Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: S6IJNWy7MY91kMcUP/JGQqppGKc1rt+gebmzOyjL1bI=
Subject key identifier: 7A:78:72:16:16:5B:2D:0B:5D:46:D5:1B:0A:97:1A:B1:95:EC:A4:D0
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 019D3940EB67A8B0DC0AF7844D9CD19CE8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 16BC
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: 3Wi4Pheak3sH/wA3Cj/IgC9/dhDKkOrVqTx8J/6uy/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:eb:67:a8:b0:dc:0a:f7:84:4d:9c:d1:9c:e8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=7a787216165b2d0b5d46d51b0a971ab195eca4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:a2:b7:18:da:6f:ab:c5:7a:af:1c:a6:ef:
1a:b0:b4:4e:0b:81:d2:59:33:2d:80:1a:9e:e1:82:
c3:70:32:ea:68:64:5d:59:49:c8:58:12:9c:9f:44:
bc:d0:1a:96:d6:b1:b3:91:ae:8e:65:8d:51:66:ad:
5d:10:5a:58:8b:55:a7:a6:82:ad:2b:13:0f:c1:fa:
dd:de:3e:be:4a:07:fb:cf:5e:48:ba:a0:8a:99:39:
ef:ad:2c:d9:a4:61:db:49:a2:28:d5:a1:1b:df:c9:
36:4a:e3:21:12:40:f4:72:5a:a4:10:2a:63:f6:50:
67:6a:b0:bb:ec:72:bf:a8:17:56:80:eb:12:f5:75:
10:ff:5d:12:64:5d:2d:9b:d1:c9:12:e0:20:75:e1:
b4:78:f4:80:e5:3e:7f:b4:b0:90:99:00:6f:6b:26:
31:3d:f2:dd:2a:04:50:2e:2b:35:32:2c:10:e2:b6:
cb:11:a6:53:06:d7:bc:61:6d:86:5d:a6:74:63:2d:
88:04:50:08:44:cb:ab:84:41:ac:a8:fb:d2:cd:7e:
02:3a:d8:ea:91:92:5e:d9:3a:70:2d:02:6f:83:3a:
aa:08:89:e6:07:28:91:7d:1f:fb:8e:ed:3e:62:43:
db:ab:ef:65:00:85:5e:c6:64:87:84:b7:fd:d8:81:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:72:16:16:5B:2D:0B:5D:46:D5:1B:0A:97:1A:B1:95:EC:A4:D0
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:de:33:01:fa:0f:e5:fd:44:c7:ce:bc:94:ef:c2:09:0c:0e:
4e:32:b1:ac:6e:7e:00:b8:af:a5:83:e3:d3:a0:53:52:d3:18:
ad:ff:67:31:19:51:e2:45:5b:e1:1a:87:24:b9:67:9d:32:60:
11:ef:96:08:12:35:7f:cb:55:5e:95:d5:d1:07:d9:9c:67:93:
42:cd:c4:00:c7:e4:cd:5d:a4:51:32:28:97:c0:86:2f:2c:cf:
1f:ce:aa:7d:84:ae:a6:31:94:ab:f8:e4:cc:ef:a4:e6:d1:ac:
d2:dd:73:ee:88:c6:8a:e8:a0:9f:91:c3:80:47:a1:29:e4:74:
24:47:a7:8f:c0:63:82:52:23:9c:df:eb:e9:af:cf:82:a6:90:
e7:aa:93:01:05:60:a2:1b:40:5e:d4:9c:ef:e9:ac:c0:ca:46:
bb:45:06:f9:7e:82:f8:2f:18:37:02:ae:24:ac:15:6d:20:44:
23:30:06:17:b9:94:d4:3d:0b:85:0a:dc:c6:ef:33:04:24:6f:
76:69:61:98:36:92:1f:91:5a:65:c0:f9:14:b0:60:15:d8:78:
ff:6d:e1:a7:ec:82:3a:1d:72:57:e7:1f:f6:2c:3b:28:cf:3b:
2f:09:e7:05:dc:d4:ed:5d:d4:8b:78:fd:36:50:96:bf:cd:03:
81:4d:37:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:36 2026 by rpki-client