Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: LcuSwyRtP2xbUpi/iclvF79HdcfyIyz9e2nS79U7Iiw=
Subject key identifier: 21:08:1D:B9:5F:F4:F8:E0:4C:90:7C:C0:B4:73:BC:A5:1F:42:E2:58
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019CAAC6B9285759F7B8C89264EC41A78834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (hash: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk=)
2: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: 3Gj2Jany35w3vPr3xM7wAzy0MiVdbQoNOuAEjvnXZyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b9:28:57:59:f7:b8:c8:92:64:ec:41:a7:88:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=21081db95ff4f8e04c907cc0b473bca51f42e258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:1d:67:a0:fa:db:a4:02:1a:87:ad:08:22:
a6:e4:ed:72:d4:d6:ac:0e:59:b9:da:a1:af:ae:57:
09:8d:ac:e6:78:30:16:a8:53:13:03:44:49:0c:9a:
2b:60:ac:28:be:2f:45:aa:5c:dd:5a:53:d6:42:03:
bf:c6:9e:18:9d:83:7a:27:8e:a6:0a:5c:f9:ff:dd:
05:80:a9:28:dc:b1:e2:79:75:ee:d2:f7:74:98:3f:
b6:93:af:5c:37:53:c1:fc:0b:37:f5:94:a1:40:9f:
06:99:8f:6b:59:70:19:d1:a9:1c:86:b8:ac:b2:cf:
de:e9:38:bd:1c:9f:2b:b3:15:52:01:b1:7c:96:ea:
b3:70:f1:92:95:68:89:00:f3:3d:0e:f1:be:06:f4:
69:d6:44:63:38:d9:b8:74:cf:a5:7c:fe:2b:35:23:
59:b5:0f:c8:67:e7:76:80:62:16:03:65:5a:1e:22:
95:aa:90:71:43:76:e7:a1:20:7a:e9:e0:c0:c6:d2:
27:3f:4a:28:a9:93:3d:6e:62:1b:d8:cd:dc:61:a9:
4b:68:50:af:cb:0b:d1:06:c1:08:56:25:88:32:bd:
79:b5:07:c7:8c:0b:ce:fb:cf:72:13:be:67:78:20:
47:37:ef:95:95:5b:ce:9b:19:67:7c:a2:38:9a:5a:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:1D:B9:5F:F4:F8:E0:4C:90:7C:C0:B4:73:BC:A5:1F:42:E2:58
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b9:44:e6:17:2d:4d:74:f2:4d:07:58:4e:3c:6c:75:9b:46:
b5:83:d7:5d:ad:85:1a:dc:ca:ea:ce:24:f8:3e:ae:d6:27:89:
26:14:ad:d2:da:11:cd:14:a9:c4:62:e0:4b:5b:38:f9:b9:d3:
be:9e:91:50:e1:75:23:c2:ee:80:c6:58:2b:19:7c:32:63:45:
9f:6e:0e:30:21:b2:7b:e4:6b:50:9d:14:d9:80:5d:43:08:ef:
62:ce:b0:73:7c:83:f1:97:2a:77:a1:41:16:50:ca:e6:6c:7c:
54:4e:49:09:ab:6b:05:f6:3d:d1:28:db:15:96:68:eb:17:01:
bf:b7:5d:9b:89:09:aa:ef:6f:ad:a6:54:8c:3b:8d:44:90:46:
74:78:9d:ff:bc:05:77:97:01:66:5a:c6:68:47:7c:5f:39:25:
0f:a7:35:76:a2:9e:5b:ff:32:a1:29:12:cd:a0:9b:48:af:e2:
42:d9:43:3a:5e:17:1e:c5:b1:bc:19:46:81:c2:5b:46:1e:ad:
81:3a:fd:e1:32:f1:f0:75:f6:ac:da:f2:9e:55:dc:ca:25:11:
be:da:84:e9:e1:c5:7c:ef:81:63:60:8e:9e:4b:89:61:db:ff:
35:a3:ea:0c:fc:c5:25:51:47:32:fe:3c:d9:18:42:9d:dd:13:
9c:a6:a6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:31 2026 by rpki-client