Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: kEsAB5fRVQq+GE0HxsmNXHrB8+FJD/Sf3+M9LN/ek0k=
Subject key identifier: 6A:44:EF:36:09:C2:CB:36:4F:90:41:F6:F9:3D:3F:7A:C1:4F:01:E8
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 019CAB3462FA9630166EF5C09EA9C738DF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 181D
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: TzmjVgvFms0Gtoqgjz7ZmYdjHXH5GidCoQvBjaAkZmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:62:fa:96:30:16:6e:f5:c0:9e:a9:c7:38:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=6a44ef3609c2cb364f9041f6f93d3f7ac14f01e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:e6:5c:70:46:7e:8d:e8:d9:06:37:ff:f2:
a8:fc:b4:78:7f:e1:89:e3:58:70:1c:bb:b6:f5:af:
c3:e1:1a:fc:e0:20:81:2c:5f:7f:85:4b:46:d6:1a:
5c:65:80:98:14:04:0f:ca:4a:a6:1a:7a:82:06:f3:
ab:31:45:d6:69:be:dd:94:1a:f3:de:da:69:96:bf:
92:f1:94:15:c3:8b:22:86:7e:f5:08:df:12:f3:c6:
4e:5b:12:43:1d:c8:d1:42:83:d0:09:65:e7:2b:1a:
a3:a4:05:36:a9:6a:b5:20:c4:40:db:cd:6a:ef:2d:
82:0d:ee:43:13:2c:3f:68:a9:95:cd:f0:73:0b:d4:
aa:2d:c2:42:cb:57:7a:93:03:e1:71:af:8c:f5:af:
13:0f:c4:b1:17:1c:f3:a0:e8:6c:c3:08:af:56:5b:
7a:7a:16:98:ed:d4:1a:98:2f:a4:ce:6a:66:9c:75:
72:19:2e:73:08:a6:8a:f0:de:69:60:43:a0:23:36:
d0:ac:c6:7c:87:09:29:84:fc:10:c2:96:94:34:ee:
d9:0d:a7:bc:2c:04:2d:4a:9e:ea:fc:3d:31:4e:b8:
a9:4c:71:84:90:38:03:37:87:da:fb:84:40:84:40:
22:45:73:21:a3:68:65:cc:9f:e1:6d:7e:ce:24:ed:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:44:EF:36:09:C2:CB:36:4F:90:41:F6:F9:3D:3F:7A:C1:4F:01:E8
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ba:42:82:e3:52:f0:db:5b:8f:6e:15:82:60:cc:c5:a6:32:
2f:f2:b3:6a:82:ef:12:43:07:d3:29:67:08:4b:fc:70:a0:74:
bb:b9:f1:6b:05:cb:50:d7:e1:51:a0:8f:ec:79:bb:c2:c9:b2:
9e:ef:27:6c:a4:a3:1a:21:14:94:0b:29:ed:66:54:88:b6:68:
4d:13:ea:85:d7:8e:64:cc:99:f3:e4:af:f6:5a:fd:0d:44:4c:
70:b1:fe:fc:80:7f:54:f2:b0:21:11:a9:77:e2:8b:57:49:fe:
3c:71:94:67:b0:26:ae:0e:49:17:63:5a:a1:82:ee:51:12:a3:
d3:cf:fd:04:71:bf:dd:45:d2:d3:5e:bd:c3:e9:df:8c:42:49:
d5:e6:a5:ef:67:12:0f:60:7e:9e:2f:01:92:b2:80:0d:7f:4e:
1a:ed:ef:c0:37:ac:7c:42:a8:df:6c:6c:ac:a2:c2:5f:f6:0e:
31:03:f8:3d:77:39:7e:7b:d2:26:66:f0:ec:d1:e4:e1:36:01:
c1:bc:20:d5:82:c2:87:56:25:e0:78:3e:d1:8f:79:45:09:6b:
96:65:07:5b:38:b3:53:da:22:a5:e7:20:4e:f9:d0:dc:46:59:
46:2a:09:94:16:6f:f8:e1:5a:82:e1:55:0f:9d:4d:75:c4:9e:
51:97:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:44 2026 by rpki-client