Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: 7v/KPgewcyZ/rZ5psZ3LCok72ARAzHnuVAAoxMMnhYM=
Subject key identifier: 83:E9:6F:FB:F3:51:82:7B:ED:11:76:1F:D9:30:DF:34:1E:38:BC:1F
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019CABD96F2157A7DFB2511A38C4C8CD7138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: 0N9Uxg8fR7Nyrc_u_br799CvD3w.roa (hash: uOgfIOlH3kKqWEbcGQ4cdmk7+jvbyKuPe/nGe0W6i/Y=)
2: 1-Sx_jXGlBlQATOQ5K8nNNuSrK8M.roa (hash: J1Zq7teTeIcSMmJFWstQ0vbrU882ZzSFqMi7WzJyvRs=)
3: H5n8y-hjXK24thn7egOUXJVZq0U.roa (hash: 7e4HU9h3i7rv/jpYmlCXJPYTMbRgwEsVE53RAePC3yc=)
4: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: hAB99VdpciktcdWCtVhpDFMy6NtPWy3QM7+ZFek8mHs=)
5: LdznHUG78Bp9I2Dc43gteEDaBDQ.roa (hash: +dMfTpGhmS4SyoMfOpUT8Rsq5hQCLovibVxni1srWPA=)
6: RNhe93FE6qEUnmI7KhC9QCPUKRE.roa (hash: +sF8WWUCiojfxzR+V4lEJDjHf4WmTy3H3whX2T288mI=)
7: ppWofpQW50E3NHiSmyWgHR4ILv8.roa (hash: jJuUGZv8Uf/IpTklcwXKZKYqGPYZrZ2MeGb3oJWtKa4=)
8: rpJcxi0ezsz1auru1a5EKwFCe6U.roa (hash: xVRYtB7vqri8W1Qa+Q3R/0ZiBHYX/xC5bFNeI81rOlw=)
9: sPNr1HqSOW9gPQD2njRcNYsq_nU.roa (hash: Rxx1CbY9JZ6FmKclFr3hxanK7IPpIKnWMWk/29TEk0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6f:21:57:a7:df:b2:51:1a:38:c4:c8:cd:71:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=83e96ffbf351827bed11761fd930df341e38bc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:f8:8f:30:31:87:d0:b9:6d:b3:20:f1:01:
81:f1:08:01:f8:3a:a1:e7:61:d3:7c:1e:6a:34:f0:
91:5c:fa:e3:0f:bf:9e:3a:79:57:9c:ea:a0:c8:e4:
59:c6:53:a7:89:b9:aa:59:e5:11:a9:f3:2b:7b:b0:
3c:63:e2:0e:00:c2:a5:2a:36:ee:20:a3:54:86:e4:
51:7d:91:5d:19:8e:5c:7f:29:d8:b9:52:51:50:19:
4f:a8:be:42:9d:42:94:d9:e9:07:50:79:b8:1f:bc:
c7:57:2e:9b:5d:35:8c:44:c0:b5:fb:2f:02:a6:fd:
a7:aa:cb:fa:1b:e1:67:3c:fb:63:0a:7a:f8:a1:03:
f5:6e:08:69:99:cb:89:b7:e4:a7:ca:a7:a2:13:04:
4f:4e:24:8a:b0:c1:db:a7:eb:a4:9c:21:1b:36:ce:
5a:10:65:06:a8:7f:bc:80:4b:2f:77:d5:4f:4e:7a:
bd:5d:c1:ed:e3:4e:3a:05:67:bf:3f:2d:92:9c:c4:
f4:82:24:61:b5:56:06:bf:d0:87:cd:b7:ca:4a:1b:
9a:b6:6f:51:82:a3:c4:b0:e5:ad:ae:db:a0:50:a7:
b5:09:e1:a3:5d:21:cb:09:26:05:01:f6:2d:7f:18:
96:40:b2:bf:1c:fb:2c:14:f3:fa:b7:78:71:74:18:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E9:6F:FB:F3:51:82:7B:ED:11:76:1F:D9:30:DF:34:1E:38:BC:1F
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:53:47:91:11:f6:0d:3c:ca:a2:e1:2d:69:2f:22:e1:2a:b4:
db:bb:c1:90:54:27:83:4a:9b:51:69:df:30:2e:67:7b:9f:29:
1a:83:de:e9:54:a2:14:bc:a6:72:1d:a5:36:e5:41:43:20:15:
96:ad:3a:47:9f:2f:cc:56:6b:ec:cb:fb:15:6e:26:4c:4f:69:
e5:b4:e4:f3:b0:81:c2:e1:fa:f8:a8:aa:ec:22:74:b1:a3:7f:
5d:0a:c8:32:4d:9c:b4:fa:49:11:de:53:11:d0:79:45:81:ef:
76:5d:18:5f:b6:bf:13:a7:de:41:ad:6e:86:97:a2:33:31:e9:
d3:e1:c0:0c:73:2e:b2:08:13:3c:a7:ed:79:8d:5a:b7:01:2e:
90:66:3b:89:70:36:42:60:b9:2e:00:08:1a:04:a4:0a:fa:ae:
fc:e7:63:c8:57:8c:21:25:04:fa:be:a7:f3:b0:6b:ab:01:84:
78:4f:5b:ed:58:51:82:b8:b5:0a:47:14:53:4d:f4:e7:74:38:
89:5b:62:e3:ff:5c:ee:3a:d9:2a:b3:8a:d4:26:68:43:76:5d:
8b:05:24:33:f9:b6:d3:a7:88:55:50:8f:e0:5e:f7:34:56:39:
61:a8:2a:0c:7e:e7:7a:e9:3a:88:30:ca:50:06:d7:e1:57:15:
e5:3e:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:08 2026 by rpki-client