Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: VZNAmli6PQJRi1yMlVeJ0k1sbONKKLDVsE+58SGu0L4=
Subject key identifier: 9E:1C:C6:39:B0:4E:EB:0A:EE:7D:64:F0:70:6B:8F:E3:58:C3:14:18
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019CAAC6FA02D5F7B55C43FF95DECB388272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 1647
Signing time: Sun 01 Mar 2026 19:01:32 +0000
Manifest this update: Sun 01 Mar 2026 19:01:32 +0000
Manifest next update: Mon 02 Mar 2026 19:01:32 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: 3sZxR4TaHjvuDhslGsJmDEZOAlIYTVYkyFT2qp9xThc=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fa:02:d5:f7:b5:5c:43:ff:95:de:cb:38:82:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Mar 1 19:01:32 2026 GMT
Not After : Mar 2 19:01:32 2026 GMT
Subject: CN=9e1cc639b04eeb0aee7d64f0706b8fe358c31418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:43:a5:e1:3a:03:06:94:57:fb:81:89:b2:
ee:74:76:0d:f2:1b:08:9f:4f:41:e8:50:d2:d1:59:
2c:0c:7b:0d:7b:ec:d5:da:06:c2:5e:06:e0:9f:6a:
cf:8c:06:e4:fb:6b:74:29:d2:2b:51:dc:72:97:78:
19:b6:ff:c4:0d:45:9e:b6:fc:99:86:c3:a0:52:1a:
93:5e:56:6e:80:9a:82:f7:2f:cd:82:f0:2e:87:1e:
98:e2:20:38:82:33:e7:fa:2a:51:c3:59:67:e8:87:
7e:eb:65:db:cf:76:69:25:f1:d4:9a:c4:9a:77:c5:
f9:af:2d:22:f2:31:bc:f9:81:40:80:ed:a8:ed:cf:
d4:55:25:68:84:ac:11:ae:7f:9a:43:0c:b8:ae:3f:
63:d7:36:9e:28:6d:50:68:df:69:a2:a3:67:c0:7c:
b9:05:ce:72:16:74:86:00:89:1a:4e:a4:dd:71:a1:
3e:0e:9e:a1:3a:cf:a9:82:9f:ce:99:62:9c:ff:8c:
62:bf:b6:2b:04:7d:14:77:a5:3a:4e:9b:67:2e:c8:
e9:6a:12:12:00:0d:0c:d6:c1:de:7f:c8:a0:56:8b:
bf:35:59:eb:31:0c:da:d3:68:bf:73:22:4b:01:4f:
90:ff:75:fa:3d:0b:f4:44:02:a9:76:94:d6:e1:ea:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1C:C6:39:B0:4E:EB:0A:EE:7D:64:F0:70:6B:8F:E3:58:C3:14:18
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:48:2f:2a:7a:da:e9:8b:e1:b7:37:c7:19:28:7f:df:e0:
06:fd:aa:1c:78:c8:da:c4:e5:fb:78:9f:d8:e3:f2:9c:fb:dd:
3e:a7:9a:ad:59:fe:45:a0:57:10:1f:fe:16:ca:df:79:28:60:
8d:2c:49:8e:8f:a6:22:91:4a:3c:8b:3a:6e:72:86:ce:78:e1:
1a:87:5e:8e:55:56:d5:91:41:25:0c:6d:a1:6c:14:00:06:5f:
b0:18:ff:e5:03:fe:ab:e0:73:0d:f1:91:e9:e9:e8:77:a7:0a:
52:ba:5d:aa:54:d9:12:3b:78:e1:51:37:76:9e:5d:69:6c:b1:
32:33:b1:f8:55:fa:29:6d:02:af:76:69:f1:ba:de:f4:4b:e3:
a9:68:d0:05:29:eb:c5:65:41:52:c6:30:7d:b6:92:5d:72:ee:
3f:32:d0:27:7c:3c:96:c7:20:77:8f:ea:f9:51:e6:ea:67:a6:
29:0e:19:b3:9d:77:82:7c:87:e1:bb:c5:e3:f2:a1:dc:d2:83:
b5:7e:c5:e8:12:82:41:78:7c:a8:90:c2:5c:c3:a3:9c:e8:34:
0b:85:e7:5d:22:ce:5b:86:46:bf:9e:5a:05:d0:1a:c8:07:b1:
54:a4:69:54:66:df:ea:e0:d7:06:49:29:ae:92:fc:d6:2f:1e:
cc:a0:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:47 2026 by rpki-client