Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
File: II3G2-Xnc9eq1wBdbP8m5HFDyng.mft (raw, json)
Hash identifier: KMZYBpONTNhFbero24WotEkIygvnXrqYjmZePNkHKT0=
Subject key identifier: C2:55:76:9A:82:57:E9:C1:8D:4E:64:6A:3E:B0:2A:23:96:16:2E:62
Authority key identifier: 20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
Certificate issuer: /CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Certificate serial: 01A0E92EA0C404D1D77591F621C5E728D349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
Manifest number: 0258
Signing time: Mon 28 Sep 2026 18:02:22 +0000
Manifest this update: Mon 28 Sep 2026 18:02:22 +0000
Manifest next update: Tue 29 Sep 2026 18:02:22 +0000
Files and hashes: 1: II3G2-Xnc9eq1wBdbP8m5HFDyng.crl (hash: CzxbEvRVoeV+pbT8DUQuyk6Y92RWCl9DheDR2VuJV2o=)
2: VD6M1TalIBGQDQhDlzk5W__Y3uc.asa (hash: jjpCurqNQ5oMU8caZ7eCROEYaNl81c0Drp5VvZH2RWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:a0:c4:04:d1:d7:75:91:f6:21:c5:e7:28:d3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Validity
Not Before: Sep 28 18:02:22 2026 GMT
Not After : Sep 29 18:02:22 2026 GMT
Subject: CN=c255769a8257e9c18d4e646a3eb02a2396162e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:62:d4:f5:73:90:8d:14:d8:36:02:d3:2b:
fc:b2:d6:20:76:d0:86:84:44:73:7d:09:b1:a5:63:
2d:7a:5e:7f:99:3a:28:8a:0d:b8:73:00:3c:5a:f0:
62:6d:42:8c:04:54:2b:b9:55:9f:17:5a:82:fd:d5:
e7:30:61:c7:f1:f8:62:5f:77:cf:74:c6:83:23:1f:
c1:88:e2:bd:02:07:c1:e6:3f:2f:b4:2e:36:08:44:
c6:7b:d6:23:d2:01:4b:b0:2c:04:30:60:a9:b1:54:
13:1c:a6:0a:1b:83:80:10:2a:6d:c2:28:23:33:96:
b8:5c:d9:9d:a5:92:71:3d:1e:c7:c5:69:4b:5f:48:
35:91:8b:ef:0f:f4:86:dc:81:03:98:e6:4a:2f:74:
52:40:4f:fb:c4:47:89:d6:71:26:11:5b:85:0e:8a:
d4:31:f0:53:08:f9:25:73:96:46:24:7c:c7:fc:37:
36:f5:43:38:90:ea:6d:81:b5:57:c5:5e:7b:c3:19:
4a:3b:26:35:ed:2b:31:fa:ad:f1:d4:39:56:20:9d:
63:6e:fe:c8:74:29:f2:c0:94:16:a8:2b:a8:c5:5e:
8e:eb:a0:c7:bc:ab:dd:fb:21:53:1f:6d:e9:24:c1:
e5:ee:49:48:a8:06:ac:f4:02:37:ac:4d:9d:92:7d:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:76:9A:82:57:E9:C1:8D:4E:64:6A:3E:B0:2A:23:96:16:2E:62
X509v3 Authority Key Identifier:
keyid:20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8d:9e:10:8d:ab:2b:2c:0e:25:38:09:39:39:56:b0:52:88:
be:2c:4f:21:72:d7:87:57:ce:8b:ad:39:48:6d:c5:13:ce:d3:
2b:04:95:14:32:bf:76:1c:19:f0:aa:0a:0f:15:c1:7c:78:1a:
19:42:77:6d:7c:01:34:2d:15:ea:77:96:e4:eb:a9:c7:75:8f:
9f:39:17:70:a8:9e:3f:f1:06:cd:b8:ef:74:e2:0e:7c:86:5a:
54:07:ee:28:f1:46:17:f2:ad:e2:93:e4:fc:14:4b:1a:25:62:
1c:7c:27:0b:2c:31:3d:07:99:bf:91:01:3b:d7:b2:70:33:01:
44:63:b7:ca:a5:1b:8f:d6:38:ab:1c:ac:1d:ba:95:0e:0f:86:
24:3b:65:98:fa:1c:1d:91:f4:43:38:eb:09:76:3f:22:03:dd:
59:75:97:01:aa:5d:ec:5a:17:f7:70:a3:87:1b:18:41:89:8c:
b9:44:8f:f9:86:87:f3:69:c2:31:61:ad:cd:fc:4e:be:f4:63:
e8:b5:93:fc:bd:60:70:d6:2e:c8:5b:df:8a:d0:f5:e3:c0:a1:
09:92:a0:ff:01:02:4e:88:57:b7:f7:91:2b:47:81:97:d2:87:
18:44:b0:26:ae:74:82:9f:31:fc:92:0b:d9:7c:cd:d1:d7:14:
5a:7a:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:29:48 2026 by rpki-client