Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: lXmu2TpL/HAQMJ9qcNYHN8t3I1zn3ldeLVXj5QpxpQQ=
Subject key identifier: FE:DF:8D:AB:E3:F5:13:90:35:E4:DC:1A:B4:73:BF:0D:7F:48:15:6B
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019CAAFD814CB979E8890FE8C0B034283817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0CBC
Signing time: Sun 01 Mar 2026 20:01:06 +0000
Manifest this update: Sun 01 Mar 2026 20:01:06 +0000
Manifest next update: Mon 02 Mar 2026 20:01:06 +0000
Files and hashes: 1: D91yhkWJzNy0wIqj24fZRWkjXyo.roa (hash: gzLfISz+cY1sCnwSJWKi4LD4Qz5Rm88X/kCLR5D2X/M=)
2: PCk3nkxvRoLF1gDbkxnDCrjgGa0.roa (hash: /z0KQlvJI+XaH2sEgQieqsdlMwCig0WcE8tOTdtJWRQ=)
3: XVjNtKOnJpcmis7Nf1eAthdQZB0.roa (hash: P0IN+5mFqrGT5cbJJWFNGnDNpinkIhBbzTCg+cVZWjI=)
4: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: wUFPMddF/78aDqLICdyCRQZiLXESzlepDZpXXqL3AAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:81:4c:b9:79:e8:89:0f:e8:c0:b0:34:28:38:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Mar 1 20:01:06 2026 GMT
Not After : Mar 2 20:01:06 2026 GMT
Subject: CN=fedf8dabe3f5139035e4dc1ab473bf0d7f48156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:2e:fc:1c:60:08:f2:54:ac:eb:e3:23:19:
2e:0e:ff:15:bf:fc:b5:bc:8e:70:99:b7:83:85:aa:
e3:b8:54:df:a7:b4:6b:68:05:06:4b:05:12:9f:a1:
29:cb:65:8f:c2:fb:b1:c7:26:50:21:7e:02:07:39:
6d:4b:f2:38:6c:c5:48:c3:61:eb:be:94:a7:09:77:
8b:69:e8:dc:4d:1e:21:e2:a7:1e:13:46:a1:75:53:
11:24:35:56:ff:ca:d2:26:7c:02:18:22:3a:42:7a:
dd:5a:48:7e:e7:4d:b3:eb:8f:87:24:65:77:48:32:
71:01:4d:59:66:65:6b:c5:6d:6a:68:4b:3f:46:2b:
85:e2:d8:48:6a:6f:c5:6f:1f:c0:9b:6c:3c:a1:c2:
da:c4:4d:d3:60:de:db:44:6b:14:f7:ce:97:5f:a6:
c3:5a:e8:ea:63:25:db:85:bf:0e:68:e6:1c:89:97:
82:d4:51:63:69:3a:44:fa:64:83:88:3b:80:99:30:
6b:e6:9a:2a:0d:ad:bf:70:07:48:65:82:45:51:21:
9e:c0:16:a3:fb:28:cc:2e:07:d3:5d:81:30:88:a2:
ac:93:54:f5:3a:e0:87:f8:46:0e:00:c8:aa:3f:46:
20:d3:55:2c:e3:a2:67:32:b5:d4:91:f8:8b:7e:1c:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DF:8D:AB:E3:F5:13:90:35:E4:DC:1A:B4:73:BF:0D:7F:48:15:6B
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f6:3c:49:3c:b9:32:96:53:58:a4:fb:af:54:59:4e:2a:95:
90:41:32:05:ee:31:5c:2b:a1:e6:8a:0d:f0:91:94:ee:af:aa:
09:82:28:10:8f:02:6e:27:18:9a:5e:3a:50:59:f1:53:f8:7d:
62:33:94:d6:2b:ac:0d:6c:38:f3:ef:f5:8e:dc:09:1b:3b:8f:
fe:75:c0:64:d7:c6:89:a8:8a:81:d4:ab:88:c5:c4:e1:2b:13:
72:f3:1e:5e:c7:fd:cc:a6:67:f6:e3:67:ae:a1:9f:50:86:19:
1f:99:68:30:53:10:c1:63:f3:aa:ff:09:7e:9a:08:f5:f9:bf:
b9:dd:7d:3f:40:d2:66:ed:70:df:c9:0c:95:f6:17:cd:42:a9:
ae:56:87:88:9f:eb:10:aa:c2:62:a4:9f:c5:dd:f1:63:4a:eb:
28:04:3e:ec:3e:b9:c9:8d:10:71:6f:9e:3d:d9:e4:30:ce:25:
2f:77:91:57:0b:d4:02:c3:e6:9b:d1:cf:fb:16:7d:30:cd:d2:
02:35:eb:8a:d6:e1:74:06:32:e1:1d:ac:87:d3:69:ba:04:b4:
57:c2:be:e4:53:27:2d:7e:4e:2c:27:4b:a8:77:6e:cf:36:c1:
b4:9a:47:b0:7c:17:6c:85:1d:62:4c:b7:f7:7c:3c:00:f3:d8:
1f:30:a6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:43 2026 by rpki-client