Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: pRCa5zVh3zCnYutbn572FdDw/md/jwqbdPGHEdf/dwg=
Subject key identifier: 43:5B:C4:61:62:58:39:95:E9:E7:BC:F1:68:DD:48:19:E5:34:4C:B7
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 019CAE358E9CA730239C32BE4AF9D4F604C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:01:11 +0000
Manifest this update: Mon 02 Mar 2026 11:01:11 +0000
Manifest next update: Tue 03 Mar 2026 11:01:11 +0000
Files and hashes: 1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: SxCcfrKvHlrNjH/R/M1GH5cMppl2n0qDW2KO9QbPhVo=)
2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:8e:9c:a7:30:23:9c:32:be:4a:f9:d4:f6:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Mar 2 11:01:11 2026 GMT
Not After : Mar 3 11:01:11 2026 GMT
Subject: CN=435bc46162583995e9e7bcf168dd4819e5344cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:67:15:c6:1b:74:e8:4f:b7:b0:02:5b:38:
a0:82:9d:d0:78:71:96:4a:34:e5:55:98:6e:a6:84:
b9:cd:c6:2f:7a:a1:11:b5:b4:21:eb:b4:73:e6:6c:
41:fe:ba:e4:61:f9:23:26:0e:59:61:67:8e:10:0d:
9d:02:7b:e7:0a:d4:2b:83:60:f8:cd:f2:aa:a6:e3:
a8:02:d0:f6:87:82:bd:4d:96:ad:d6:10:95:9d:ba:
3f:32:20:c3:a9:2a:07:17:b3:cb:55:f1:b1:b4:89:
d4:43:bd:03:88:1b:82:e9:c6:a6:35:8a:a5:1a:c3:
67:ea:d9:cb:bf:aa:6f:a4:4e:7f:32:0f:3f:07:4b:
c1:89:14:46:5b:57:d7:6e:f4:17:18:28:33:72:5c:
32:62:ff:28:ee:e1:4b:ea:49:e3:a1:e7:6c:76:55:
d0:02:e2:1a:4c:2d:b6:a7:11:db:e7:79:92:a1:ee:
54:04:e7:ad:98:47:98:c6:3c:ba:19:f5:ee:25:25:
d8:8c:1c:fc:77:67:40:2c:33:b2:f3:48:16:39:34:
06:30:cc:04:b5:a7:25:80:b0:26:7d:23:05:8f:8d:
ad:c0:3e:a2:d0:35:f6:ea:b9:c0:40:8c:27:21:51:
98:6a:8d:59:e6:ed:0d:30:ff:3a:1c:8f:18:f3:ce:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5B:C4:61:62:58:39:95:E9:E7:BC:F1:68:DD:48:19:E5:34:4C:B7
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:34:9d:53:4f:2c:c7:4f:12:85:74:9e:6e:52:a8:95:17:21:
11:a4:59:ec:ab:49:96:e5:ec:e1:03:d2:55:c7:0f:bb:51:0e:
5c:34:bd:6e:ea:8e:83:b3:8b:11:7f:3c:ee:82:99:67:03:70:
7d:5c:a0:f0:45:39:79:ae:1a:98:73:10:75:a0:70:c7:5a:86:
bc:f9:09:09:4a:74:0c:26:4e:78:84:3e:5f:80:95:84:47:67:
15:29:fa:f4:b9:4e:a5:5d:32:a7:06:b2:7f:39:28:8c:78:e1:
b6:14:62:28:cd:75:58:89:f1:b3:88:73:76:b9:aa:ad:7e:19:
ca:b4:4d:3d:71:69:cf:0b:44:7f:8f:67:a3:e3:8b:d1:7f:73:
e9:2c:50:26:55:6c:5f:a2:48:77:b2:83:2f:f0:50:62:79:ba:
cc:a3:02:4d:48:8b:c7:f9:51:d3:15:85:0d:3b:1b:c4:b6:38:
e6:23:2d:e6:e5:6e:e9:3c:9a:d3:5a:78:8b:6e:e2:12:16:28:
f2:42:8b:9a:7f:2b:cd:1a:6d:3e:95:77:a3:d8:3c:8f:39:0b:
4f:dc:9f:0a:a1:20:1f:00:ae:98:d2:de:b8:f9:4b:fc:c5:89:
35:4f:4c:80:0c:8b:25:8a:4f:9e:46:ce:18:77:32:db:6e:2f:
f3:7d:2a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:40 2026 by rpki-client