Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: DLLsREkkA8qEbBqmWCRHQFBtofDn005sIJREsFH535A=
Subject key identifier: 8E:21:87:04:81:7D:4E:71:0F:9E:07:F6:89:A1:87:FF:56:74:D6:BD
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 019D386550B148363DB9037C4EB14AF10634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:00:56 +0000
Manifest this update: Sun 29 Mar 2026 07:00:56 +0000
Manifest next update: Mon 30 Mar 2026 07:00:56 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: IwE8VH7n0fTxPdMpmE75NW00XmocHvfIcXmUA6cWMeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:50:b1:48:36:3d:b9:03:7c:4e:b1:4a:f1:06:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Mar 29 07:00:56 2026 GMT
Not After : Mar 30 07:00:56 2026 GMT
Subject: CN=8e218704817d4e710f9e07f689a187ff5674d6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:e7:c3:96:0a:a5:7b:04:76:68:bb:ef:cb:
6d:9f:41:a8:db:97:b9:e1:f6:d1:24:05:e8:5a:19:
25:93:3e:e2:64:cc:cd:9b:5f:34:64:02:e3:8c:71:
7e:b5:99:7d:d9:00:01:4b:ad:88:6e:06:92:42:62:
7d:fc:0a:a2:ee:61:83:46:98:2f:4c:0c:25:7b:35:
1f:9d:db:91:b1:1a:5d:bb:26:0f:cb:38:68:84:9f:
26:1a:93:da:38:24:f7:c8:e6:89:9f:3d:a2:7f:5b:
40:5e:37:1d:09:bc:76:cf:f1:87:24:2a:ce:4c:ef:
84:3c:59:16:48:ff:ec:da:c5:3b:74:90:ac:20:74:
4f:95:03:15:48:aa:b4:59:98:85:cd:5f:18:c1:9f:
8b:bf:b3:28:6b:37:5d:7e:db:98:a9:8e:94:fd:11:
26:58:6d:5d:89:a4:75:96:99:fb:4b:b5:bf:ff:2a:
2b:f2:45:2f:62:fa:d9:eb:76:9f:8b:37:c2:0d:d5:
25:0d:49:c9:fe:4d:04:30:06:f8:de:ff:6a:82:eb:
38:8a:83:f3:35:06:dd:23:c8:0f:e8:6a:0e:96:d8:
17:c3:4b:f7:56:4b:89:a3:3e:81:08:8c:a5:6d:a3:
e3:43:13:d5:bc:8b:32:19:a3:65:b3:a5:92:e3:db:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:21:87:04:81:7D:4E:71:0F:9E:07:F6:89:A1:87:FF:56:74:D6:BD
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:66:7e:8c:8c:0f:e8:b5:48:5c:68:a1:c3:cc:b0:14:e8:c2:
d8:d7:ad:e7:37:b8:0e:24:2f:73:e0:f2:f4:17:14:44:50:81:
06:79:f9:bb:f3:b3:a4:bf:8e:db:8f:3a:df:fa:a5:a3:56:1f:
55:9b:06:ac:3d:79:3b:e5:f8:c4:64:3f:d1:52:1e:95:93:3c:
db:e4:ec:7c:47:26:6b:a6:1b:04:f3:1e:53:64:eb:79:cf:cf:
81:99:e7:9b:87:d8:18:6d:a5:04:1d:ad:df:cd:82:06:ca:f3:
b1:46:95:76:b9:23:00:c9:76:bd:39:21:a3:43:b1:17:4c:cc:
d0:43:19:a4:d8:c2:7a:17:94:82:ba:ff:95:05:98:04:1e:4e:
30:a6:81:ef:ff:26:6a:0c:e0:58:97:cc:72:b5:78:47:1e:4f:
7e:93:8e:e2:4f:bd:69:5a:01:90:83:68:94:92:f9:e8:db:5e:
0d:b6:e4:37:02:93:d2:ef:94:bd:cc:8e:ab:c3:91:93:32:82:
fb:a4:26:e1:f7:d8:31:4a:47:27:46:e2:79:8d:d4:ee:ac:db:
e9:d9:9c:26:55:9d:33:5a:ba:11:87:e5:ec:62:0e:97:a1:d8:
12:b6:6e:4c:27:a1:7d:2c:95:46:14:ea:c0:78:f2:de:ce:4f:
f9:09:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:12 2026 by rpki-client