Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier: NshdjckvFkpbnBZd5v3qSLGtcR/SS9Zojk1b63uPGQY=
Subject key identifier: C2:56:DD:75:C2:68:2E:7E:38:43:89:57:BB:A0:EB:0D:C9:68:A9:9F
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer: /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial: 019CAD230BE28A1F7674907952BAB5BA8213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number: 048B
Signing time: Mon 02 Mar 2026 06:01:20 +0000
Manifest this update: Mon 02 Mar 2026 06:01:20 +0000
Manifest next update: Tue 03 Mar 2026 06:01:20 +0000
Files and hashes: 1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: zXVkRXC/jTjkGfwnapZ9ltKdSC7GgKj7z3M2HcnvjdA=)
2: nZLcR_yXR-0QVOrPZOSeS_-bslo.roa (hash: B2ppS1gw4DWVMWucnYpphzHEsSRmHapQBZqWEMy4B3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:0b:e2:8a:1f:76:74:90:79:52:ba:b5:ba:82:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Validity
Not Before: Mar 2 06:01:20 2026 GMT
Not After : Mar 3 06:01:20 2026 GMT
Subject: CN=c256dd75c2682e7e38438957bba0eb0dc968a99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:cf:96:f3:22:4f:4e:ea:f3:21:4b:20:b3:
c5:5b:fc:1c:17:f1:73:d8:56:60:e1:28:ee:59:02:
74:c0:c2:96:81:d9:ca:33:a6:9f:34:f2:a7:e0:74:
3a:d6:7b:04:7f:c3:4e:26:4f:cb:53:dd:0d:0e:d2:
6c:f0:fc:a4:80:1c:da:5f:66:7c:e0:4e:7c:e6:d8:
04:20:9b:6f:3b:88:23:3f:4e:4f:ce:87:46:5f:ec:
1d:36:c1:1b:b9:6c:17:f4:1f:30:d5:d6:1d:93:8a:
6b:72:8d:6e:ed:d0:d9:34:83:1a:31:01:83:ef:6a:
4a:c5:69:a1:d2:4d:09:3a:25:6d:1c:5f:7c:8c:96:
a9:9c:b3:20:68:1e:07:44:0f:ce:fb:2e:22:e6:f4:
cd:8a:64:35:a3:91:dd:5e:52:83:86:fb:e8:e3:01:
46:66:28:1b:17:76:a1:df:b3:81:e2:80:15:43:2c:
37:74:35:5c:ca:16:5b:08:22:7f:4a:72:a1:de:82:
15:db:e7:82:fa:79:7b:1a:f0:90:b5:78:66:1b:24:
2b:c5:71:8d:de:35:84:07:71:15:e6:bd:85:0e:3e:
a3:1f:7c:a3:da:cf:56:a6:a7:42:22:08:f0:73:bb:
c2:5f:c9:eb:33:4b:80:09:96:a1:d4:0e:fc:ac:ad:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:56:DD:75:C2:68:2E:7E:38:43:89:57:BB:A0:EB:0D:C9:68:A9:9F
X509v3 Authority Key Identifier:
keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2d:47:c6:cb:9d:f0:bc:17:4c:2d:3a:ad:94:e5:3f:1b:b6:
4b:7d:50:39:b2:f2:3b:c8:e4:78:7c:81:69:7a:dd:f7:f8:6e:
4a:54:aa:39:2c:9b:b9:e1:91:a9:f6:26:e5:92:6b:5f:da:84:
9b:25:2f:b8:02:1c:60:d1:29:d7:e4:bf:eb:9a:69:fe:d9:79:
32:e4:84:7a:13:3c:57:50:07:cc:01:d2:47:8d:5b:4e:2f:90:
f8:7d:34:02:7b:bb:09:6a:c0:e7:59:55:08:88:b0:be:d1:3b:
3b:65:18:54:a2:be:d5:ff:96:1f:44:23:af:5e:df:30:ec:b5:
18:90:cb:06:a3:5a:a5:b6:55:13:21:e5:a9:48:3a:d1:00:2f:
83:75:ba:c7:72:37:3f:97:6d:bb:88:ba:4b:c3:f3:dd:66:0a:
62:47:32:01:58:be:f7:e7:d1:bb:a4:1a:eb:a1:bb:cf:da:de:
53:4c:3d:ec:25:68:c7:47:29:70:34:78:b8:58:14:b3:cb:e8:
15:2c:c0:ca:0a:12:80:ae:b9:04:4f:68:29:f8:76:d7:22:fe:
56:32:48:08:df:89:fe:17:13:f3:b7:42:5e:e6:2d:0a:5c:93:
8c:25:2c:f1:31:8d:05:17:39:5d:46:e3:65:93:24:83:e9:da:
be:fb:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:38 2026 by rpki-client