Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: AsgmNyWt5rlEK474OuBH6Cd4e+334F4jAksdJtRdg9s=
Subject key identifier: E7:06:A3:52:6E:26:C6:8B:E3:08:DC:0B:77:BC:08:C9:77:7E:02:BE
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 019CAD22EFBAA3EC18D34B19AEC32F7B7532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 063D
Signing time: Mon 02 Mar 2026 06:01:13 +0000
Manifest this update: Mon 02 Mar 2026 06:01:13 +0000
Manifest next update: Tue 03 Mar 2026 06:01:13 +0000
Files and hashes: 1: QdViC720LUGk8rbETFc7icn6Tx4.roa (hash: wxpHqs3D6Qy6qVLUeFjXp0nQiZFcnT7PBeNSBBjzhuM=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: vAvx+xCcukW1cPCT/LRQLrbZ1LETzRG0yMkWcrXbsSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ef:ba:a3:ec:18:d3:4b:19:ae:c3:2f:7b:75:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Mar 2 06:01:13 2026 GMT
Not After : Mar 3 06:01:13 2026 GMT
Subject: CN=e706a3526e26c68be308dc0b77bc08c9777e02be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:10:0c:8f:f0:c2:b6:6e:24:63:43:b5:c5:
46:4f:26:b1:22:89:11:b8:d3:01:c1:b9:dd:85:42:
3b:b1:75:4a:94:93:f4:75:fe:1a:a3:e9:6c:5b:6d:
17:8f:b5:2d:19:7b:3e:ea:34:29:0c:ac:b8:bf:ae:
6e:61:76:41:e1:c5:d6:f2:77:9c:70:0e:d7:93:20:
4f:2c:b8:b8:ba:c5:83:64:b2:fd:3f:ef:a8:e4:34:
01:02:05:37:0a:f4:27:98:9d:d3:21:55:c1:9e:12:
2d:bc:13:b8:a0:13:af:45:97:7d:9e:d7:c7:2a:fc:
89:55:8f:80:dd:3d:2f:31:df:b4:cc:82:dc:90:01:
b8:b7:b5:3a:73:5b:09:ba:98:0d:21:c9:3e:eb:6a:
9e:aa:f5:aa:ba:0d:b5:32:5c:88:54:d5:9a:f9:b4:
62:28:75:f0:ff:88:05:d0:4c:d3:2e:9c:24:3d:48:
0b:18:84:0b:9a:d8:15:08:a6:49:f9:0d:1b:85:95:
18:c5:1a:a1:3a:ad:ca:c1:b9:68:d9:07:d4:2c:20:
db:cb:e8:0a:d9:93:22:f8:bd:bd:2d:27:7b:89:74:
a5:13:d0:5f:c2:51:1c:b5:d6:90:e2:c5:de:6f:41:
5a:a1:e1:be:3d:dc:a2:12:17:51:57:42:d3:98:96:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:A3:52:6E:26:C6:8B:E3:08:DC:0B:77:BC:08:C9:77:7E:02:BE
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:82:06:b1:22:68:b3:30:4b:a1:37:32:ad:e7:b0:ed:fa:63:
00:92:24:bf:a0:ce:d2:81:b3:af:f5:51:e4:00:cf:10:ef:79:
81:02:22:d7:82:e3:b3:aa:bd:7e:04:06:70:5f:6d:53:83:f3:
d8:41:8b:9b:6b:f1:10:e9:b4:c8:7f:f0:17:c6:88:aa:cc:35:
4f:e1:e4:2e:c3:2c:79:e2:eb:8b:54:ab:38:6a:e0:9f:16:11:
15:b2:e5:2d:0e:3b:9d:35:23:e6:c1:a5:d8:29:07:85:12:ba:
c5:83:ad:4d:36:fc:54:05:8f:13:55:32:ed:ad:80:b5:41:5f:
84:50:97:5b:fa:80:67:7d:dd:e9:24:7f:54:b9:1f:53:5b:14:
dc:7a:10:68:9b:35:46:f3:88:6d:9e:1c:5f:b9:25:80:3e:50:
1a:cf:62:ad:73:dd:45:26:45:93:48:d7:4e:95:ac:d3:08:59:
f1:ba:f5:4c:a6:30:ff:ea:4a:11:e7:70:b0:cb:09:fa:1f:b5:
02:85:5a:c0:98:70:a2:16:40:74:54:5a:1e:14:6b:ee:9a:6c:
de:c5:51:ca:53:28:ac:98:61:7f:c3:26:0c:ca:f9:8c:d1:a1:
e2:9b:c3:1e:87:c1:28:46:e7:4e:3f:60:50:40:93:2d:5c:2d:
27:16:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:45 2026 by rpki-client