Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: rjcoZi3tDhoJM5lIiBcXFBQhycK2WFpbcxcfb91KgIQ=
Subject key identifier: 49:40:3C:3A:E7:FE:5D:E1:31:30:E4:6D:48:D0:2C:EA:FA:CF:FB:3B
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 019D37F6E7307D7EF7CB15CD67AAD2CEC8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: 032A
Signing time: Sun 29 Mar 2026 05:00:21 +0000
Manifest this update: Sun 29 Mar 2026 05:00:21 +0000
Manifest next update: Mon 30 Mar 2026 05:00:21 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: +9Mv76d4bFg6xiGTRB1z7nKK2Ce5l2z2eCNwJ5kw29M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e7:30:7d:7e:f7:cb:15:cd:67:aa:d2:ce:c8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Mar 29 05:00:21 2026 GMT
Not After : Mar 30 05:00:21 2026 GMT
Subject: CN=49403c3ae7fe5de13130e46d48d02ceafacffb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:f3:46:dc:e2:41:9c:8a:3f:2e:5a:aa:e7:
47:cf:b3:c8:aa:f2:40:09:58:87:43:7d:74:84:75:
12:ef:4b:82:91:bb:49:49:ba:42:04:59:cf:2a:0f:
fd:1d:b7:87:2a:9c:6d:1a:fc:5e:ea:8c:68:99:65:
05:c4:f1:ac:ec:26:ae:8c:ca:9d:c1:79:65:df:00:
7d:70:c1:a1:2d:54:e4:bd:e4:2b:0d:4f:47:e4:05:
ac:78:30:e4:66:e6:f9:61:da:e2:d8:84:db:80:0e:
57:07:3b:cb:94:31:87:88:b2:1c:75:2d:03:22:c3:
36:a7:08:74:e5:11:c1:68:c1:88:1d:b9:90:02:03:
03:0d:67:46:0b:2c:95:68:29:73:a6:be:e9:95:97:
5c:f3:e1:c3:1f:62:72:d2:02:c3:d5:1e:04:b4:8d:
90:3a:5a:76:68:83:a6:e9:12:42:06:dd:ed:0c:63:
bf:41:48:c9:75:40:e4:20:30:f1:3f:1e:f6:6d:3b:
b1:c3:3a:be:a0:ce:d3:69:0f:be:78:56:b4:4d:99:
ed:e9:82:d3:94:cd:fc:0b:77:25:61:79:f8:68:a4:
7e:0a:0c:b1:83:a1:ae:36:03:8b:de:cf:5b:10:39:
05:73:6b:1c:bb:75:e5:15:e7:b0:c5:1b:7d:3e:41:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:40:3C:3A:E7:FE:5D:E1:31:30:E4:6D:48:D0:2C:EA:FA:CF:FB:3B
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a5:fd:49:ff:2b:c1:be:21:39:90:3b:30:31:44:fa:d0:cc:
ce:1d:3a:23:f0:91:2f:58:3b:51:51:15:71:ee:e0:1f:0b:e8:
03:a8:49:13:ba:6d:9d:f8:45:fd:90:e6:a0:15:e9:40:43:15:
23:00:fe:08:33:ca:57:ca:ec:4a:55:89:88:87:60:14:0e:57:
44:f7:0d:75:06:e5:0d:e6:e0:52:90:85:eb:d9:f5:0c:b2:20:
71:ec:be:e1:ea:77:e2:a6:1d:b5:22:fa:fb:d4:ea:ab:07:6a:
84:1e:6e:13:6a:d7:54:a2:f5:56:ec:01:df:04:a2:3e:5d:e7:
1a:e8:17:be:e3:93:a6:70:04:bd:6f:c3:9a:ca:c6:af:c9:ea:
a3:d4:9b:72:9b:74:10:83:11:d0:62:87:ff:3d:71:0d:b6:ee:
51:49:db:0f:21:9e:79:08:5c:c3:c6:63:58:20:cc:f9:33:31:
a6:0c:53:54:c6:64:73:a5:f0:aa:67:73:ca:f5:b9:80:bb:e5:
49:bc:97:af:2f:6b:e8:5e:36:5c:54:29:12:f8:bb:f9:4b:9f:
9e:3f:70:0e:cc:e3:95:b2:a8:cd:e6:f1:7f:51:fe:c1:dd:8b:
e7:e2:8b:af:dc:1d:db:d0:f5:22:f8:b8:78:2b:d0:a5:07:1f:
68:1c:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:36 2026 by rpki-client