6c:c9:d8:84:e2:a8:6f:2b:c9:
1e:48:81:c9:c9:bf:49:c4:f1:b7:8f:50:49:7c:86:a7:11:29:
53:1b:31:68:d7:e6:5d:55:0e:24:1b:22:1f:cb:53:fc:ac:6a:
c4:af:f1:18:ea:14:86:c5:7f:4d:58:fc:cb:1f:b7:97:24:da:
9b:87:a5:e2:0a:ec:4c:19:26:16:5a:62:f0:b6:45:ec:65:91:
1f:e6:c5:ad:c0:95:59:e1:23:be:45:f0:86:2a:42:11:dd:1f:
11:1c:6e:f0:ce:65:54:d6:f1:f6:e4:d5:86:44:d4:40:e3:f3:
a5:49:77:28:d6:8e:3d:c6:7f:49:58:2c:c9:07:29:7c:6a:b9:
99:98:ed:85:4a:34:bb:55:7a:a1:c4:3d:07:6e:48:e4:ed:96:
79:12:6f:2b:b7:17:23:11:dd:82:0b:52:7c:3a:7f:11:bd:2e:
c7:0e:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:26 2026 by rpki-client