Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
File: I6iatTI5OGO8sTkWPc9BWKV_G68.mft (raw, json)
Hash identifier: T5BLYu3B4Jt9hKOJEctFYKMxjXrLRwBHoyqiW4d/5Xs=
Subject key identifier: 42:DC:D9:59:E1:74:59:0C:EC:17:84:03:7E:4F:17:CE:45:D4:74:50
Authority key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Certificate issuer: /CN=23a89ab532393863bcb139163dcf4158a57f1baf
Certificate serial: 019D3941859D71CC570851A00BB68C5A6C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
Manifest number: 08
Signing time: Sun 29 Mar 2026 11:01:28 +0000
Manifest this update: Sun 29 Mar 2026 11:01:28 +0000
Manifest next update: Mon 30 Mar 2026 11:01:28 +0000
Files and hashes: 1: I6iatTI5OGO8sTkWPc9BWKV_G68.crl (hash: SvL/wPEuGO6oK5CBGKsXCGeytD9h8RqWzrnnWzXKz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:85:9d:71:cc:57:08:51:a0:0b:b6:8c:5a:6c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a89ab532393863bcb139163dcf4158a57f1baf
Validity
Not Before: Mar 29 11:01:28 2026 GMT
Not After : Mar 30 11:01:28 2026 GMT
Subject: CN=42dcd959e174590cec1784037e4f17ce45d47450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c5:99:78:20:5a:c2:af:a5:4d:17:aa:19:6a:
fc:5a:1b:bf:57:0c:2e:72:46:25:28:64:89:47:3c:
b8:a3:17:80:a7:ef:bb:43:d2:b2:21:11:49:6d:ca:
0a:45:d3:6e:01:8a:8d:1f:12:f6:40:b1:7a:a0:51:
dc:77:fc:45:42:76:53:0a:ba:c1:a6:0b:96:95:48:
f4:67:ba:8a:03:c7:78:36:f4:af:2c:7b:a7:50:d5:
16:c0:18:76:2d:9d:70:dd:c0:2f:78:a0:0c:3d:b3:
9f:fa:35:b0:be:ad:e7:0d:b2:94:80:6d:ef:bd:db:
b0:dd:dd:30:14:0f:d2:2a:f0:11:15:0a:ee:82:08:
e2:8e:12:56:bb:65:e5:1a:2a:84:f4:c6:a3:f0:cd:
ec:7e:96:6b:9e:75:54:9c:59:4b:bc:cb:f2:06:fb:
4e:96:85:7a:fe:e0:87:f1:4d:2f:f0:bf:79:ac:5a:
66:1c:94:08:3d:e9:c2:47:fd:11:93:91:a6:56:43:
56:0a:cc:85:49:b3:bb:36:1f:54:a1:98:cb:c0:04:
b8:48:de:55:17:4d:77:bc:b9:86:4a:96:8c:24:3e:
3f:68:62:92:2a:48:c7:7f:69:d9:bd:00:dc:07:64:
ed:15:a5:de:4a:2f:e5:05:8d:4b:c6:b0:80:23:8f:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DC:D9:59:E1:74:59:0C:EC:17:84:03:7E:4F:17:CE:45:D4:74:50
X509v3 Authority Key Identifier:
keyid:23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3e:d3:60:3d:fb:48:48:50:1b:00:44:e1:99:7e:89:39:ae:
ff:c6:e2:d0:10:45:67:14:84:03:ed:0a:67:60:38:fc:f4:a7:
73:9f:f6:18:bd:f4:d8:1c:68:03:b1:b4:95:ad:a6:de:81:88:
0c:3d:04:5b:99:5c:51:63:4f:75:e2:9a:76:25:08:ca:9e:7f:
3e:83:a8:6b:b4:73:5e:42:21:f9:fe:16:fe:65:a8:35:fe:ac:
31:82:36:13:bd:73:c8:21:c3:13:07:3b:27:cd:3a:46:75:45:
ba:6a:25:9c:f5:a5:9f:10:69:25:18:c3:b1:09:20:f3:4a:dc:
8a:ed:41:31:c4:dd:1f:ad:b7:64:77:3a:1c:65:f6:86:79:07:
e1:28:82:96:df:2e:2c:b8:c5:e4:db:81:f8:f5:24:a7:3e:2f:
0c:dc:bc:49:d4:e1:75:08:e7:fa:fa:75:ed:3c:d3:2d:94:a5:
0f:13:ec:19:86:72:b7:37:0b:ee:99:ca:3d:1e:c5:7a:55:3e:
25:57:cf:ef:c3:ed:e3:05:10:c6:73:05:95:67:0c:2a:bf:34:
4d:68:c8:30:67:1f:be:66:69:2e:43:4c:43:66:f1:cb:65:be:
68:87:4e:21:64:8d:52:88:ac:0d:3c:fc:90:42:df:52:94:64:
25:ec:22:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:31 2026 by rpki-client