Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: 4qGdjKrBVAvZQDvF0rX1r5iLFPuZ7GZCb/k2O4NfVHE=
Subject key identifier: 3A:14:F2:C6:94:21:EE:FC:A8:04:E8:07:5D:48:DA:81:87:22:01:10
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 019CAB6B399C60CD4F34421C86B71F3FFC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 1651
Signing time: Sun 01 Mar 2026 22:00:56 +0000
Manifest this update: Sun 01 Mar 2026 22:00:56 +0000
Manifest next update: Mon 02 Mar 2026 22:00:56 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: exlhPfcIf6fLwFlyVBi7c3/bYo1GaPH3Seic+N6zB3o=)
2: WX9t0xmXDR4uM2A7AQHLj3QPI_4.roa (hash: juszrqxHpM/25SYd4SpIiGanqn2fYHKuBqSkrqz21Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:39:9c:60:cd:4f:34:42:1c:86:b7:1f:3f:fc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Mar 1 22:00:56 2026 GMT
Not After : Mar 2 22:00:56 2026 GMT
Subject: CN=3a14f2c69421eefca804e8075d48da8187220110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:c3:9f:fe:cb:5e:27:d2:66:6b:09:ac:de:
d2:d6:af:51:53:15:c4:1d:28:2f:2c:8d:5a:29:c9:
38:37:22:f2:61:9d:af:14:14:a5:ee:f9:41:84:2f:
fe:d9:4b:85:05:bd:08:62:68:ad:f0:3c:5b:b9:d0:
3a:af:9f:4a:77:20:80:5a:5c:16:0b:3e:2f:d0:81:
a1:dc:b5:88:b0:65:bf:6a:a7:71:40:d8:63:f9:13:
a8:78:95:fe:f8:17:a7:15:29:6d:16:63:07:68:56:
57:1d:9c:f2:8f:49:1f:34:23:5e:9b:9b:d2:1f:d1:
5c:67:00:1d:91:49:1e:94:a5:ed:d8:40:7d:12:69:
0f:fb:b0:94:a8:04:61:e6:db:8e:28:d1:27:e5:57:
3b:cf:d7:d1:cd:f9:d5:fa:28:62:85:36:47:6e:a2:
e7:1d:d0:b7:79:a7:0c:c2:a6:9c:40:31:9a:09:f7:
a1:19:6f:72:0a:28:28:44:a4:a9:ab:e3:98:6a:e5:
ea:5d:9d:3a:77:b8:6d:e6:69:bf:3f:ab:20:1e:3d:
eb:1d:e4:86:27:b3:0c:92:88:27:04:a0:d0:8f:60:
1a:bc:33:75:23:08:7d:8f:03:8f:6f:00:01:51:3c:
23:a6:f2:fc:95:87:d9:95:02:0c:c4:02:65:03:53:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:14:F2:C6:94:21:EE:FC:A8:04:E8:07:5D:48:DA:81:87:22:01:10
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:0f:c8:74:df:cd:d4:3e:aa:15:eb:9d:97:32:06:ac:0e:
2f:ce:eb:ce:93:d2:ee:f7:2b:59:f4:ee:88:7e:83:59:21:e4:
46:82:71:95:25:b3:ce:e2:11:4e:23:db:15:76:b4:f6:3d:48:
42:ad:5b:ae:34:1c:cf:c4:37:11:56:6a:13:3f:e7:32:09:35:
d3:9e:05:dc:4d:70:3c:f9:00:f0:d0:92:25:ee:2b:1c:fc:ba:
f9:3d:25:c1:e7:08:f7:4f:ba:24:fd:9e:ab:e0:9a:5b:bf:90:
eb:26:c4:a6:e8:c0:2e:a8:87:3b:ea:4b:0b:d0:eb:44:b5:be:
97:e8:63:72:26:91:e1:ff:fd:11:9b:e9:bf:67:c7:f6:cf:7f:
e1:b2:bb:dd:9f:6e:82:4c:11:eb:d9:e6:af:d1:26:30:4c:05:
17:a7:61:a3:bb:9a:97:e6:e3:64:52:c2:9a:49:af:17:ac:e4:
d0:2b:07:6b:5c:17:53:cd:92:3c:09:05:f9:62:b6:fa:4b:05:
54:c1:20:87:a2:03:64:67:df:ad:83:fb:fc:34:f9:1b:7c:47:
94:c6:8d:b2:d5:83:39:c4:50:da:77:7d:6d:da:ce:75:a2:df:
70:57:a6:cf:f9:0d:82:b0:f1:ab:4f:6c:8d:bf:74:c6:70:86:
21:3a:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:39 2026 by rpki-client