Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
File: _izVtrb_hGG7l5eGHJuBZ2oHU6o.mft (raw, json)
Hash identifier: fBdEm3igXgTTDbUeAO2mpq+8r4V9c2Dy05nQJxrkuM0=
Subject key identifier: 4C:6D:60:82:A4:62:3B:31:D7:B9:9F:F2:54:F0:E7:F0:86:77:CE:01
Authority key identifier: FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
Certificate issuer: /CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Certificate serial: 019D389C523624AD6742126ED302B154B475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
Manifest number: 084B
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: _izVtrb_hGG7l5eGHJuBZ2oHU6o.crl (hash: 687eTsaQ+PCnOcEZ56PBAKonLD8nendIivZzXndmaVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:52:36:24:ad:67:42:12:6e:d3:02:b1:54:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=4c6d6082a4623b31d7b99ff254f0e7f08677ce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:6e:2c:52:6a:9d:c4:18:05:31:22:a8:55:
9b:c3:cc:46:f6:2b:8a:f3:ad:e4:5f:b5:b4:0b:8b:
28:87:91:7a:f3:90:98:81:43:6a:58:2c:77:cc:18:
25:bd:f9:44:57:02:dc:77:b9:1e:53:5e:10:bf:a3:
f9:5f:d2:1c:63:a0:19:a9:a7:1a:a4:78:47:b9:3f:
ea:25:e9:4d:5b:ff:6d:29:a9:f1:ba:bf:cd:67:4d:
26:ea:54:fa:08:c4:33:03:6a:77:ab:2c:bc:7d:0c:
39:a0:67:aa:a9:1f:cc:f8:28:bf:d0:bf:0e:f2:50:
2b:02:b3:52:c3:be:8c:24:78:6c:29:5b:3f:4a:58:
a3:73:8c:0d:2f:41:ed:81:3e:96:8a:61:dc:3c:7c:
46:9e:12:4b:2e:73:17:53:9e:3b:17:e9:14:9e:54:
74:da:97:ee:34:cd:45:85:e4:95:5f:45:53:dc:72:
03:46:7a:a8:9d:88:fd:0c:29:9f:2d:06:4f:84:32:
d5:e3:f7:c2:3c:bd:38:78:69:00:b5:bf:64:3b:78:
c0:2c:5f:d5:64:65:d4:59:60:40:13:00:cd:38:88:
04:ab:2a:13:85:dc:52:ea:e2:f6:a7:06:ea:b0:21:
d9:2a:0c:e6:75:02:97:00:66:df:a2:cc:21:0a:a5:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6D:60:82:A4:62:3B:31:D7:B9:9F:F2:54:F0:E7:F0:86:77:CE:01
X509v3 Authority Key Identifier:
keyid:FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a2:76:05:6c:a8:a8:60:a4:7d:9d:cb:20:70:5b:4e:cd:c0:
45:67:04:90:94:4a:a0:8e:ea:3b:e1:98:cd:14:4c:b6:0d:af:
e4:1a:d1:9e:23:e0:3c:bb:ff:ac:dc:b4:9e:f8:e9:e1:7b:b0:
4b:82:b8:47:13:a9:de:15:f5:7a:79:ca:60:ef:9e:df:de:bf:
31:50:8a:96:f5:11:cc:7c:58:84:4b:9d:26:13:a1:a8:62:4b:
3e:7c:1e:7a:87:ca:9c:65:32:dc:ca:2e:db:39:34:8e:e3:89:
f8:21:73:07:41:2f:d1:e7:cd:35:80:ef:1e:61:99:79:58:1e:
ce:ac:c2:2e:4c:28:53:61:d0:2f:31:6f:b3:82:37:5d:69:3c:
ef:d3:ea:b4:aa:a4:a6:a4:6f:82:4d:8c:ba:96:86:c6:25:7b:
5e:e1:49:ee:f0:d0:47:de:79:04:24:9f:e3:e6:07:e8:52:b5:
d9:e2:7f:c5:24:da:4b:5b:74:0c:b3:13:dd:ed:6c:85:b9:65:
15:d5:81:2d:f9:da:19:65:97:04:8d:d5:34:13:c3:5f:3f:93:
50:2c:62:ce:4a:6e:e7:4f:a1:85:a5:f7:11:00:0a:79:b5:ba:
5d:5d:94:72:a8:3d:51:93:0c:70:47:bb:b4:92:d7:16:14:a6:
26:d4:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:53 2026 by rpki-client