Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: gxuW6+Tp/a9tUXLu0Gn6Id72HWaXxeKGse74Ab1HxwM=
Subject key identifier: 4E:50:E0:51:E2:36:95:33:FC:C1:92:B3:CD:7E:35:E2:F8:AE:13:E2
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 019D37C0BADF482ECDD2843EB1A38AAE64EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 0490
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: 3Wc8NdntJJzqqFvEZwn40QiDd9rIwjkpdsbF8UELtps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ba:df:48:2e:cd:d2:84:3e:b1:a3:8a:ae:64:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=4e50e051e2369533fcc192b3cd7e35e2f8ae13e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:2d:89:b5:ec:69:88:a5:67:b8:a1:4f:b6:
b8:b1:21:49:58:41:4a:e4:76:fd:d5:87:63:e9:37:
e4:22:2f:33:13:5e:42:97:13:55:a7:63:f8:46:0b:
50:9f:7e:4d:6b:9c:fb:3b:4d:6d:2d:ef:85:40:d6:
b2:96:ac:a7:20:e2:66:0e:27:f8:b5:c6:e3:36:68:
b5:08:27:fa:75:12:39:71:f4:d3:81:45:6c:e4:ce:
38:bc:32:e1:ab:42:29:7e:1a:d8:23:ab:69:39:8a:
8d:5a:5a:aa:ff:f7:61:70:37:34:a1:af:12:ed:e5:
bb:57:23:3b:b2:df:47:de:d8:48:55:f4:52:b4:54:
91:88:a8:97:e0:c6:b5:e1:f7:44:38:56:89:5f:8e:
9e:0a:31:79:9c:16:06:79:23:19:0d:d2:59:a4:ad:
ee:f0:51:f5:33:6a:31:a6:24:28:6c:c6:ec:37:06:
3b:cb:9e:2e:38:da:f9:76:e0:86:e1:b3:08:09:d0:
bb:39:fe:62:6d:36:20:e7:b9:af:28:6a:16:8e:55:
2a:31:89:6e:8b:d3:c7:17:a8:84:fc:eb:f6:89:05:
97:dd:ca:55:64:59:71:b6:25:37:d9:f2:fc:d7:d7:
05:ed:c7:bb:12:aa:d7:b8:f5:82:fc:59:42:94:6f:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:E0:51:E2:36:95:33:FC:C1:92:B3:CD:7E:35:E2:F8:AE:13:E2
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9f:ab:32:7b:a3:4e:5d:3c:4d:09:f4:d8:00:d9:46:f8:fe:
2c:15:34:74:85:4d:a1:36:75:09:e2:98:d8:39:ed:4b:11:3b:
8e:55:2c:f6:89:35:70:b4:39:f3:77:c7:71:19:e5:fa:49:a2:
8d:01:f8:89:64:78:1e:ae:01:b4:f3:cd:fc:ec:a2:53:c1:e0:
e5:87:46:69:84:60:56:76:8e:ef:1a:14:04:c6:37:77:74:86:
6c:85:b4:da:c8:b4:e8:fe:2b:05:d5:6e:a0:a9:10:6d:70:05:
df:3a:ab:14:60:05:2c:28:c6:6b:8f:8c:6b:f7:1a:f9:8c:ff:
a6:c2:73:49:0a:c8:ad:1a:06:3f:85:f4:00:dc:ad:20:5e:25:
3d:96:f5:ba:3a:60:07:b6:96:5b:bd:41:fd:d0:cb:ee:28:ca:
c0:4d:04:f1:e0:0e:f0:ab:c0:83:97:03:08:9e:3b:cb:73:e6:
5e:de:79:5a:a1:77:71:b9:c9:d5:82:8c:f9:c2:4d:e4:08:73:
e6:a1:f3:dc:56:7a:13:09:a6:2b:1e:5a:b6:83:29:96:77:42:
23:90:d7:0c:21:92:29:9c:8b:5e:15:b4:a5:92:e9:95:00:cb:
a9:e7:29:f8:4a:b7:30:ba:e4:65:cf:0c:9f:4b:8d:23:0e:6a:
aa:b4:48:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLrfSC7N0oQ+saOKrmTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx
YmE3YzQwHhcNMjYwMzI5MDQwMTEwWhcNMjYwMzMwMDQwMTEwWjAzMTEwLwYDVQQD
Eyg0ZTUwZTA1MWUyMzY5NTMzZmNjMTkyYjNjZDdlMzVlMmY4YWUxM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMgtibXsaYilZ7ihT7a4sSFJWEFK
5Hb91Ydj6TfkIi8zE15ClxNVp2P4RgtQn35Na5z7O01tLe+FQNaylqynIOJmDif4
tcbjNmi1CCf6dRI5cfTTgUVs5M44vDLhq0IpfhrYI6tpOYqNWlqq//dhcDc0oa8S
7eW7VyM7st9H3thIVfRStFSRiKiX4Ma14fdEOFaJX46eCjF5nBYGeSMZDdJZpK3u
8FH1M2oxpiQobMbsNwY7y54uONr5duCG4bMICdC7Of5ibTYg57mvKGoWjlUqMYlu
i9PHF6iE/Ov2iQWX3cpVZFlxtiU32fL819cF7ce7EqrXuPWC/FlClG+DnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5Q4FHiNpUz/MGSs81+NeL4rhPiMB8GA1UdIwQY
MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt
OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1
LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZ+rMnuj
Tl08TQn02ADZRvj+LBU0dIVNoTZ1CeKY2DntSxE7jlUs9ok1cLQ583fHcRnl+kmi
jQH4iWR4Hq4BtPPN/OyiU8Hg5YdGaYRgVnaO7xoUBMY3d3SGbIW02si06P4rBdVu
oKkQbXAF3zqrFGAFLCjGa4+Ma/ca+Yz/psJzSQrIrRoGP4X0ANytIF4lPZb1ujpg
B7aWW71B/dDL7ijKwE0E8eAO8KvAg5cDCJ47y3PmXt55WqF3cbnJ1YKM+cJN5Ahz
5qHz3FZ6EwmmKx5atoMplndCI5DXDCGSKZyLXhW0pZLplQDLqecp+Eq3MLrkZc8M
n0uNIw5qqrRIuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:28 2026 by rpki-client