Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: JohF7B9h6jkSDPAKacyaWU5K7oVQE0XlCgrpM/WqWTA=
Subject key identifier: 86:25:92:98:4B:DC:26:1A:B6:D8:81:46:EB:16:F0:6A:7C:CD:8F:0C
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 019CAA59249EE156B6E3A984ECAF9D1AFE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 111C
Signing time: Sun 01 Mar 2026 17:01:34 +0000
Manifest this update: Sun 01 Mar 2026 17:01:34 +0000
Manifest next update: Mon 02 Mar 2026 17:01:34 +0000
Files and hashes: 1: 3yOJ06gfUKk-2XYdWHLIAlWgfEc.roa (hash: nXcj7d6dSu1swvQGzGjJKVLnGkefzXVXrhP3pXEGcwM=)
2: 7rB4dVkLekdvJu2WV1aBm26tfk4.roa (hash: dQXlWyfYcUEq4/cQMbVBV+QLb2ARWgSkORhGuX+vIpo=)
3: BDnFJ4jYiW4UB0OWqHm0E81ZFGk.roa (hash: kHvW0Bcsv+dU2wBHMm0QcL2FR83ZCdT4yyeLFS4eeP8=)
4: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: k45H8/yduRPQ8bzAVsiyVqMgoQHNwBcYy4iUpKwMEa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:24:9e:e1:56:b6:e3:a9:84:ec:af:9d:1a:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Mar 1 17:01:34 2026 GMT
Not After : Mar 2 17:01:34 2026 GMT
Subject: CN=862592984bdc261ab6d88146eb16f06a7ccd8f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:4b:53:d9:5c:63:d8:d4:75:48:28:61:56:
7c:a8:cb:55:9a:c5:09:94:57:cf:a3:f0:ec:07:aa:
1f:73:59:98:70:8f:92:db:82:8e:f4:9d:6a:d5:bf:
5c:78:99:4c:17:89:16:45:fe:d7:ec:28:83:37:e7:
d7:62:11:c2:70:08:b3:6a:1d:d8:d6:aa:df:3a:60:
20:17:1e:5a:01:e2:3d:b6:84:09:88:30:b2:12:bf:
8f:25:82:5a:15:bb:b8:87:9b:b6:88:7a:5c:1b:27:
a1:b4:19:20:7f:7c:96:7c:e1:d6:6a:8f:fc:93:61:
ff:64:89:96:ac:d0:c8:be:4c:aa:5b:14:71:82:37:
5d:99:63:27:26:86:8a:0c:75:9c:d4:87:b6:a9:72:
c6:e1:e5:1a:76:52:90:60:56:1a:1d:98:d4:ae:ae:
0d:4f:3d:d4:6d:89:93:bd:f9:6e:71:73:1e:64:45:
ca:5e:24:fe:7e:d3:d6:fe:fa:ab:da:01:b3:7b:75:
6a:df:2e:e5:61:7d:69:f0:85:10:53:4e:c9:d0:3e:
db:6e:ae:c7:97:19:6a:ea:ac:d9:47:31:a7:f4:af:
24:62:2b:14:d4:89:ac:98:8b:e5:fb:18:11:50:07:
60:2d:b6:71:f8:68:82:82:99:5d:94:ee:16:c8:ed:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:92:98:4B:DC:26:1A:B6:D8:81:46:EB:16:F0:6A:7C:CD:8F:0C
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c8:72:45:d3:16:a1:23:0f:c4:33:8c:2a:cc:ae:3c:37:e5:
b2:ae:05:10:99:ab:09:f9:14:02:8a:51:57:62:df:81:d4:1f:
f8:ef:cb:80:b3:35:ba:e4:2d:f0:3d:9a:38:17:84:92:77:67:
ae:3e:f3:99:80:e6:52:ec:79:af:3a:d9:a0:46:38:fd:5e:73:
29:b2:b4:ce:29:72:ca:25:5d:4b:f7:7f:7b:8b:15:06:d4:f8:
db:2f:c0:9b:aa:55:35:33:20:36:8b:ba:b2:f2:11:a3:61:67:
34:0e:1c:b8:f2:48:ed:2b:65:bc:29:76:db:45:66:ee:43:82:
20:a7:24:b2:96:b2:7d:5c:c6:37:ce:8c:23:4b:be:31:53:32:
27:49:83:49:74:a8:d0:1a:ca:86:1b:13:2b:96:c2:56:5f:01:
47:7e:ca:ea:f2:49:8c:2c:43:e6:bc:14:01:0e:bb:41:fb:92:
4b:f7:5c:28:5d:e0:77:e2:78:df:1f:dd:be:13:99:93:97:f1:
65:39:f7:f0:1a:14:2c:fd:17:19:2a:88:89:f6:16:e3:f4:6e:
a4:57:71:6c:8d:49:68:10:95:fb:26:bd:a8:8f:d3:4d:7d:5f:
e0:e9:73:c9:8d:ce:9b:b9:67:d8:10:21:9f:72:20:db:17:72:
7e:f1:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:01 2026 by rpki-client