Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: Hx0Sfx8Bsri4OASptIb3zp13uZpr+u3UUKoOph7EvqQ=
Subject key identifier: F3:02:4A:1D:61:FF:6E:8C:90:46:13:0B:F0:C9:F7:10:62:28:81:33
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 019CABA257EFEB6A0EE39F8706E39D83A0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: wje/T+nuk+fkd4bwxKSdSqLJzNkvTZc/MM/l51e4Dn8=)
2: tQHKW_5yxjpKOHe3d-ZP6p2sC64.roa (hash: 3+Hu+PFHtyBzCp4FY8HXvj0Pcdpyb0FAw5+YbzrL8sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:57:ef:eb:6a:0e:e3:9f:87:06:e3:9d:83:a0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=f3024a1d61ff6e8c9046130bf0c9f71062288133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:bd:cf:ed:03:12:25:9c:48:21:5f:34:6e:
45:9a:ef:87:be:32:96:8b:6b:47:f4:61:ed:b2:3c:
35:6c:ac:18:7f:86:9d:00:7d:ae:42:21:69:ac:00:
c5:84:92:8d:20:f1:7e:0d:c6:c6:b9:28:c6:fb:c0:
fb:a0:56:73:92:07:48:8b:2d:40:25:ce:7a:7a:59:
b4:41:1e:fb:0f:bf:6e:2e:ca:23:46:22:e5:51:a7:
fc:8a:f1:49:d5:16:12:b0:6b:a3:b0:19:2b:b1:16:
2b:67:18:ca:65:54:44:0d:48:90:fd:71:ad:bc:b9:
44:06:60:b1:e4:49:7d:0a:2e:a6:93:99:5e:36:9d:
64:52:d9:6a:17:44:35:fe:8a:91:c4:72:5c:8d:04:
00:11:48:97:9f:d7:40:80:97:7e:34:7a:f3:99:e0:
8d:c1:20:80:2f:7d:3e:47:43:ae:69:ce:74:49:b1:
c4:5d:1b:b3:88:7d:f4:70:64:e8:5d:66:3a:01:08:
f3:1e:e7:c8:a3:93:43:a0:56:36:de:1f:97:ea:54:
16:c0:50:12:11:d9:08:60:fe:cc:cd:30:41:15:d7:
6c:39:bd:19:4c:e9:12:0f:52:5c:7b:63:9a:e5:1e:
35:b0:84:42:ee:e2:d2:ab:63:84:16:a1:70:14:fb:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:4A:1D:61:FF:6E:8C:90:46:13:0B:F0:C9:F7:10:62:28:81:33
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6f:05:df:86:d9:6f:b9:6b:9a:e3:6f:82:6d:f7:67:06:79:
0a:28:29:a9:d8:d0:75:2b:9b:bb:0a:af:b4:24:5b:db:cc:6e:
4a:e4:7c:a7:dd:ae:76:b5:36:c0:76:b8:4c:5a:81:41:2f:81:
cc:32:44:64:e0:b6:37:67:8d:c3:89:9c:c2:bc:5b:1d:99:e9:
09:da:8b:72:05:f1:e9:9e:2d:26:eb:77:6a:b0:e2:b4:50:84:
fd:a7:c5:7e:16:e7:09:cb:d6:04:58:04:ba:78:86:87:2b:54:
d5:da:5f:8c:a0:61:9c:dc:7c:2e:87:f8:2e:b8:ff:c9:d9:94:
45:22:aa:29:d5:98:ca:fa:de:47:c4:cb:be:e9:45:d9:14:ee:
a8:80:02:a0:a6:ab:5b:74:f8:d6:94:e7:e9:11:b5:85:fb:de:
73:43:65:00:6e:85:ec:cf:a1:24:c0:fc:ac:88:c0:f5:53:ad:
62:46:24:91:5d:82:30:e0:19:94:ae:74:16:51:1b:ae:68:9b:
ce:73:e5:00:aa:95:fe:f0:34:65:31:af:f0:c6:53:cc:6b:f4:
34:dc:42:69:eb:e6:46:f0:8f:c7:7f:52:b7:68:ce:ac:33:9b:
0e:f4:42:76:2f:05:24:c9:92:61:1a:2c:f5:87:8c:d0:44:2d:
1b:e0:5d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:21 2026 by rpki-client