Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: lp9aaAdNskvc05ulH/j4w5TB7FOL+mEK3kS52cjr7YI=
Subject key identifier: 43:A3:E2:68:FC:21:7A:5A:49:15:D6:6D:52:A4:94:61:6E:60:42:4E
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 019CAC4766290DA48A1FAAE987884B05556B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 0560
Signing time: Mon 02 Mar 2026 02:01:26 +0000
Manifest this update: Mon 02 Mar 2026 02:01:26 +0000
Manifest next update: Tue 03 Mar 2026 02:01:26 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: XDKvJgNuiTc0Sks46gqKTbK+vxTgaaR8oQ6+rLtAhhE=)
2: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (hash: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:66:29:0d:a4:8a:1f:aa:e9:87:88:4b:05:55:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Mar 2 02:01:26 2026 GMT
Not After : Mar 3 02:01:26 2026 GMT
Subject: CN=43a3e268fc217a5a4915d66d52a494616e60424e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:83:74:4a:5b:ff:c4:e3:c8:04:71:2d:c5:
99:60:4e:cc:d1:15:a9:bc:c6:af:c7:5b:ff:9c:df:
36:0f:2d:df:7a:3b:8e:b0:95:31:2b:a3:18:ed:9c:
51:69:8c:d3:15:06:93:c9:1d:5b:5f:a5:45:fc:12:
3f:dd:ab:34:c5:73:78:f6:57:6c:38:0f:0c:11:e3:
6b:d7:52:b3:bc:6d:18:8f:22:8e:44:17:7c:b9:de:
c0:60:2e:bd:28:c6:52:9c:c1:a9:cc:d1:40:29:d6:
9b:75:27:d9:fa:39:c5:a8:e8:66:49:d6:97:a6:a6:
f0:2d:29:f9:28:f2:19:f7:f5:4b:8a:1a:b1:70:c7:
c5:88:6c:d5:33:01:57:d9:9f:a0:a1:19:4d:9f:33:
a2:3f:df:94:a2:ac:23:1d:1e:cd:7e:d7:4a:77:4d:
13:2b:d4:0a:a3:c5:ae:ca:ad:88:42:5e:fc:6f:06:
d2:8a:4b:60:11:56:da:8a:1d:63:79:1b:72:3f:aa:
bc:58:12:5f:d8:dc:ca:da:be:8a:0e:8b:d1:8d:b3:
7d:d1:ff:49:29:45:6a:fd:e7:f3:50:79:55:d3:d3:
ad:c9:ae:be:d9:8d:b5:9e:f0:3b:c8:d4:c4:76:7e:
e6:98:12:cf:fb:68:25:4b:05:13:e8:22:db:47:5f:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A3:E2:68:FC:21:7A:5A:49:15:D6:6D:52:A4:94:61:6E:60:42:4E
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:18:74:a4:e4:a0:70:ab:06:bc:f7:66:38:20:db:63:97:b1:
4b:67:0a:4f:f0:da:23:e4:eb:ed:be:ee:13:c9:64:46:ef:54:
5b:f6:8e:e6:c5:06:b9:4a:14:67:3f:70:b3:68:f5:14:5e:31:
4c:c9:4c:80:c7:b6:f7:30:00:38:2f:e2:9d:5f:fc:2a:87:30:
68:c2:d1:28:bf:60:36:2d:38:28:ae:e5:e6:11:21:c5:13:f1:
51:16:0f:08:1c:d9:77:14:ed:4c:47:52:92:87:54:a8:dc:7f:
d1:7d:dc:d4:3a:7e:49:20:ef:50:a7:a2:25:6b:c4:96:1b:ae:
0d:43:2f:f8:35:a0:6d:8a:ee:34:f2:96:1e:f9:da:5b:12:e7:
cc:d6:b5:45:e8:5f:1d:34:a2:3c:e3:3c:95:0a:cb:62:f3:12:
dc:18:36:c9:da:bd:10:f7:02:3e:79:45:6a:55:ea:19:c9:a7:
45:80:53:7a:e4:96:16:8d:36:12:bb:5c:e9:86:ed:7b:06:b2:
bb:14:85:b9:36:e5:75:79:ba:df:50:3e:bd:8b:85:59:92:7c:
3e:9c:bc:a8:14:49:7d:0a:a8:4f:e9:00:04:42:c0:a4:15:a1:
1e:eb:74:85:32:03:16:3c:c5:e1:5b:3b:fb:99:6d:5f:23:e6:
f7:88:fd:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR2YpDaSKH6rph4hLBVVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx
NjI3ZTAwHhcNMjYwMzAyMDIwMTI2WhcNMjYwMzAzMDIwMTI2WjAzMTEwLwYDVQQD
Eyg0M2EzZTI2OGZjMjE3YTVhNDkxNWQ2NmQ1MmE0OTQ2MTZlNjA0MjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8aDdEpb/8TjyARxLcWZYE7M0RWp
vMavx1v/nN82Dy3fejuOsJUxK6MY7ZxRaYzTFQaTyR1bX6VF/BI/3as0xXN49lds
OA8MEeNr11KzvG0YjyKORBd8ud7AYC69KMZSnMGpzNFAKdabdSfZ+jnFqOhmSdaX
pqbwLSn5KPIZ9/VLihqxcMfFiGzVMwFX2Z+goRlNnzOiP9+UoqwjHR7NftdKd00T
K9QKo8Wuyq2IQl78bwbSiktgEVbaih1jeRtyP6q8WBJf2NzK2r6KDovRjbN90f9J
KUVq/efzUHlV09Otya6+2Y21nvA7yNTEdn7mmBLP+2glSwUT6CLbR1+Q9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOj4mj8IXpaSRXWbVKklGFuYEJOMB8GA1UdIwQY
MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt
MzhmOGVkMDAwMWVkLzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk
LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxh0pOSg
cKsGvPdmOCDbY5exS2cKT/DaI+Tr7b7uE8lkRu9UW/aO5sUGuUoUZz9ws2j1FF4x
TMlMgMe29zAAOC/inV/8KocwaMLRKL9gNi04KK7l5hEhxRPxURYPCBzZdxTtTEdS
kodUqNx/0X3c1Dp+SSDvUKeiJWvElhuuDUMv+DWgbYruNPKWHvnaWxLnzNa1Rehf
HTSiPOM8lQrLYvMS3Bg2ydq9EPcCPnlFalXqGcmnRYBTeuSWFo02Ertc6Ybteway
uxSFuTbldXm631A+vYuFWZJ8Ppy8qBRJfQqoT+kABELApBWhHut0hTIDFjzF4Vs7
+5ltXyPm94j9SQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:42 2026 by rpki-client