Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: lnWZM0XuITx2i2OkIrsqJADcKmPIwoVaImcc1bbd3JE=
Subject key identifier: 52:2C:44:4B:BD:B9:0E:B8:F9:15:37:37:8F:90:49:61:02:53:1F:B2
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 019CACB4E45D8F15D09032F8E060CAF2B7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 0455
Signing time: Mon 02 Mar 2026 04:01:01 +0000
Manifest this update: Mon 02 Mar 2026 04:01:01 +0000
Manifest next update: Tue 03 Mar 2026 04:01:01 +0000
Files and hashes: 1: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: qxcGEvSQEYnpEZsal6I8x156peeGbt4MHT+tZwOsRkk=)
2: x3cjJVpLnZG-uty2qSffRSOuoQE.roa (hash: Tj4Pb94uCkpkUlh6u2jzVddtm53J1LKyupR5P1TGR+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e4:5d:8f:15:d0:90:32:f8:e0:60:ca:f2:b7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Mar 2 04:01:01 2026 GMT
Not After : Mar 3 04:01:01 2026 GMT
Subject: CN=522c444bbdb90eb8f91537378f90496102531fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:00:e1:9d:1a:80:70:f5:45:1b:5a:8b:1b:
eb:94:07:98:4f:0f:6c:c1:33:ae:0a:15:66:08:91:
37:0f:b5:87:39:6f:50:9f:21:cd:1a:12:ae:0f:cf:
c5:13:99:4e:70:aa:8f:84:b4:95:8c:a8:f6:0f:9c:
05:df:a9:5a:13:c5:37:08:ed:49:17:f0:e8:20:eb:
88:8b:f4:17:c6:6d:69:29:64:8b:42:52:26:a6:00:
4b:f1:f2:e9:60:1d:32:08:68:07:3e:b2:67:b0:e5:
86:6c:73:ff:af:1b:5a:f3:1e:a6:fa:cf:5e:1c:40:
82:ec:57:f4:09:48:b7:e0:3a:f1:70:b6:05:85:60:
67:9b:f6:05:75:f3:85:52:2e:15:4c:19:dc:0e:41:
72:28:13:2e:1c:7e:53:6e:b6:d9:04:f1:69:dd:36:
9d:e6:62:85:6e:2a:14:a7:c2:c6:4c:65:e8:89:68:
3b:8b:cd:db:97:e2:36:95:09:76:53:ef:ca:a2:64:
1d:f0:ea:67:85:98:fd:f3:de:7c:2d:c2:20:6f:9a:
6f:2a:13:55:4d:d2:45:db:b0:1d:6b:eb:5f:11:25:
9f:56:62:ab:11:9f:37:ac:70:79:88:71:73:b2:f2:
c7:d3:96:6f:2f:d0:0e:bc:63:2d:42:77:89:fc:b3:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2C:44:4B:BD:B9:0E:B8:F9:15:37:37:8F:90:49:61:02:53:1F:B2
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:81:f5:c0:c3:67:03:17:8b:47:9f:03:33:b5:8c:f0:a5:33:
bc:40:98:66:7f:8c:ce:8e:b5:1d:45:8a:84:10:1b:13:29:a5:
cb:8f:5c:85:19:fa:c6:dc:c2:07:ac:d6:89:0d:5b:24:39:c0:
d7:bc:7e:7a:8b:e3:b6:44:c5:1d:ca:5e:fa:0a:5d:e7:e0:b4:
2c:89:7a:6e:9d:9a:3b:11:d1:8d:91:e8:02:bf:8d:0b:00:ce:
16:bc:1f:29:5b:22:c0:9b:09:20:6c:d6:4c:dd:75:62:62:29:
3b:a5:9c:cb:e5:b7:32:08:9a:ca:6d:f1:d6:13:8b:c9:59:e9:
8b:a1:62:b5:16:ed:93:45:cc:38:0f:89:91:e6:ed:bf:d4:7c:
b3:b5:90:2b:ee:23:e4:13:9d:f5:6e:c6:a4:85:96:ef:bc:98:
eb:00:cf:4f:9a:75:5a:98:a8:a9:62:b2:1a:e6:1f:09:d9:16:
70:f7:43:ba:17:1e:7b:da:45:b2:5b:0b:23:23:54:cd:79:db:
d3:de:e9:46:30:72:0b:5d:e7:95:99:20:87:35:7e:e8:cf:06:
a3:94:2c:46:21:0c:38:59:79:13:6d:7e:f0:e2:ac:7f:a6:e3:
d5:73:28:b7:ea:d0:5a:9b:fe:ba:84:1a:6f:1f:3d:ad:65:49:
b9:81:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:47 2026 by rpki-client