Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: kNOlIQt+JTBOUslBW4iVnFoWOU3BiiFJSZRZC0TjB7g=
Subject key identifier: 79:44:6C:09:47:F6:49:EF:AF:32:48:50:44:35:02:98:00:8E:B7:46
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 019D39099B39A73D4F7C7FCCA22E41A8BE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: M1oq4Cb5bT+3yxbluE3bL/6crMJe3F9ZbWJvRwrMbng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9b:39:a7:3d:4f:7c:7f:cc:a2:2e:41:a8:be:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=79446c0947f649efaf32485044350298008eb746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:56:cb:ad:68:bf:33:0a:4c:a1:73:9f:12:
7c:67:a3:59:bd:6e:9b:84:00:07:95:be:57:ca:5e:
7c:b4:20:6c:6f:f0:7b:5d:d9:84:3f:f6:db:05:e0:
94:bf:f2:c6:05:55:0a:3d:e4:d5:2f:17:4c:66:b9:
7d:ab:31:7c:ea:59:46:4e:3a:b3:ce:48:3e:b4:4f:
37:1b:03:fb:03:84:c9:36:55:90:e1:ab:2e:bb:c3:
ba:5c:0d:7c:e6:76:f8:86:46:8c:66:ef:43:88:04:
66:04:89:7a:0f:c2:df:26:96:1f:63:2d:31:c1:bb:
06:5e:f6:d6:ab:aa:a6:26:9e:cc:1e:ae:35:1f:3c:
37:97:0b:79:0e:70:c3:bf:ea:23:61:f5:8d:5e:89:
77:5a:04:3d:27:66:56:9d:ae:f1:d2:67:b5:08:15:
a5:d6:c1:5b:a6:59:97:6e:72:c1:73:4f:2f:9b:17:
97:26:c9:38:36:f5:6d:d4:72:a1:ba:05:cd:a3:dc:
5a:5a:62:37:38:20:1a:a1:b1:8b:a3:d5:24:d7:02:
e3:23:86:76:a0:22:86:22:e9:9a:7e:41:f2:9c:3b:
00:8a:b8:46:9d:74:a8:d2:05:b4:1c:3d:5a:ae:47:
f1:dd:0e:bd:c5:fb:11:01:66:84:6e:02:2b:0c:c7:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:6C:09:47:F6:49:EF:AF:32:48:50:44:35:02:98:00:8E:B7:46
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9c:36:3a:31:ef:f8:44:29:36:4d:ab:ff:bb:4d:ab:87:d3:
56:e8:ae:87:70:7d:1d:69:b5:e8:8f:a9:fe:79:dd:99:4b:31:
26:66:f3:bf:a6:a6:cd:38:f9:1e:f5:df:c4:ea:15:29:ea:c1:
6f:be:16:72:b5:a6:8e:1f:85:a6:2b:6b:ab:51:b6:ce:29:83:
1f:bf:cd:dc:38:e6:d8:bc:4a:1c:ef:7e:7b:a6:e8:87:5b:a1:
c5:f5:bd:c6:5f:bc:c5:14:a4:78:a0:9c:a5:71:8f:22:44:5f:
8c:1f:47:2c:4d:ae:78:28:d1:d3:30:8f:7a:a1:6e:cf:d7:64:
16:5c:bb:a4:2d:d2:57:8e:b5:9e:ad:85:a9:28:ed:19:e8:a7:
24:c7:45:36:af:bc:3a:7d:21:6d:2b:02:36:28:9d:c2:18:5e:
2f:a2:c1:38:4e:5c:ff:98:57:c5:fc:64:bc:d0:19:96:14:50:
d2:63:b4:23:d3:85:be:cd:78:8e:d2:73:75:f8:ef:78:65:e7:
f2:7b:88:52:6e:d7:33:ab:ba:48:29:72:fc:9c:6e:59:ff:6c:
26:60:80:b5:23:f5:48:45:87:4e:e2:f3:82:70:05:44:76:ad:
bb:2a:ab:80:84:10:d1:6b:fb:2c:f5:80:26:74:e5:66:c6:44:
87:0a:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:57 2026 by rpki-client