Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier: inUxjk2liYCH7aGolDMqwCddurB7LXiJ85jCFADvZ+I=
Subject key identifier: 42:33:DC:79:C0:69:7D:DA:5F:37:A6:A1:40:AC:7D:2B:54:16:84:DE
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 019CA7FD0C7DBCFC78569F5244BC26C0216C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number: 1399
Signing time: Sun 01 Mar 2026 06:01:44 +0000
Manifest this update: Sun 01 Mar 2026 06:01:44 +0000
Manifest next update: Mon 02 Mar 2026 06:01:44 +0000
Files and hashes: 1: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: BLt6bnDzMAbr8zPuIq6jgLDGsB16nU9iGzLd9q7p7m8=)
2: Ry13RGPYJVvtpvhKEOm6pAfriNc.roa (hash: oTL00T36xjABiLlLnyyxwdABnaFfTiLLRpEKK+wxv9o=)
3: TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa (hash: QAM+8Y7IXNl8McE2u38ceOVi6OQTLcaAjr7T4vt1spg=)
4: XmK83eJDzPMsOo6NG4b7hC8Q6ik.roa (hash: LiOPt6WyR9nnxeKYrKkKUN50OOD6CsvfUFylT6hefd4=)
5: lMyPvW5droFVn6Tk385-cqRx17c.roa (hash: gpoTflIdMdUsvV/coCFUIU3cd1nO0X3/iYdUbk7d574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fd:0c:7d:bc:fc:78:56:9f:52:44:bc:26:c0:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Mar 1 06:01:44 2026 GMT
Not After : Mar 2 06:01:44 2026 GMT
Subject: CN=4233dc79c0697dda5f37a6a140ac7d2b541684de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:45:14:98:02:29:68:25:b2:e9:c9:d8:4c:
dd:81:ac:85:ce:f6:70:b2:4d:bb:a3:73:c2:ad:a7:
9c:d7:31:22:3f:27:28:15:0e:44:6d:8a:44:17:d0:
53:7c:8d:2e:c7:8a:96:d1:6c:56:2d:37:27:a9:4d:
d9:0b:d0:a7:95:30:06:ba:39:ae:b4:32:ea:7c:2b:
b3:a1:32:a3:22:f7:5b:ad:e6:fa:96:59:dc:60:70:
27:71:fb:2d:0c:48:f0:85:17:98:59:1b:71:56:dd:
8b:9c:bc:f9:18:da:36:31:0b:6a:c8:fe:11:e5:0b:
be:d1:4a:b1:1a:cc:fb:29:88:8b:bd:77:ef:9f:0b:
26:bc:62:f1:c7:5a:79:27:85:94:95:e3:4f:67:9c:
c8:8e:f5:b6:19:9c:01:bc:82:d4:18:d8:79:61:aa:
9f:6a:e2:0b:86:0c:80:0e:30:d6:9f:7f:71:a2:72:
a0:17:a4:ee:91:26:a6:1e:1d:1d:0c:13:15:79:fb:
45:e2:40:15:36:04:95:98:1f:82:74:fe:b4:53:56:
d3:00:7d:4b:dc:c1:c4:1f:57:0b:c6:ba:36:37:0f:
7e:ac:d3:45:2e:d8:e4:08:03:e9:07:c6:6a:ed:4f:
03:13:bf:d4:8e:7f:1e:a0:f2:fb:8b:25:1f:e1:9d:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:DC:79:C0:69:7D:DA:5F:37:A6:A1:40:AC:7D:2B:54:16:84:DE
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:06:dc:6e:35:3a:39:78:58:20:fb:65:9d:ea:ed:2c:43:62:
00:67:29:d6:c2:c2:07:c1:9c:88:c5:85:91:4d:73:f6:44:63:
ab:2c:17:92:6b:0c:b0:31:ff:c0:42:a3:eb:74:14:38:27:fc:
75:29:29:7b:dc:b0:e8:2a:b0:22:35:cd:db:4f:a0:f9:34:81:
94:b1:97:6b:1b:63:31:78:ee:c0:bd:26:1f:8b:e3:64:79:c7:
04:d3:8e:20:1d:19:17:9b:d3:a2:f0:45:8c:7b:95:ba:f6:b4:
7c:95:0c:bf:33:ec:fd:dc:d1:87:ef:f4:bd:ed:35:6e:4d:98:
a4:96:37:81:19:6a:12:0e:7b:0c:d6:d1:3c:47:5b:ce:67:8c:
58:df:8c:2d:e0:22:89:3f:83:57:a7:cf:a5:eb:c1:07:5a:dc:
63:fc:52:e4:ec:70:72:fd:90:23:74:da:72:db:ad:c3:09:cf:
f3:5c:e9:24:da:60:9a:d9:8f:04:35:1c:e8:58:92:12:12:72:
72:5f:11:87:84:43:c5:e0:46:72:da:34:1e:99:8a:3f:f6:be:
b2:1c:fb:42:12:e6:d9:60:c9:b0:a6:01:77:d7:a6:c9:87:6a:
f8:d1:bd:b3:d1:a6:97:37:ee:f0:32:79:f1:8d:5e:ad:6c:e5:
50:ed:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:56 2026 by rpki-client