Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
File: IcABb7bLY4np0FbTkmLrRS-ZO9g.mft (raw, json)
Hash identifier: hGWMIAwUWl0LUjWBwk7aCdQXYY2jbpknhVTlka3VJ3s=
Subject key identifier: EB:91:30:FF:02:84:88:DF:82:54:09:D9:0F:E0:A7:7A:0D:01:88:7F
Authority key identifier: 21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8
Certificate issuer: /CN=21c0016fb6cb6389e9d056d39262eb452f993bd8
Certificate serial: 019D39AF42F48ED7EA3BC79F96D828C0596B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
Manifest number: 014B
Signing time: Sun 29 Mar 2026 13:01:20 +0000
Manifest this update: Sun 29 Mar 2026 13:01:20 +0000
Manifest next update: Mon 30 Mar 2026 13:01:20 +0000
Files and hashes: 1: IcABb7bLY4np0FbTkmLrRS-ZO9g.crl (hash: jBks+I4nuXZkFOt85grkTgttuonbpcBTSu2s4GuABiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:42:f4:8e:d7:ea:3b:c7:9f:96:d8:28:c0:59:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c0016fb6cb6389e9d056d39262eb452f993bd8
Validity
Not Before: Mar 29 13:01:20 2026 GMT
Not After : Mar 30 13:01:20 2026 GMT
Subject: CN=eb9130ff028488df825409d90fe0a77a0d01887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8b:8a:7c:5e:4c:e5:f8:b9:ca:0e:49:f6:5e:
95:dd:25:6c:67:69:a0:d3:42:69:8c:d7:0e:74:07:
d3:5d:46:31:9e:71:82:30:0e:27:b6:ae:e1:84:09:
65:a3:fb:20:2a:18:78:67:17:9d:db:de:6b:47:8c:
a7:34:1b:e9:25:f4:99:d1:49:de:44:84:c9:ef:61:
33:85:e6:eb:c3:e9:d5:2f:26:bc:31:d4:ba:a2:88:
be:e1:b1:61:3b:96:58:5a:f0:44:19:bb:2f:6c:87:
3c:65:5f:45:5e:36:4c:43:f4:44:a4:27:59:5b:54:
bb:64:5e:e8:5b:9a:ee:c6:9e:f7:36:96:e9:f6:a7:
a5:53:b3:76:41:86:e7:df:45:71:c2:91:1a:43:59:
6c:53:81:8d:34:9c:3d:a0:b5:db:ab:3b:fd:d0:0e:
d2:de:d1:38:1d:9e:ed:02:42:1d:63:fa:99:ca:6f:
68:4e:ea:08:9f:58:92:9b:58:cf:de:82:79:f8:64:
96:89:f8:68:f6:17:61:f9:62:7a:c3:10:32:58:17:
c2:3c:4e:f2:6e:6b:32:56:a0:7a:48:42:b9:30:c5:
b6:9a:69:e9:26:84:18:a5:c5:75:35:ba:4e:9e:8f:
4b:67:aa:73:e2:72:6a:52:26:10:9f:67:cc:00:81:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:91:30:FF:02:84:88:DF:82:54:09:D9:0F:E0:A7:7A:0D:01:88:7F
X509v3 Authority Key Identifier:
keyid:21:C0:01:6F:B6:CB:63:89:E9:D0:56:D3:92:62:EB:45:2F:99:3B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcABb7bLY4np0FbTkmLrRS-ZO9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2eb760-e94a-4ed0-85ff-74bf97c964df/1/IcABb7bLY4np0FbTkmLrRS-ZO9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bf:ae:16:52:8a:25:34:48:89:e7:5e:af:1e:e4:4d:b2:68:
5a:bb:33:3c:9a:d8:61:dd:e5:93:31:99:ca:3c:69:9f:00:34:
2c:d8:42:a4:7c:3f:cd:23:b1:48:0a:0a:bf:91:f4:4b:50:d8:
d7:3b:1a:5f:5f:47:04:f8:03:22:d5:61:48:96:6e:03:b2:f7:
e4:b7:92:8c:22:3a:4e:c8:1e:e6:15:e3:0a:94:95:04:61:50:
0b:23:e7:b2:3b:13:f9:da:7f:74:bc:62:dd:af:5d:8e:0a:4c:
9e:0a:b6:25:c2:57:92:af:c2:96:c3:56:7d:f3:28:b5:b3:de:
4e:73:ac:ef:88:3b:1c:9b:24:a4:c2:84:67:ab:55:05:20:06:
3e:44:18:a4:2b:5e:e1:a1:9c:6a:0c:50:a0:d7:9e:a7:ee:35:
bb:a3:be:55:52:80:ae:1d:b1:5d:c7:41:5c:5c:3b:89:34:50:
02:a8:2f:23:c7:80:eb:87:c7:ef:70:d8:06:bc:56:27:80:32:
e5:e8:10:32:27:c0:7f:e3:b1:e7:5a:67:b6:22:d3:5c:3c:87:
67:2e:3a:37:6e:98:dd:e0:d2:70:10:01:81:66:f4:d2:83:ce:
a3:bb:32:b8:c7:9f:a6:4e:e7:21:79:0f:ca:de:a6:c9:d5:25:
d9:4e:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:28 2026 by rpki-client