Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft
File: I22P43gCkUrBm_04YGAw4-Q-KPs.mft (raw, json)
Hash identifier: Bmb/ssRj23h5JQAGUjOl31BSJQDTzwKOM/JUitp4144=
Subject key identifier: 4D:C1:2B:F2:93:76:8B:1E:B6:CB:A6:30:D6:D5:68:91:C0:CE:AC:7E
Authority key identifier: 23:6D:8F:E3:78:02:91:4A:C1:9B:FD:38:60:60:30:E3:E4:3E:28:FB
Certificate issuer: /CN=236d8fe37802914ac19bfd38606030e3e43e28fb
Certificate serial: 019D3AC1E4416761013C0947F28E9F2ACBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft
Manifest number: 01A8
Signing time: Sun 29 Mar 2026 18:01:18 +0000
Manifest this update: Sun 29 Mar 2026 18:01:18 +0000
Manifest next update: Mon 30 Mar 2026 18:01:18 +0000
Files and hashes: 1: I22P43gCkUrBm_04YGAw4-Q-KPs.crl (hash: 6Ksk2ZWwPgtr4i1y7oG6NId1dmwlmdPCqBqU8kksFUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:e4:41:67:61:01:3c:09:47:f2:8e:9f:2a:cb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=236d8fe37802914ac19bfd38606030e3e43e28fb
Validity
Not Before: Mar 29 18:01:18 2026 GMT
Not After : Mar 30 18:01:18 2026 GMT
Subject: CN=4dc12bf293768b1eb6cba630d6d56891c0ceac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:58:e7:5f:d9:dc:e9:eb:ba:c4:30:c7:76:
a2:8b:cc:ef:ef:c6:3b:3c:80:55:9b:d5:ac:72:ac:
e0:b0:bc:4f:b6:df:91:81:49:73:a7:09:68:8b:96:
64:bc:38:25:76:df:e8:6b:4d:b8:bb:f5:d0:14:79:
67:ae:c5:14:a9:03:81:f8:93:18:7a:1e:d7:6b:97:
50:d4:2a:9b:3e:05:57:ba:61:45:10:18:b9:b6:9c:
4a:e1:93:48:a1:1b:8a:b1:bd:ed:10:09:00:7b:70:
20:02:3e:fc:14:76:52:d6:96:d0:4f:12:af:a6:29:
3f:92:03:df:86:ef:dd:7c:e9:6d:af:88:cb:60:ea:
f5:3f:f2:21:21:31:07:ad:df:b3:29:ac:b4:a7:36:
96:fd:52:9c:e1:d1:05:21:39:47:d9:0a:64:b9:b4:
e0:46:cd:28:fe:c3:5e:e4:6d:eb:37:bc:d3:86:82:
d3:43:3a:4d:52:b4:87:5f:46:c5:2a:4d:f0:6c:d3:
a8:b4:9d:c8:ea:d4:f0:cb:ac:b3:41:ee:95:9f:d1:
c7:47:18:b4:91:ca:a1:ba:a4:e9:20:d7:13:7a:73:
5b:8e:75:ff:bb:f1:d0:41:7f:f8:1a:dc:a4:17:43:
83:1a:ef:45:fa:d1:11:4f:1b:77:0b:e3:8c:a6:46:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C1:2B:F2:93:76:8B:1E:B6:CB:A6:30:D6:D5:68:91:C0:CE:AC:7E
X509v3 Authority Key Identifier:
keyid:23:6D:8F:E3:78:02:91:4A:C1:9B:FD:38:60:60:30:E3:E4:3E:28:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:68:16:8d:e5:c3:12:06:21:a0:34:df:1b:f3:ce:63:23:4f:
93:5a:3f:81:1a:0a:29:7a:d7:4d:2f:d6:61:9d:ac:ab:c4:80:
56:73:d5:0f:e4:1b:d1:c8:28:34:b9:f8:4e:f5:f8:3c:05:08:
74:42:63:2e:73:fd:dc:70:9f:30:9e:b4:b7:25:a5:dc:4c:05:
fc:fa:c8:b9:36:7e:6d:5b:39:97:18:de:23:b5:8a:8b:ca:c3:
00:54:22:8a:78:d7:3d:05:a8:a1:e9:58:88:d7:6f:08:02:85:
15:c0:6d:36:ab:0a:51:d5:60:cf:27:d1:a3:ac:64:cc:84:26:
31:0c:9a:db:63:c5:23:8d:e0:1d:e6:22:10:7a:0b:0e:0a:2f:
ba:b8:83:c9:f5:13:9e:bc:07:7d:65:42:bd:7f:9b:13:4f:f7:
bb:74:4e:33:27:77:f4:60:b8:4f:20:98:73:0a:f3:94:e7:6f:
b1:23:a5:3e:10:f9:53:7c:70:88:2a:2a:b7:1c:70:06:49:30:
7d:cf:44:42:fe:dc:33:80:ed:e9:c0:29:75:ce:48:01:64:60:
d0:07:12:51:ff:90:0c:bb:62:19:0e:b1:0e:f1:14:5b:52:95:
d5:17:f6:36:99:11:82:80:d0:5d:af:17:99:56:d5:44:16:e9:
c6:61:93:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:54:03 2026 by rpki-client