Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
File: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json)
Hash identifier: 3iZvjXR6Z6U3snje1haagvV4urQ2qS7pe4KTzkt5USg=
Subject key identifier: F4:B9:72:E0:F4:D1:BE:4F:6A:F7:8D:5B:F4:12:42:09:E5:15:9F:96
Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
Certificate issuer: /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Certificate serial: 01A089E754DA6EEC673F85598AF29B2E8C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
Manifest number: 0AD1
Signing time: Thu 10 Sep 2026 06:00:34 +0000
Manifest this update: Thu 10 Sep 2026 06:00:34 +0000
Manifest next update: Fri 11 Sep 2026 06:00:34 +0000
Files and hashes: 1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: otoPD6LFcjzO8QHzHP8VQZS3dv66e2CReT+BzE/vQzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:54:da:6e:ec:67:3f:85:59:8a:f2:9b:2e:8c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Validity
Not Before: Sep 10 06:00:34 2026 GMT
Not After : Sep 11 06:00:34 2026 GMT
Subject: CN=f4b972e0f4d1be4f6af78d5bf4124209e5159f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:25:59:44:a4:8a:fb:15:b6:91:83:8c:92:
29:db:b6:14:93:84:77:97:b8:50:1f:5d:9b:b8:c7:
b6:54:50:7a:d9:18:71:63:23:31:b1:fa:82:0b:0c:
a5:6d:8e:33:e5:dd:ab:1e:8f:0c:ec:ad:ec:1d:6a:
2d:e7:68:d7:c9:fb:9f:bc:48:95:16:ba:de:15:65:
53:de:31:b2:7e:3a:f8:da:6f:c7:9c:54:16:11:15:
0c:3c:c7:16:a4:bc:bb:55:88:6b:94:37:d9:e6:08:
ae:f7:d2:5e:4b:5d:0e:f3:8b:4b:5e:30:bd:44:6c:
66:33:70:17:43:d8:a2:e8:96:0a:b8:b3:e6:57:1a:
75:31:d3:0d:81:d3:48:6d:9e:65:32:82:28:99:b2:
18:57:ca:7d:17:0e:7e:41:a9:ed:a7:ba:62:4e:a9:
87:ae:67:af:e8:53:0f:6b:09:22:40:77:09:f3:4b:
e5:ba:ae:f0:80:05:03:19:fd:26:d9:20:ee:84:8c:
0a:02:e0:4d:2c:64:26:ca:2f:e4:ee:ff:7b:2b:72:
1a:a8:35:1a:c4:c6:69:14:96:bc:e1:2b:a4:3f:ca:
8e:67:82:b0:8e:05:fd:38:24:b0:8c:7f:21:1e:83:
0e:ce:99:88:94:4d:4e:bb:80:cc:c8:0a:75:45:88:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:72:E0:F4:D1:BE:4F:6A:F7:8D:5B:F4:12:42:09:E5:15:9F:96
X509v3 Authority Key Identifier:
keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:8f:71:08:49:30:b7:e2:4b:7a:28:14:e5:d2:1e:9d:47:
e7:40:d1:49:3d:81:a5:8e:a7:b3:b6:e6:dc:cc:b7:fb:a5:62:
eb:00:3b:04:22:d8:da:76:6f:e7:ce:5d:9f:d7:3d:12:32:a3:
dc:01:82:43:5f:68:cc:81:21:c9:7d:eb:57:5c:a2:24:94:e6:
65:ea:5a:1f:72:d5:22:33:25:2f:61:f0:67:d9:c3:11:6d:71:
ef:fb:c7:a1:25:6b:01:7b:eb:47:b7:c0:de:39:6f:98:d9:61:
32:1b:7f:f3:0a:d2:32:b2:11:df:f9:30:99:ef:26:73:43:33:
3f:6e:c1:63:c0:6a:61:07:30:6b:81:1c:92:b1:a9:f4:2a:03:
49:b5:c1:9b:17:fa:7b:b0:92:21:5e:d4:96:6c:89:10:6e:ab:
81:fb:7e:78:bf:69:c4:49:3f:19:40:42:fc:ef:9a:e3:00:8c:
d6:51:f9:36:11:70:cc:4e:26:f1:bb:2d:61:b6:8a:a1:a1:c1:
5f:be:fe:f5:53:2e:ec:14:fe:9b:ed:f0:a7:c7:af:9c:39:e5:
bf:61:fd:55:75:8a:2f:79:fe:6b:c1:b2:be:d6:18:a8:18:bf:
9f:b4:67:b8:79:10:a1:90:a6:ea:d9:e0:72:83:3d:88:2e:9e:
cd:cf:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:01:38 2026 by rpki-client