Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
File: iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft (raw, json)
Hash identifier: PdLtScFPvneeTsKSEh2uptJ57dka03rrx91sIvNHpq8=
Subject key identifier: C4:69:F3:06:17:E0:2E:A8:46:56:00:E0:C1:67:7F:82:C0:6D:39:08
Authority key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
Certificate issuer: /CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Certificate serial: 019CAEDA518CCCF692F8A67743B8B7D31A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
Manifest number: 06F0
Signing time: Mon 02 Mar 2026 14:01:09 +0000
Manifest this update: Mon 02 Mar 2026 14:01:09 +0000
Manifest next update: Tue 03 Mar 2026 14:01:09 +0000
Files and hashes: 1: C15rJO_bJRsVwZitZCSgh0qDMBk.roa (hash: rFrB85LTHmEZy4HaNwBvd/+Qzbn2vKgCWTAZhL3DIhc=)
2: iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl (hash: NVLy9mICWoXgeh6lYuwyKRwrzXxFkTHADBFSn+I3ZMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:51:8c:cc:f6:92:f8:a6:77:43:b8:b7:d3:1a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Validity
Not Before: Mar 2 14:01:09 2026 GMT
Not After : Mar 3 14:01:09 2026 GMT
Subject: CN=c469f30617e02ea8465600e0c1677f82c06d3908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e6:a8:e0:d3:a2:22:fa:5a:d0:02:8a:e1:fc:
7d:19:60:75:17:ce:13:13:cd:ed:a9:3e:62:24:4f:
12:a6:e3:f9:c6:0b:1d:fd:b9:5b:b7:88:74:67:fb:
d3:aa:38:ef:fd:bc:8b:c3:40:c2:a3:3d:f8:d5:41:
2c:5d:ff:a4:1c:f7:0f:a0:83:e6:e9:42:eb:80:7b:
4b:eb:e0:c3:ee:ea:84:96:94:57:b2:65:5e:f4:5c:
21:8d:75:00:b7:fe:8a:de:88:b5:68:79:e8:9a:ec:
7e:a4:59:3b:28:bd:6c:57:78:f3:d4:8e:ed:d8:3a:
4d:38:7e:33:20:c7:2c:b4:b9:07:88:d1:15:a6:12:
44:03:29:c2:66:24:c8:b6:ba:72:e0:04:7c:04:84:
7e:22:de:67:4a:0f:44:ad:a0:cf:a9:56:c7:0c:81:
40:06:1f:8e:2b:d2:95:d5:ba:b7:f5:2d:d6:78:9c:
d1:f8:81:be:20:0c:75:64:0b:31:d2:f9:eb:0a:22:
76:ab:df:06:8e:af:14:ea:d3:b8:f3:e9:3e:0e:0c:
60:b5:6e:ec:8d:cc:45:36:c9:59:ed:df:db:e7:33:
87:fc:26:64:e4:17:5f:fd:62:ca:df:43:16:ef:15:
aa:f5:fc:c3:06:0c:ac:86:b2:ca:ae:76:31:a5:4a:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:69:F3:06:17:E0:2E:A8:46:56:00:E0:C1:67:7F:82:C0:6D:39:08
X509v3 Authority Key Identifier:
keyid:88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:87:e1:1a:70:1f:9b:e0:2f:cd:83:aa:dc:f9:e4:c4:86:2d:
6b:2e:1f:af:ec:4f:18:d3:cc:f0:6f:35:da:8a:44:d0:0b:88:
22:a8:7b:fc:9a:a6:1a:e2:2d:34:59:a0:db:3a:a0:52:65:bd:
8e:fa:24:a4:95:08:2a:90:f5:ef:ba:9f:6a:eb:a8:44:10:87:
3b:c6:c9:a0:ba:40:1f:80:c8:73:7b:76:fa:88:4d:8a:c8:80:
0e:3d:25:d5:25:47:03:01:2f:59:19:ba:10:0e:0c:91:d7:de:
09:3c:ad:ef:ec:1f:d1:a4:51:70:f7:dc:4a:fe:9f:01:d6:81:
3a:a5:35:ea:0d:d7:9e:1d:3d:a6:59:ed:60:39:f7:94:9f:fe:
3d:d9:b7:5a:40:49:a4:90:1a:e6:e7:79:e4:7e:dc:33:f4:f9:
f4:78:34:bc:80:b5:c8:40:8c:d5:5e:92:5d:e6:5c:02:12:f5:
f4:dc:0a:d8:5a:22:33:ae:79:0f:16:d9:64:a7:de:d8:13:70:
4c:c8:35:dd:79:d2:7b:d0:14:74:93:72:65:75:97:86:2a:35:
a5:40:3c:0c:27:c9:ad:65:e0:66:3a:88:ea:45:46:7c:dd:7f:
39:96:a6:33:05:b5:89:ea:ff:ad:63:c8:90:03:b3:06:04:26:
f3:1e:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:42 2026 by rpki-client