Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: XaqFpUMyCFOBWRzn7PYmwgF3DuShRyApo8is6BfOZ20=
Subject key identifier: C6:E7:42:80:5C:21:7C:48:8B:EF:8F:77:AD:70:A4:DB:7D:45:C7:9E
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 019CABD8F5AF822A483A8B2C0227F2E9DAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 054B
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: Qdr+ztwEun1CGUkzUpAXqeH4/sgNoC+n1LpOAp6qfG0=)
2: Ii6wwqE-ee-CRo8hd4o4rFr06SY.roa (hash: Ta+qzjiPCmFIkSNPxrZ151ZxOc0vieQ/q0h1vtHvBVQ=)
3: Xw9tVyuPLJRqNzDdc3wN3NyB9IA.roa (hash: nQERgQoU1LcOAXZoSGkitr1IswJcoffSa8r7ceEkAJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f5:af:82:2a:48:3a:8b:2c:02:27:f2:e9:da:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=c6e742805c217c488bef8f77ad70a4db7d45c79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:af:a8:d7:6f:38:fb:97:89:28:04:64:fe:83:
0e:23:95:c1:1c:de:fc:fc:54:e7:37:89:1e:49:0d:
20:b8:39:d1:cc:74:b8:47:eb:d0:06:d7:f7:0d:f6:
4c:ad:17:25:6b:63:b6:b0:3a:f8:7d:fa:94:4a:b0:
0c:37:cd:ed:9f:fe:8d:d8:12:34:3e:ab:66:49:24:
19:6a:9b:fc:bb:79:61:e5:3c:b5:25:52:09:41:b3:
b6:6a:0e:f0:06:3e:eb:61:54:2e:b4:45:1f:ef:55:
d2:e1:42:4d:da:a7:57:d4:d6:74:84:d4:5f:2e:58:
bf:dc:3e:28:ca:c6:e8:34:4d:65:f1:e8:86:1b:ba:
f0:92:1a:e4:3e:08:9f:c0:b7:f5:d4:7c:04:b6:ed:
a9:a7:70:b7:88:6f:9b:de:8d:bc:48:3b:90:ab:1d:
7f:e8:a1:05:69:07:ea:fd:8b:57:5f:a4:5b:f4:ad:
5e:58:03:32:e4:fd:93:06:57:27:1e:26:03:c7:55:
38:a4:a5:09:74:c9:c8:e2:1f:b5:3b:7e:b0:83:b4:
36:9c:ea:92:3f:a8:1c:24:57:5f:85:91:e4:e6:c4:
e6:ac:80:8a:67:0c:ed:4f:ee:4c:99:c2:ff:a0:cb:
15:ab:b3:ea:f1:7c:cb:dd:a0:74:2e:9d:fd:73:f4:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E7:42:80:5C:21:7C:48:8B:EF:8F:77:AD:70:A4:DB:7D:45:C7:9E
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5a:d0:3e:40:b4:a2:46:1f:69:97:aa:42:bb:b6:91:43:c8:
43:3f:6f:4b:10:a6:ad:43:e6:2a:57:66:e6:1d:66:b1:8b:60:
0b:96:67:1c:31:0f:20:ab:11:98:86:7b:50:16:2f:46:f1:9f:
86:81:17:90:13:45:82:fd:24:22:fc:4b:7c:22:fe:ad:c1:43:
19:a2:d4:cf:d2:26:4f:ed:3b:ae:ab:51:56:99:f9:0c:62:4a:
70:19:19:f2:6b:00:9f:42:4e:aa:9a:d1:da:98:2d:04:a2:b9:
36:90:b0:1d:5a:b5:b6:fd:6b:d9:44:7d:61:9f:49:d9:25:f5:
73:0e:ae:4b:84:9a:84:54:db:94:42:2b:2b:1c:24:52:99:7e:
47:59:db:f4:75:92:f1:eb:59:c6:18:f8:f2:31:a1:0f:df:2d:
2f:73:29:d6:e0:76:46:e9:37:02:fb:2a:23:06:37:6c:a0:5a:
ff:14:65:bd:f7:fc:ea:fc:af:c8:27:46:b7:85:b4:80:df:0b:
9a:1b:d2:bb:aa:8d:71:92:a8:a3:4f:65:46:a8:34:11:ee:16:
bc:b9:52:9e:1e:60:be:61:ac:d2:55:d6:b4:e5:4f:e2:b7:fa:
ce:be:7f:ec:7d:c8:39:81:46:88:ff:d0:c1:6a:f8:04:a3:e0:
be:81:2d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:57 2026 by rpki-client