Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
File: iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json)
Hash identifier: P37HPJ7kB2CwqBszF435+LReiRkbTDf3klG2LIN2Gp0=
Subject key identifier: F2:C1:D0:45:A6:64:10:D4:71:AB:3A:96:85:56:57:34:BE:B5:5B:C7
Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
Certificate issuer: /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Certificate serial: 01A08A8C0AD6A16A6271AF43F0B693CB3F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
Manifest number: 14C8
Signing time: Thu 10 Sep 2026 09:00:28 +0000
Manifest this update: Thu 10 Sep 2026 09:00:28 +0000
Manifest next update: Fri 11 Sep 2026 09:00:28 +0000
Files and hashes: 1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: /j+aAwh2ivU45zAT+H11tNaqczbN9CSugeuANjYFnUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:0a:d6:a1:6a:62:71:af:43:f0:b6:93:cb:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Validity
Not Before: Sep 10 09:00:28 2026 GMT
Not After : Sep 11 09:00:28 2026 GMT
Subject: CN=f2c1d045a66410d471ab3a9685565734beb55bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:03:cc:37:3e:9b:cb:da:c9:e3:1c:2f:45:
6d:15:3c:23:3c:69:bb:dd:8f:b3:ef:73:1a:25:0b:
e6:8c:ca:46:f7:b6:ac:e7:21:12:bd:c0:39:e1:63:
e0:f3:17:fb:65:8d:c6:77:48:95:f4:83:19:76:43:
41:e6:6f:8f:c5:5a:8d:5b:98:c8:77:32:23:14:ce:
08:de:da:5a:70:d6:68:aa:e1:c1:94:c4:7d:fa:12:
f6:5d:82:13:a8:59:a1:3e:6a:f0:5b:41:7d:7d:1b:
db:b9:7f:fd:cb:7f:d0:55:00:65:4c:ca:a9:75:32:
a6:a3:1f:6e:0c:ba:22:4d:d4:3d:cf:47:81:a2:ba:
c6:f1:94:08:03:d1:a5:ed:c4:72:0f:da:39:d3:de:
33:51:39:67:eb:e1:ad:3d:00:59:f9:66:b1:71:3a:
63:6e:62:d6:1a:0b:90:f3:63:fa:4d:90:ae:28:1b:
a3:75:71:10:a7:d9:02:7d:a3:03:ec:e9:c7:13:3a:
a4:4f:91:56:2a:59:4f:aa:b3:b5:4e:62:39:28:73:
8f:fe:79:ef:ba:02:1d:d6:d4:6e:4c:66:a1:dc:5c:
12:7e:26:d7:d9:19:af:ce:cd:56:76:57:1f:d5:9e:
5e:65:d0:1b:46:fa:d1:eb:f2:53:b8:7b:b8:63:ab:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C1:D0:45:A6:64:10:D4:71:AB:3A:96:85:56:57:34:BE:B5:5B:C7
X509v3 Authority Key Identifier:
keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a3:f9:30:b8:ae:6b:8a:7a:93:29:ec:54:87:7b:7f:f4:63:
b9:ca:3e:36:3a:a2:e5:50:1b:97:ad:98:04:af:c5:eb:46:64:
92:e8:a0:5d:0a:f3:fe:af:fc:72:7b:e6:fd:bf:56:7a:4e:94:
e1:37:84:d3:c8:50:60:a0:fd:7d:67:18:fc:d1:92:8b:f2:65:
c9:6d:f0:40:5b:f2:8f:b5:f9:ed:cd:56:8f:3b:5c:40:59:3e:
62:5b:c8:62:c7:b7:3e:43:e9:55:c3:35:8d:84:09:62:8f:e8:
80:95:79:af:49:23:6a:d0:4e:fd:cf:ac:82:50:1f:31:bf:84:
4c:2f:21:79:11:2c:3a:29:eb:3c:b6:bb:b8:57:fd:cd:ad:cf:
b8:59:86:be:8a:dd:c0:78:55:50:cb:89:b0:39:45:50:91:33:
0e:ad:ff:d1:12:0b:4c:e7:82:97:bf:a9:d8:ef:30:4a:94:a8:
38:f1:7e:73:f2:fd:3d:94:9c:43:13:af:c4:d7:88:c4:75:e9:
52:09:02:15:e7:25:7a:c5:16:16:6c:9e:f6:8d:e0:14:21:d0:
0d:27:39:5b:78:a4:44:6e:a3:ce:8d:41:ca:dc:65:09:8a:d2:
c4:20:f6:0b:8c:e7:08:bb:c5:e2:7a:cd:d6:70:34:e3:27:f8:
c1:ce:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:08:33 2026 by rpki-client