Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: vr6t47/AMcToILvCfLWa3oa5P9yRSrSSy97SBcWMR6U=
Subject key identifier: 5B:70:52:01:BD:BD:9A:1F:8F:60:04:0E:47:3C:6A:2B:1E:BA:83:AB
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 019CADC7ED610BC96F12843FEF4D771397DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0F04
Signing time: Mon 02 Mar 2026 09:01:26 +0000
Manifest this update: Mon 02 Mar 2026 09:01:26 +0000
Manifest next update: Tue 03 Mar 2026 09:01:26 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: Uzk43aSipJHhtpqqsl3uHamQsImLjabaaKT9kUmUyig=)
2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ed:61:0b:c9:6f:12:84:3f:ef:4d:77:13:97:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Mar 2 09:01:26 2026 GMT
Not After : Mar 3 09:01:26 2026 GMT
Subject: CN=5b705201bdbd9a1f8f60040e473c6a2b1eba83ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:57:82:07:87:27:0a:bf:f6:05:3f:18:53:
9b:c7:99:25:86:c7:8f:9d:67:69:13:df:91:80:f9:
33:dd:2c:1e:aa:46:e4:8e:26:f4:57:c8:45:91:4e:
6e:d2:06:74:a3:68:2d:4b:90:56:85:bb:20:73:8c:
d4:4a:ae:d1:84:f5:ce:90:34:84:c5:2c:90:f7:93:
46:58:d5:b6:b9:4d:e3:69:77:d5:c2:bd:21:f3:b5:
be:12:b3:66:51:28:69:78:31:36:47:e7:81:bd:e1:
2b:58:1e:f2:b5:32:32:f9:46:c0:0d:ce:8a:11:e3:
0f:cc:a2:33:16:64:2b:0d:6c:78:be:76:9f:c5:02:
4d:68:2d:ca:77:74:13:1a:c8:4b:61:70:77:88:21:
91:ad:3c:8c:38:aa:30:a9:94:38:f1:6b:87:1d:23:
2a:7c:09:6c:b7:28:dc:96:85:84:a1:73:bf:56:a6:
18:0f:31:91:f5:cb:27:43:ee:a8:43:74:d6:df:66:
78:87:14:9d:66:26:47:bf:bc:c6:d4:34:37:77:5d:
84:01:42:7a:c1:2f:56:45:49:c3:10:ad:a7:41:2e:
be:b6:55:09:69:ac:c7:3b:c1:2a:d3:6c:0d:71:0d:
77:f1:d2:95:8f:a9:aa:13:32:5c:c8:c7:13:14:e1:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:52:01:BD:BD:9A:1F:8F:60:04:0E:47:3C:6A:2B:1E:BA:83:AB
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:eb:86:2e:e0:20:09:cc:75:01:62:0c:65:6f:1b:da:95:a8:
d0:d0:9a:fd:de:23:46:b6:8c:1a:a3:e3:74:6d:c6:68:6b:e4:
b2:e3:bf:4d:62:39:8e:88:bf:bc:07:3f:4f:8d:8e:88:e4:c2:
54:38:ba:27:08:45:6a:2e:4e:66:22:1a:36:1e:60:5a:27:19:
34:d3:8f:20:68:d9:c2:a6:55:4d:9e:f1:b7:65:19:00:f0:a2:
b0:16:72:ea:6d:29:a9:63:65:d7:cb:56:19:2d:6f:7f:5d:43:
91:d9:87:b7:ee:61:ee:d5:c7:7b:6d:88:0d:fb:9d:81:fe:f1:
d7:a2:d6:67:b9:4d:b6:b2:af:dd:76:28:11:6b:da:5f:c3:29:
07:65:16:22:16:ed:4e:94:63:a1:b4:8d:1e:39:6e:25:2c:a6:
73:0c:81:5d:4d:65:b6:50:26:51:fe:be:6d:00:36:09:97:f8:
f4:83:42:31:bb:8a:11:8c:fe:da:b5:dc:a8:f2:a8:7c:83:54:
d3:cf:19:83:0b:fd:e1:4a:38:37:f5:a0:ef:f4:e1:7c:15:0e:
ab:c9:b7:f4:45:c9:1a:9b:d4:85:c0:2d:5b:92:95:9e:9d:ed:
ca:58:05:c7:94:f3:6c:50:01:fc:c7:e5:2e:e5:3f:dc:0b:7c:
4e:4b:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:14 2026 by rpki-client