Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
File: I-VNMniWj26JlDXq-hVwlnX20DA.mft (raw, json)
Hash identifier: dyAj7NQqRoyNxNAVQZ+mDNi/7K6PPMCYQvF3y9Z3XDo=
Subject key identifier: 89:BF:56:6D:F8:4F:E5:CD:86:96:25:6E:4F:E1:A9:33:CC:07:FA:51
Authority key identifier: 23:E5:4D:32:78:96:8F:6E:89:94:35:EA:FA:15:70:96:75:F6:D0:30
Certificate issuer: /CN=23e54d3278968f6e899435eafa15709675f6d030
Certificate serial: 019D390A50EEEC7D73B4027FE78124E048A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
Manifest number: 01C8
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: I-VNMniWj26JlDXq-hVwlnX20DA.crl (hash: yPvihlkiSHeSQHSdNrmEr9632hm6BtkK6E1B4h7dO6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:50:ee:ec:7d:73:b4:02:7f:e7:81:24:e0:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e54d3278968f6e899435eafa15709675f6d030
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=89bf566df84fe5cd8696256e4fe1a933cc07fa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:72:ae:2a:79:f4:85:58:b4:98:12:a6:4e:
c7:0f:0b:01:b4:c8:f4:93:29:ce:1b:79:f6:eb:11:
13:b8:35:0e:b6:c5:f8:e0:73:ca:ae:d1:73:3c:4e:
4b:5c:ed:08:38:48:fd:f9:2a:da:72:a8:7e:ef:d0:
8f:20:06:fd:41:9e:d2:4a:3e:28:0b:9f:8c:18:9e:
70:bb:c8:71:cd:1a:ea:44:95:93:2e:f7:6a:37:55:
d9:94:6c:22:d7:76:ed:9b:11:f7:25:91:41:1b:4c:
0b:6b:2c:4c:df:ec:d6:26:cb:c3:aa:30:bd:06:ad:
4a:d9:60:17:d3:3d:c6:b3:8f:92:6e:c1:bc:9c:c1:
f3:ff:1f:20:55:4e:a0:d3:94:57:d0:b0:ec:c5:6b:
b4:a2:13:90:7d:81:b6:f2:e4:13:66:f2:37:81:b4:
6b:a9:a3:6b:0a:9b:f8:b7:1a:ac:4b:7a:2b:e9:b5:
bd:d9:46:43:6b:3b:29:ae:e5:96:56:fd:b4:90:d5:
56:0d:87:36:38:94:1a:ba:f2:3a:92:98:20:05:06:
8b:11:56:6c:21:70:1b:f6:2c:12:33:05:13:7a:8d:
6e:58:38:10:54:b4:c9:8c:68:0d:4b:25:7a:dc:46:
56:50:51:64:3b:03:69:36:6f:f1:e3:92:45:1b:a1:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:56:6D:F8:4F:E5:CD:86:96:25:6E:4F:E1:A9:33:CC:07:FA:51
X509v3 Authority Key Identifier:
keyid:23:E5:4D:32:78:96:8F:6E:89:94:35:EA:FA:15:70:96:75:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ef:5b:6e:bb:0f:28:2a:ec:17:c1:5c:0f:b7:d0:f8:f3:1d:
d8:40:46:8c:bd:c5:77:88:91:7e:93:9c:d0:53:ce:46:e4:25:
a1:2e:3b:9b:fe:1b:20:b2:ff:12:9e:51:95:90:f0:5a:cd:ca:
3d:76:e2:5a:5c:b7:4a:6e:c4:cf:1b:e6:19:a6:bd:6c:b1:97:
fc:3f:a7:51:e0:aa:42:89:d5:cc:49:cb:27:b3:6d:7d:90:8a:
4e:29:82:6a:ca:ec:70:3c:45:04:fc:c6:2c:95:34:e1:30:b6:
d1:40:50:d6:c6:4f:3a:10:ce:57:83:cb:3f:fc:72:9c:05:45:
f8:e9:25:3f:01:ee:fe:cd:1d:47:4e:e3:b5:41:00:e1:38:31:
38:03:66:0e:74:48:f8:22:55:03:72:35:fd:4c:74:fd:ab:25:
c4:da:c8:d8:1a:07:c6:04:ca:83:71:28:d1:f9:a6:41:bb:40:
63:07:4a:98:bc:b9:42:41:8f:b8:00:4e:3c:b8:d4:a1:3b:42:
cc:03:dd:78:16:39:01:5b:86:a3:26:fa:a5:13:a8:ce:37:29:
f5:f1:a7:fd:76:a9:a8:bd:cd:85:ea:8a:b0:8f:eb:fa:c2:f9:
46:02:05:8e:74:7b:ae:af:31:ba:7e:8f:8b:88:ac:1a:c4:d8:
d2:c8:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:02 2026 by rpki-client