Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: fgMH6BfoS15G1b5R65No2/FG58gW30MQdrr28R/OifU=
Subject key identifier: 80:E9:16:23:2E:88:A8:63:1A:E8:B6:8E:00:65:8B:C4:A6:FD:38:3D
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019CAC1045F7A97AD22991510348B9C44BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 102D
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: 76nkYdkAC0n8PeRrQq3DenwJHqyGAXSN7yBuIFSMkxI=)
3: RoT_BRy5K5T_EFywyXjf2sUOgfA.roa (hash: 3g9pqCZcoGTGtwQJjCoF4vdhAm5IX+/HPg+Sn5/5ZvI=)
4: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:45:f7:a9:7a:d2:29:91:51:03:48:b9:c4:4b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=80e916232e88a8631ae8b68e00658bc4a6fd383d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:21:dc:b7:27:fd:5f:8c:88:49:fb:86:77:
cc:8b:fe:fe:0b:84:8c:e8:b1:0c:a0:cc:c7:87:61:
4c:b3:c7:08:72:40:8e:01:91:7a:f3:c3:48:26:85:
c4:9f:df:56:42:96:4c:68:92:ae:bb:1a:8c:53:c2:
ae:06:d4:e0:ba:66:0c:aa:bb:85:c8:f0:38:10:e1:
8e:dc:33:02:51:c0:9e:f0:3b:53:f6:0a:52:fd:12:
7f:55:4a:d7:b0:08:81:27:68:47:7f:47:e8:c4:aa:
aa:0b:fd:cc:aa:17:8f:f3:07:d0:93:fc:79:72:60:
1d:8e:be:33:3e:61:62:f7:95:a9:0a:02:2f:58:9d:
00:54:25:91:0c:13:26:a2:7f:e2:62:ce:d2:74:33:
62:85:d1:4f:72:c3:7c:f9:3e:3b:38:d5:e3:cb:b8:
e9:d5:d3:5f:28:e1:a3:13:d0:55:61:8d:34:2b:74:
67:e4:16:5f:25:da:d7:e6:97:41:b7:cc:72:ec:32:
4b:6f:9c:67:84:1a:dc:40:8d:54:bd:52:de:ed:dd:
89:44:e6:38:54:d6:89:2e:d5:c1:90:57:34:5e:8c:
5e:09:30:c1:78:30:06:e3:7a:24:25:c4:e9:ec:1e:
34:45:86:67:2a:87:ec:0e:63:b5:7d:1c:82:ac:9e:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:16:23:2E:88:A8:63:1A:E8:B6:8E:00:65:8B:C4:A6:FD:38:3D
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1d:27:95:fb:de:e0:04:6f:9b:d1:67:31:83:29:7b:2b:d4:
5e:c4:a8:c3:de:0f:09:f9:0e:93:fc:13:11:66:60:b6:79:68:
4a:7a:1f:08:bc:06:24:03:23:20:2a:6f:f4:39:df:dc:f7:5e:
7d:f3:99:4a:5f:30:f2:92:0e:bb:e5:65:f4:35:49:46:9c:ae:
da:78:0d:7e:fc:c4:34:3f:4f:81:59:49:c0:f9:84:88:85:70:
41:c8:62:ad:de:47:c5:04:c9:22:a2:ce:ca:95:e0:51:c9:78:
52:23:5e:61:74:2a:d3:22:db:ed:4a:b9:62:1d:c5:e9:56:8b:
40:30:e4:49:2c:6c:66:fd:1c:c9:9f:f1:d3:9b:52:38:8a:57:
64:6f:27:25:9f:96:3f:92:57:ef:fa:26:7e:af:34:c8:8c:56:
da:07:15:4e:a6:89:97:d7:f6:a2:61:89:9b:32:31:b8:44:9c:
e2:0c:6b:51:e6:8f:ec:d3:59:dc:0c:bc:eb:d4:83:a1:95:13:
97:39:a8:0d:4e:29:b5:47:23:9c:47:70:e1:e0:83:cc:4b:f0:
c0:47:64:63:88:c6:7e:e1:8d:b0:42:f6:02:4e:21:ee:75:57:
bb:6f:21:08:a1:13:f4:51:eb:c3:74:26:1a:92:19:1b:e1:46:
27:a1:32:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:52 2026 by rpki-client