Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: 0Zz6Ve4HvL42Lu2kBkIt/N1FDdiGUYknpn4Pz5BUPJI=
Subject key identifier: 62:E1:E0:BF:F8:D5:C6:78:B3:3E:19:05:07:6C:D7:D4:C4:E2:73:09
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019CACB4AC85791F38A7E1BFC8349FBBCB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:00:47 +0000
Manifest this update: Mon 02 Mar 2026 04:00:47 +0000
Manifest next update: Tue 03 Mar 2026 04:00:47 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: cbZINqgQ0ypQ1kDxWFzOdKkLBgyQ+aMA+4fDTIcnBAc=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ac:85:79:1f:38:a7:e1:bf:c8:34:9f:bb:cb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Mar 2 04:00:47 2026 GMT
Not After : Mar 3 04:00:47 2026 GMT
Subject: CN=62e1e0bff8d5c678b33e1905076cd7d4c4e27309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fd:7e:dd:64:56:46:7f:82:2b:e8:cb:fb:d6:
30:d0:1c:d3:4c:10:d8:22:9e:d6:ac:eb:8d:dd:1a:
c7:ad:67:8c:35:33:86:94:07:48:fd:89:e0:9c:27:
2e:b3:ae:ae:75:60:3a:00:88:87:46:b5:c7:b3:61:
20:1c:e7:b4:ac:c1:2e:ab:3a:86:c2:b6:81:4d:ba:
0b:06:23:82:53:8d:eb:c9:99:f9:42:35:39:68:e6:
7b:7e:cf:43:ab:86:25:f2:d7:b6:7d:9f:02:0d:c0:
0b:15:01:80:aa:fa:1d:1a:02:33:f5:22:b4:44:8a:
84:65:68:67:fb:e9:85:e1:95:75:90:7f:74:0b:96:
86:17:e3:db:1e:93:dd:5e:ff:a5:b2:45:ca:d5:6a:
f8:3e:98:85:17:40:10:6d:b1:ff:de:34:b5:08:fc:
fc:3a:e8:0e:7e:95:f8:9a:34:89:36:b8:9a:0d:dc:
1e:43:fb:5b:df:bd:56:d6:72:2c:c4:90:83:27:e1:
3e:44:8e:81:89:36:1c:eb:1c:26:59:f5:aa:2f:2f:
60:de:ad:b4:61:82:af:c1:0b:e9:40:08:7f:98:93:
a9:24:ec:40:bb:52:28:6c:ea:0e:e9:3d:17:d5:9f:
f6:fe:8d:5a:77:11:e9:9f:7d:cb:aa:e0:2c:43:39:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E1:E0:BF:F8:D5:C6:78:B3:3E:19:05:07:6C:D7:D4:C4:E2:73:09
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:b2:02:e2:d4:d4:67:be:e6:c3:8c:d8:e9:3b:c1:32:14:
a1:ec:c5:4b:f6:b8:61:75:ca:77:c0:f4:b0:38:08:dd:34:da:
69:ae:49:c7:10:ce:28:ae:33:25:42:0a:e4:08:9d:04:db:6e:
3c:14:6f:62:df:30:08:60:a4:01:44:ff:71:91:c6:97:fe:72:
9e:5a:44:12:73:a0:7e:49:e2:4e:5e:da:66:d2:15:dd:83:ac:
26:e7:6c:a8:b8:98:af:85:ac:a7:d5:d0:92:ab:01:ea:f4:49:
c9:e2:e1:0e:7f:37:81:4f:ef:d5:ae:62:93:f2:63:74:3d:d4:
40:e4:67:bc:13:ad:18:9c:3c:f4:31:8d:1c:43:2e:be:17:80:
d3:68:21:8f:ed:45:ed:97:64:f7:08:8b:3d:a5:89:cb:c0:46:
16:5d:d6:f3:53:45:a8:af:f1:f2:97:26:6a:a1:06:05:78:ea:
8f:6f:2f:e3:f1:3e:ca:cc:8d:82:80:8c:3f:2d:dc:00:e4:46:
e2:91:ff:c4:1f:16:eb:53:94:a1:57:57:85:d6:40:15:d8:78:
5a:77:d1:f9:62:bf:0b:3f:6b:86:84:4d:e9:26:de:4e:58:1e:
82:ec:31:12:bb:a8:e8:37:54:40:7f:aa:69:37:9e:9b:a3:0b:
1b:2f:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:29 2026 by rpki-client