Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
File: iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json)
Hash identifier: CN09DyvuJ0H2Oq+LO5HswGp/M8FLNwU+EIXsSrH8690=
Subject key identifier: 00:D2:32:6E:A8:76:C4:5D:A9:B0:96:D6:D3:77:47:9E:53:CC:E2:F5
Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
Certificate issuer: /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Certificate serial: 019D38D30AE244B919C2F2F9DFC994E9DD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
Manifest number: 1310
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: +8OUuZJH7BQT2maK5Biksszy1gnsOkFV2SYD/uEfnms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0a:e2:44:b9:19:c2:f2:f9:df:c9:94:e9:dd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=00d2326ea876c45da9b096d6d377479e53cce2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:2b:0b:6c:22:cf:4f:19:9d:d7:d9:5b:ac:
57:26:63:62:7c:c9:a5:a0:22:6c:fb:8e:57:12:d8:
35:62:07:c7:f6:80:b8:cd:ba:41:cb:44:99:03:95:
2b:2f:c3:64:a8:57:1b:9f:e9:38:f5:b2:c2:83:47:
81:60:be:f7:2b:64:d0:f4:a1:38:7e:5c:b5:f3:38:
37:b0:0c:08:b9:d9:1a:c9:64:b8:33:89:bc:db:ed:
0e:56:99:fc:b1:7d:d8:85:62:f9:9a:5c:62:ef:52:
6c:6c:68:b7:54:ae:8e:c0:1f:80:05:98:b3:5e:88:
0f:bc:98:40:aa:88:82:30:03:d9:c4:4a:46:19:ee:
5b:8d:e0:ef:01:de:4c:2e:ca:c4:c6:c7:2f:c5:4d:
89:0e:63:7a:6d:47:78:4e:a3:a1:a5:58:6e:59:e7:
a6:36:42:aa:06:37:63:0f:8b:12:4b:2d:58:3f:65:
cf:d7:e2:5c:45:ba:df:d1:14:33:e7:0f:fd:88:bf:
77:cd:0e:58:e3:f0:ce:1f:bf:e0:be:65:7c:2f:80:
72:f3:3e:03:39:b3:2f:47:ae:35:29:79:35:fe:57:
4e:a9:73:fe:5d:55:cc:af:2b:a9:25:5b:a9:de:54:
9f:8a:c4:c5:47:9a:58:e9:3e:56:61:21:61:e7:65:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D2:32:6E:A8:76:C4:5D:A9:B0:96:D6:D3:77:47:9E:53:CC:E2:F5
X509v3 Authority Key Identifier:
keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:30:45:64:58:a9:fa:31:56:12:02:67:49:e1:65:4e:f0:8f:
a5:e9:16:95:ce:26:f7:fb:f0:4b:b3:dd:9b:8e:2e:7e:b6:1b:
78:3c:43:21:be:8a:aa:b3:eb:d6:f4:33:4d:8d:07:d3:70:38:
dc:6c:4c:3b:f3:4c:46:05:0d:00:df:26:1e:5a:c3:06:00:5d:
fc:37:dd:7d:c4:1c:72:9f:45:5c:a1:de:97:19:2d:32:eb:b9:
20:d4:a5:86:8d:63:a8:4b:55:0b:0a:6c:e7:2e:e4:35:f3:5d:
3f:e4:a9:68:9e:ac:08:72:23:37:12:1f:52:1b:9c:74:46:e4:
7b:e9:ef:56:7e:a5:fb:2b:5c:9b:58:bd:cb:b5:44:20:e0:e5:
22:5c:b0:f2:6c:28:b6:a8:01:7c:2f:d9:06:b4:80:90:94:c1:
dc:d1:f3:eb:38:08:a6:6f:eb:70:17:20:74:ef:fc:92:00:06:
7e:81:06:60:53:3b:8c:d4:80:86:bb:9a:ff:a7:7e:db:ea:e3:
c2:2e:47:58:b1:32:15:d9:64:51:5e:a9:24:d3:da:ae:84:fc:
80:b6:36:fa:a5:16:e8:64:07:f3:3e:ab:82:a0:2f:95:24:ec:
a3:b2:b5:a2:51:68:98:51:23:f2:3f:ac:fa:8b:7c:7b:5f:1d:
58:d2:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:58 2026 by rpki-client