Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: 43jnoGzPrcNIPXcKA8j0qnz6Cr7Wb59gRqnBzpqIupc=
Subject key identifier: 20:85:07:75:51:28:3B:D6:2C:FD:EE:99:9D:D3:31:A9:86:C7:4C:AD
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 019CAC10622E8998C248EDE3A49D525B1D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 01:01:20 +0000
Manifest this update: Mon 02 Mar 2026 01:01:20 +0000
Manifest next update: Tue 03 Mar 2026 01:01:20 +0000
Files and hashes: 1: HuFQZvhRuo0xrVnhchpAwhxXio0.roa (hash: 5dZkdyNjGGkUNI6gq510mm4AVyEYl5KXnKFtrfLu3/Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: nzL57UbcGs+pMW5qW6HIHlvCIgN1zgfVf7DqjFR5dOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:62:2e:89:98:c2:48:ed:e3:a4:9d:52:5b:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Mar 2 01:01:20 2026 GMT
Not After : Mar 3 01:01:20 2026 GMT
Subject: CN=2085077551283bd62cfdee999dd331a986c74cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:2a:33:e4:7c:29:08:79:4b:46:e9:9f:06:
a0:84:cd:31:1b:e4:b9:c4:4f:9b:f6:8b:4c:93:d4:
95:0a:de:3b:5a:68:7c:a7:57:53:68:c9:b2:0d:b4:
10:f3:91:3b:9a:04:6c:06:9b:33:a9:79:24:a7:4d:
d5:c8:ab:cd:eb:b8:66:63:63:b2:d4:a5:c2:0c:d9:
09:6e:98:36:97:aa:f5:95:b6:38:ba:f4:c2:cd:8c:
62:cd:ea:e0:04:ed:e1:b4:8a:0b:02:f7:88:62:f4:
82:2f:94:e0:49:54:88:ef:27:26:95:e3:f7:5a:9b:
f6:00:69:0d:a6:a6:b9:43:ab:ed:00:84:94:a3:fa:
d2:20:89:5c:2f:21:bd:85:e7:a5:e6:25:e5:0c:25:
9e:61:f7:56:25:a2:46:9e:73:a5:23:92:f4:a6:ca:
b0:d0:c7:a5:cd:be:e4:9e:f9:25:1a:b0:ea:96:ea:
b7:c0:cb:42:d9:6b:f1:ab:9d:d9:1a:5b:58:67:c6:
66:66:36:16:98:31:da:ab:96:9d:25:87:9f:c4:37:
9e:97:96:72:22:30:91:c8:74:26:5f:7d:82:78:89:
56:36:f2:72:6f:b0:5a:ed:38:02:48:55:96:f8:82:
79:3c:75:1d:ba:d7:48:20:72:23:16:16:78:06:48:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:85:07:75:51:28:3B:D6:2C:FD:EE:99:9D:D3:31:A9:86:C7:4C:AD
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c3:80:3b:fb:b2:01:58:9a:7f:87:80:9e:a2:4c:e6:b1:11:
b8:29:bf:0d:84:e0:7f:dc:2c:15:95:58:fd:69:db:6e:ab:80:
37:b6:4f:99:87:4a:a3:fb:53:5e:4a:75:b2:2d:b3:0d:9f:8f:
86:d2:d2:1c:78:7d:9b:1a:82:8b:6f:e8:a4:8c:33:18:f7:a0:
45:72:95:e0:0a:23:79:68:3a:55:1b:1c:bb:9f:37:1d:2a:56:
6a:66:24:22:93:a0:75:16:92:0f:ac:23:e4:38:4f:47:3d:ea:
3a:2e:d8:6a:8e:ff:5b:d9:bd:24:ab:40:9a:a6:ed:f0:92:b2:
4a:d5:9c:46:db:b8:74:d0:31:12:96:1c:9a:11:89:ed:3d:c9:
d1:a4:53:fc:ea:33:a3:19:b9:4b:ab:49:4f:1b:4a:63:b8:77:
f7:65:99:d1:9f:81:63:5d:1e:84:87:52:0e:dc:46:b0:0a:ba:
78:93:0e:b9:81:cf:e8:1b:1c:c6:20:ff:d8:83:41:13:d0:db:
71:70:89:07:e3:96:91:58:a1:a3:1a:1b:7a:6a:bd:28:37:b7:
f1:a0:41:44:f6:de:01:6e:2d:01:22:97:ae:85:c0:2f:06:a0:
b8:03:30:f6:b9:bc:1c:8c:e7:87:1d:35:18:67:78:77:3b:7a:
55:19:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:29 2026 by rpki-client