Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: ob9k3tekOds2B5FVDktVOBtSYxWiSzLmDOMzL9dVv3o=
Subject key identifier: 86:04:CA:EE:FD:9F:73:43:F4:21:08:26:70:E4:5F:1A:E3:D4:4D:07
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 019CB0237AB741D6652F5EAC82F248CC1163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 156B
Signing time: Mon 02 Mar 2026 20:00:41 +0000
Manifest this update: Mon 02 Mar 2026 20:00:41 +0000
Manifest next update: Tue 03 Mar 2026 20:00:41 +0000
Files and hashes: 1: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: s+qO5arawk9gX2EMQWQ166rhlO7/w2XnqFkRzw24jwE=)
2: sR4ns811nFIbjvjg3wltUzH6BEI.roa (hash: ZbJugbRHpIt2Y4hqLk7H0rTD6BGfncHuX2f1Y5HnqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:7a:b7:41:d6:65:2f:5e:ac:82:f2:48:cc:11:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Mar 2 20:00:41 2026 GMT
Not After : Mar 3 20:00:41 2026 GMT
Subject: CN=8604caeefd9f7343f421082670e45f1ae3d44d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:0d:86:33:70:ff:4b:14:31:90:50:95:5a:
34:5f:35:2e:2c:9a:ae:7e:1b:18:12:d1:87:ef:98:
87:f5:d5:9a:cb:6d:11:89:c1:1f:56:25:77:e1:e5:
1c:33:1e:58:09:25:0a:b5:f7:c3:53:b2:3e:14:89:
a8:b7:81:dd:5b:e6:40:71:ae:b7:2c:5b:cb:b8:de:
6f:56:d8:88:74:a9:82:7d:64:11:0d:20:01:a8:57:
1d:94:1e:46:19:ea:39:48:42:93:68:9b:7c:62:d2:
7a:a6:8f:d0:d2:5b:ad:b3:07:7e:59:c6:2d:14:a3:
31:c5:41:f1:cf:a9:13:bd:36:3b:67:bc:2c:1f:c2:
0b:a1:47:ec:e9:80:87:51:bc:b7:6c:51:7d:aa:2b:
78:e1:c5:1b:58:d1:59:a4:d6:79:5a:61:9a:44:f6:
ea:5a:00:34:42:94:3c:e9:ea:95:7a:db:07:54:09:
1c:27:f9:72:15:61:1b:fa:55:3c:ee:4e:8a:8d:8e:
6f:54:f5:a0:de:6b:39:62:9a:4a:80:e3:a2:36:62:
0f:85:30:55:12:60:55:32:e1:58:99:10:65:2e:b4:
d8:91:46:73:f3:04:55:af:a4:7f:5d:a5:44:57:bb:
5d:c0:86:91:ce:8c:5c:80:b3:8c:87:11:12:40:15:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:04:CA:EE:FD:9F:73:43:F4:21:08:26:70:E4:5F:1A:E3:D4:4D:07
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fc:e5:59:ab:d9:26:a6:45:5e:53:ae:b0:6a:b2:c3:0e:ff:
cb:56:13:7d:d9:28:e6:b8:8b:3e:ba:84:7a:dd:86:ab:b2:e7:
25:db:5c:b6:b1:e7:71:fe:77:50:6e:43:da:46:13:c6:b0:09:
ab:f2:05:56:21:ce:5f:80:b1:ce:dc:1d:69:49:79:37:c6:66:
cc:20:9e:19:ab:f0:82:22:ac:8a:87:df:96:03:bf:bc:2b:1c:
14:56:87:25:a7:ea:39:a3:ca:25:56:fe:ff:94:c5:ab:86:3a:
6b:bf:a1:4b:0a:f0:71:95:0d:30:2d:21:44:66:1b:4a:f5:45:
d4:29:c6:78:31:4d:d4:1d:1a:14:fe:c1:8f:8f:1b:fb:f4:9c:
7c:1c:02:e3:89:6a:14:5b:8f:b5:59:14:e7:9d:1d:a4:c6:db:
3b:63:d3:2c:a5:25:74:a0:70:75:28:3d:40:04:0c:06:e1:c9:
9b:8f:cc:2e:cd:18:a4:5a:8d:a7:bd:c0:75:fb:17:72:aa:18:
04:66:ff:27:00:ba:9f:ee:0a:97:d3:52:bc:03:08:38:ac:71:
9d:e6:b0:e9:2e:75:fb:4e:f7:b8:e8:05:86:ca:81:3b:ca:ee:
67:35:08:9b:e1:8c:5f:57:24:8f:f8:79:64:31:3f:c2:70:49:
41:12:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:45 2026 by rpki-client