Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier: yWYkMpm9ZCTcKubWalT/a0jFNHTefcu19jeIfa2Jcrs=
Subject key identifier: 42:B0:F7:65:95:71:E2:A3:6A:AB:72:13:72:67:2E:2B:EA:C7:7C:43
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 019CA97D3A0B4A5B58B46B261A4C8120EFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number: 127B
Signing time: Sun 01 Mar 2026 13:01:22 +0000
Manifest this update: Sun 01 Mar 2026 13:01:22 +0000
Manifest next update: Mon 02 Mar 2026 13:01:22 +0000
Files and hashes: 1: dRuHtag2W48upoirGox3mzp5yls.roa (hash: pcW0qjbXLjHfD/4xJe2tmXXM1DU4kBxoW5dZ8O0Fexc=)
2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: rRsGqirb4b3CHQnS4maWF+JCls/TIQYiBkj3OqSdAwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:3a:0b:4a:5b:58:b4:6b:26:1a:4c:81:20:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Mar 1 13:01:22 2026 GMT
Not After : Mar 2 13:01:22 2026 GMT
Subject: CN=42b0f7659571e2a36aab721372672e2beac77c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:ee:39:f7:7c:a3:9a:25:b0:f9:00:e9:50:
1f:a2:4b:07:5c:03:c1:05:3b:5c:66:df:67:b7:f2:
30:71:53:b2:07:10:b8:c9:e0:ff:c4:b9:77:cf:68:
5d:82:eb:46:7b:7a:50:37:52:5c:76:d5:34:1f:9f:
3a:f6:ab:cc:51:40:db:55:61:69:c1:14:5a:99:f4:
e0:28:d5:32:c8:6a:ec:c5:8f:f0:bc:27:0e:57:24:
83:0e:77:32:a5:88:11:46:d9:8e:59:28:54:3b:ec:
da:b9:b9:dd:bb:97:75:34:09:30:7a:79:7e:bc:11:
da:97:3e:af:84:15:3c:a6:d9:5d:f8:d0:fd:51:7c:
af:02:12:8e:50:72:16:ad:0e:11:ae:d2:bb:89:47:
f8:8c:27:8e:cb:0d:76:84:13:ec:4a:0a:4e:f6:42:
35:bd:ab:51:4a:d4:1e:4b:2a:40:21:72:e6:6b:1c:
73:69:f3:b0:96:47:83:4b:95:52:54:b7:72:9f:4f:
e9:48:41:8b:52:f8:d4:e5:59:45:01:3d:c4:af:5d:
f4:45:36:e7:cc:71:58:10:52:1a:e5:76:24:70:70:
82:4d:48:b0:3c:34:ee:1a:59:70:c4:35:95:bb:f4:
65:d1:26:90:4d:52:06:a0:a9:12:40:8d:a2:8f:dc:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:F7:65:95:71:E2:A3:6A:AB:72:13:72:67:2E:2B:EA:C7:7C:43
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:10:7d:b2:5f:c0:42:a7:eb:d5:71:18:6f:7f:26:5a:1e:e9:
22:bf:bc:a3:12:c3:85:94:e3:4e:f4:5e:96:9d:b5:73:5c:d8:
e4:62:b5:5f:42:28:9b:cd:3c:d6:d4:0f:02:aa:0b:ef:c3:f8:
d3:3f:f0:6b:be:62:01:72:60:a4:a6:4d:cf:71:53:90:44:fa:
f2:8d:8f:0f:6b:89:02:35:43:91:75:62:e6:3a:e3:84:9c:d1:
ed:98:0d:93:45:c0:12:7b:b2:aa:fc:04:22:03:cb:50:3a:84:
d7:8d:0e:e3:f8:82:af:6e:ac:1c:1d:17:72:84:f7:20:5e:95:
68:90:bb:1f:24:a7:fb:d0:0f:c5:ec:b4:da:a5:d6:f8:b6:56:
18:4e:01:82:6b:df:55:09:0f:ac:cf:05:9a:25:f6:fb:04:9c:
9b:bb:88:f8:54:05:73:e7:e7:c9:75:d8:ab:c8:54:e9:b8:9c:
98:83:f5:f1:51:03:0b:37:c7:27:61:b2:62:49:08:fd:ab:ac:
9d:4f:5f:99:39:b1:f0:7a:19:7c:14:80:bb:fa:2d:43:58:3a:
d0:ee:e1:73:24:44:20:6b:f3:68:23:e2:7c:70:dc:23:7f:b4:
9b:d6:39:71:e7:43:cf:a1:da:d3:44:91:8d:33:70:83:92:bf:
8d:19:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:17 2026 by rpki-client