Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
File: itC83pWbIDJiNJG_MnmtRanKC-g.mft (raw, json)
Hash identifier: unZ9fc+NZkX5EOXnTx1EM+zuFgjxHgH020Tdgv0fb58=
Subject key identifier: 4B:76:D7:42:5E:C3:28:DD:7A:9D:7F:79:D4:32:26:A3:AD:0A:E1:6C
Authority key identifier: 8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
Certificate issuer: /CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Certificate serial: 019D37898727536EC80ADC25F46ECBA2CAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
Manifest number: 032F
Signing time: Sun 29 Mar 2026 03:00:53 +0000
Manifest this update: Sun 29 Mar 2026 03:00:53 +0000
Manifest next update: Mon 30 Mar 2026 03:00:53 +0000
Files and hashes: 1: itC83pWbIDJiNJG_MnmtRanKC-g.crl (hash: WqG3RyQ6+oga81OWpPvDviHjLeow0hI87qhBZuZmay0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:87:27:53:6e:c8:0a:dc:25:f4:6e:cb:a2:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Validity
Not Before: Mar 29 03:00:53 2026 GMT
Not After : Mar 30 03:00:53 2026 GMT
Subject: CN=4b76d7425ec328dd7a9d7f79d43226a3ad0ae16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:54:21:76:b6:3e:9a:09:66:39:d1:60:97:
13:81:11:f4:02:8a:02:2f:11:8c:fa:28:df:16:34:
2a:1f:b7:4b:f7:48:11:e1:36:20:9b:2e:91:72:6b:
7e:35:e1:06:85:33:8b:26:41:eb:53:2a:67:82:e3:
73:02:d3:ab:4e:ed:24:64:7c:01:dc:23:f2:b6:34:
03:02:87:52:66:81:63:d5:a3:3f:b3:42:b2:c1:a7:
b1:85:39:84:19:8e:dd:46:09:15:98:70:49:36:23:
43:d9:05:7f:5c:8e:57:d9:da:db:c8:d7:06:6f:e5:
2c:f4:4c:ba:90:cc:f4:f5:7b:96:e2:6e:b9:66:b2:
58:bb:d4:b7:be:aa:4b:16:61:82:0d:33:45:37:b1:
ec:42:f7:93:82:ed:61:2b:3d:97:cb:07:85:88:ad:
e7:80:6b:a2:bb:9a:a6:8c:0d:c1:e2:15:69:25:77:
5e:3a:ac:94:ff:25:82:16:ac:af:98:07:d4:ed:0d:
90:a9:d5:ff:66:d9:66:87:89:51:b2:78:96:a4:38:
72:24:1d:a0:ba:0d:dc:3a:d6:e4:4a:d0:1d:bc:29:
00:47:13:87:6d:b8:03:43:6e:13:b0:96:12:78:4e:
02:18:25:0f:e5:9b:eb:43:a6:59:66:f8:f0:cc:e7:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:76:D7:42:5E:C3:28:DD:7A:9D:7F:79:D4:32:26:A3:AD:0A:E1:6C
X509v3 Authority Key Identifier:
keyid:8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:60:21:c7:a7:75:1d:06:ce:67:e5:d8:7c:41:d4:46:e1:eb:
7f:1d:a4:f7:c6:fc:67:0a:41:fd:64:a6:e6:a7:dc:86:ed:27:
b4:26:8e:66:57:47:71:f3:9c:86:e1:45:79:c9:84:cb:ae:e7:
50:a6:07:29:86:7e:e5:71:5c:c0:35:af:9f:f2:63:a4:33:c9:
5d:b4:aa:d6:c0:01:ed:69:ad:52:66:ae:03:bb:cc:95:68:33:
af:04:90:e6:51:6f:25:46:86:87:98:e2:19:fe:49:77:f0:54:
eb:f9:08:1c:b2:d4:27:17:b2:39:ce:b7:86:df:6c:06:ae:72:
34:30:40:5f:05:ec:9c:57:f9:e0:7d:6b:81:b3:c1:5f:d1:bc:
0b:b9:ee:5d:1f:ed:61:dd:e2:a1:4e:d4:84:d6:c1:4d:0d:1d:
4c:56:4f:32:3a:b5:ce:f0:6c:cf:6f:31:6c:be:fe:4a:33:32:
49:34:52:9a:44:1a:41:07:1a:83:1c:98:c0:b6:19:1d:c8:7c:
2f:cf:c0:fd:24:64:2f:11:5c:98:84:a3:59:62:17:7d:9e:f3:
fc:91:fe:32:fb:04:93:ab:f1:fa:86:2c:01:91:2e:81:9b:3d:
c1:0e:75:0b:52:e0:32:95:5b:da:e2:4e:7f:78:14:51:76:72:
59:b2:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:25 2026 by rpki-client