Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
File: i6gkldaDsIyIGoGM0B-kL_9v9tE.mft (raw, json)
Hash identifier: 2utCU4srIaqJnL7XHvfyfKMQOhFxaQgF38AyoxJ1CHU=
Subject key identifier: AE:69:03:B3:92:C9:F1:3E:60:0C:76:50:3D:B9:89:F5:89:1E:BE:32
Authority key identifier: 8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
Certificate issuer: /CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Certificate serial: 019D37C10D986BCD1163FDC02DE3CEC5CBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
Manifest number: 0484
Signing time: Sun 29 Mar 2026 04:01:31 +0000
Manifest this update: Sun 29 Mar 2026 04:01:31 +0000
Manifest next update: Mon 30 Mar 2026 04:01:31 +0000
Files and hashes: 1: i6gkldaDsIyIGoGM0B-kL_9v9tE.crl (hash: INcFfE3B21/0Q/plMLMeW9oRcLPMmFNCahXgKIfPgUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0d:98:6b:cd:11:63:fd:c0:2d:e3:ce:c5:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Validity
Not Before: Mar 29 04:01:31 2026 GMT
Not After : Mar 30 04:01:31 2026 GMT
Subject: CN=ae6903b392c9f13e600c76503db989f5891ebe32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:93:88:b5:7a:1e:c0:08:e5:53:8a:b9:cf:
75:01:2c:35:b7:9c:2e:58:95:6e:4b:5b:46:6c:ea:
0c:02:1b:ae:97:a4:d1:4f:05:9f:f1:cb:bc:16:58:
0c:9e:d7:4b:82:58:b6:48:ad:31:13:43:bf:ea:21:
cc:da:ca:24:78:92:39:6d:9d:e7:3a:84:5d:9b:ba:
69:e9:83:a8:c9:0b:16:42:b4:49:65:f9:98:04:a3:
ee:41:d1:ca:d0:0a:f5:57:8e:1f:2e:c5:c4:57:09:
7c:a4:96:9e:35:67:25:fc:50:37:f3:bc:0c:9f:c6:
4d:c4:af:fb:49:a0:bf:e6:47:cd:3a:83:49:df:ea:
ab:ed:25:7c:f0:a1:17:3e:f0:4a:63:0a:a3:aa:0c:
35:69:4b:25:06:ea:0a:f5:23:2d:fa:ea:3b:83:85:
07:44:ae:6f:a1:4a:b4:98:c4:d2:64:67:85:c3:41:
95:45:22:43:f6:b5:77:f6:64:42:67:c1:92:55:ec:
13:2d:1f:29:bf:73:3e:05:3e:30:22:d0:7f:a1:cb:
01:04:2e:e0:1f:3b:15:80:0e:b7:d4:52:48:ff:34:
f8:80:a4:ac:66:3e:1b:be:dc:81:41:76:c2:a6:0e:
b4:d0:46:7a:6b:d9:c7:08:93:27:75:67:9b:74:16:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:69:03:B3:92:C9:F1:3E:60:0C:76:50:3D:B9:89:F5:89:1E:BE:32
X509v3 Authority Key Identifier:
keyid:8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:a7:ae:cb:4e:dd:91:b1:57:8e:95:2e:0d:54:88:a0:12:1c:
62:d6:5c:a2:06:4d:e8:6f:e8:4a:0c:fe:5c:bb:d2:04:16:53:
b8:e7:a0:5e:8b:0b:4b:c7:e8:11:56:d0:6c:d2:fe:f0:47:7c:
c0:3f:11:5d:97:20:07:85:fe:14:28:24:af:8d:58:38:38:62:
d5:d3:9c:51:6a:32:ab:ea:27:21:de:ac:66:0e:4e:99:48:bc:
d4:22:93:f7:90:d3:fe:ed:92:0a:30:df:71:ec:ff:8c:f6:d0:
fa:e1:10:d9:42:13:47:d2:d6:6a:57:4a:24:ea:8c:3b:41:b3:
fd:2e:b7:58:94:ee:a0:24:f7:dc:e4:e6:61:ed:ad:a4:9e:8b:
4a:06:ed:a3:e4:46:36:5e:b6:d5:ff:bb:5d:9c:14:45:33:2b:
13:1f:c5:25:2b:90:15:80:9a:5a:c1:8f:9f:c1:ac:42:9a:eb:
28:1f:e6:10:9a:57:30:85:f9:f5:5c:2e:17:6b:74:b3:ae:fd:
c2:6b:cb:e1:99:49:1e:d2:4d:6f:14:9c:e5:ce:82:55:99:55:
05:a6:26:97:d2:b5:3f:f8:7f:4d:bf:74:af:6a:b2:32:c9:71:
ff:fe:11:58:6d:3e:18:6d:6c:c5:3d:ae:23:1e:2c:3b:12:53:
20:6e:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:33 2026 by rpki-client