Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: JlphxY6RNB4pkgeUb187F7ZoMPxtbGsvPxnEcZKB7yc=
Subject key identifier: C7:72:BC:3A:A5:0C:D0:1C:4A:5F:51:BD:79:01:E9:2A:1F:67:EB:7C
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 019CACB53EEBF31AAC9DA3B0CB0309A72D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:25 +0000
Manifest this update: Mon 02 Mar 2026 04:01:25 +0000
Manifest next update: Tue 03 Mar 2026 04:01:25 +0000
Files and hashes: 1: ggAemkutc9Uj5OtMRscidUTfz_w.roa (hash: 2GT85Q2Z+evTjw6gSLFrkGmMogQndg6JWok6dkddHCY=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: wmEEQK5jtm0CJFZ7vIkFbkTv8+CfYM5ux3wqtSfbdz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:3e:eb:f3:1a:ac:9d:a3:b0:cb:03:09:a7:2d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Mar 2 04:01:25 2026 GMT
Not After : Mar 3 04:01:25 2026 GMT
Subject: CN=c772bc3aa50cd01c4a5f51bd7901e92a1f67eb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:08:cb:52:6d:94:7f:77:92:45:52:77:b2:
38:6a:39:d1:df:c5:48:12:c0:76:bb:26:cb:a7:b8:
e2:86:ed:05:a5:0a:ee:92:cf:c2:db:9a:8d:50:d4:
41:a8:12:43:71:48:7f:fe:21:1f:ef:dd:25:57:5a:
e3:1b:52:58:8a:61:c4:6f:36:ca:8a:33:49:b7:fa:
83:d3:f1:5c:07:d1:0e:30:b3:3f:ca:d1:90:45:86:
6a:02:29:de:39:33:52:06:07:f9:ef:64:0c:0a:5a:
3b:6b:6e:98:98:d1:2a:74:c9:14:b7:a8:8a:f1:4f:
b6:8c:2e:76:0c:7b:d7:4e:17:21:c1:ba:83:42:96:
57:38:81:56:10:8c:b5:61:cd:66:d9:6d:99:45:b1:
62:a5:4c:8c:7b:fc:53:ab:bb:61:d2:94:dc:50:6e:
51:69:e6:93:ce:55:7a:ae:5c:a2:f8:33:1f:a2:78:
0a:42:8f:bd:e6:2d:a7:4f:34:66:77:b7:0e:f8:f5:
ec:e1:19:8b:bb:27:79:eb:ca:9a:da:5b:1c:56:d9:
28:28:cd:76:2b:b4:ae:25:d2:3c:f5:76:4f:51:a5:
72:07:c3:97:a8:4f:b1:ce:5b:75:2f:aa:ee:6d:9e:
1c:b1:4d:6e:c1:65:82:59:a2:eb:49:76:68:ab:73:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:BC:3A:A5:0C:D0:1C:4A:5F:51:BD:79:01:E9:2A:1F:67:EB:7C
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:43:f0:24:36:a0:79:5c:59:f9:8a:68:ce:20:bd:d3:18:3f:
ba:83:6a:91:3d:67:02:71:32:15:ee:e1:39:24:73:e5:e7:71:
3a:c7:dd:58:1b:1e:1f:f0:47:8e:a8:dc:08:13:2b:4b:75:1f:
34:fa:23:d2:ce:0a:d5:b7:6b:5f:cb:cd:27:b1:0e:57:64:e0:
3e:d4:31:3b:d4:cc:6c:90:7d:b2:63:d3:df:97:de:20:3f:82:
f1:67:b5:9f:07:48:02:a7:c5:7f:64:ba:5c:ab:5b:cf:e2:01:
c8:6c:91:ac:02:65:08:56:13:ca:bb:13:b8:c9:81:59:9f:01:
34:a9:d1:e2:c7:88:b4:09:42:19:07:67:35:5e:7b:a9:06:7c:
9a:6d:79:27:15:ac:d1:96:c1:c9:cc:aa:b6:12:29:9a:46:7c:
20:b7:41:67:a6:bf:22:85:2d:b1:00:0d:7a:ee:b7:55:ea:b0:
76:b0:40:17:6a:e2:3e:8e:0e:af:db:a7:f7:bd:82:2a:d9:d4:
c7:e0:84:2c:79:03:5c:ee:12:a0:04:64:2b:99:75:16:16:8d:
10:ee:48:22:f9:fe:aa:3a:73:14:b2:52:11:dd:31:2c:bb:96:
32:dd:60:ab:f0:54:d0:fe:bb:77:2f:35:21:ff:74:3b:6d:9b:
ef:cb:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:28 2026 by rpki-client