Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: l4u5FwMQFzyZNtwTk3v0kb+TRuUjNJWCeERGBwNNdk4=
Subject key identifier: BB:1C:79:AB:3C:1A:FB:F2:2E:8D:D8:EB:E0:9A:84:35:5A:DD:E5:1B
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019CAD230FE9FDF11BCBA0A8708CB6B7C899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 06:01:21 +0000
Manifest this update: Mon 02 Mar 2026 06:01:21 +0000
Manifest next update: Tue 03 Mar 2026 06:01:21 +0000
Files and hashes: 1: 5qofx5kn-ofCIj9o3NGivX2oyoc.roa (hash: 7NfNoXJjBTrvr3E7539ztDCcU2EbYZAvEuO82OgvQXg=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: 2sWYB1t1hLmgRj/PE5JYNxoQFmyc7yk2EpW5or8xFQs=)
3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:0f:e9:fd:f1:1b:cb:a0:a8:70:8c:b6:b7:c8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Mar 2 06:01:21 2026 GMT
Not After : Mar 3 06:01:21 2026 GMT
Subject: CN=bb1c79ab3c1afbf22e8dd8ebe09a84355adde51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:c2:18:e3:0c:d3:b6:f6:6e:56:1f:d3:aa:
57:91:ff:58:ab:8d:6b:8e:92:b4:7d:6e:d2:c4:38:
f2:be:0a:5e:e1:fb:d0:63:fb:bc:db:28:68:20:86:
57:df:5a:65:2c:bd:96:29:e8:f4:53:60:7e:cd:c7:
05:b0:25:5f:27:01:cd:ec:18:2b:1f:81:1a:8f:ed:
cf:e8:c7:24:b6:38:50:a0:55:2c:f6:d2:97:b4:af:
9c:f4:72:a1:ba:fb:7e:ea:e0:ca:33:27:f9:15:fe:
c4:e6:21:0f:e8:54:6f:ee:07:70:e9:17:bd:f8:67:
b9:16:97:5a:ae:be:1e:7d:80:47:27:fc:6e:db:61:
1c:2b:eb:77:9d:84:1a:15:12:00:a0:85:99:8b:99:
0e:2a:24:e2:f5:f3:2c:a0:42:57:09:e6:ea:43:e9:
60:a5:07:b5:75:de:38:0b:c5:07:e1:f3:d3:e8:ac:
f9:d9:d0:6a:21:19:d7:c0:74:d8:73:7e:4a:9d:c2:
6f:60:c8:80:30:2d:c4:7f:80:a7:ec:01:e1:e4:58:
91:7c:49:1b:71:59:77:7f:7b:ac:64:fa:40:15:0a:
42:41:75:21:37:27:ee:91:8b:73:ae:f1:a3:6d:c0:
9b:4f:a0:08:53:82:b9:cf:62:49:7c:c4:a3:b1:73:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1C:79:AB:3C:1A:FB:F2:2E:8D:D8:EB:E0:9A:84:35:5A:DD:E5:1B
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4a:c2:f4:f8:82:31:32:4d:56:20:93:ef:27:10:fa:28:cb:
b6:09:e1:69:82:27:10:d5:73:65:d3:bb:36:4e:a7:9d:35:37:
ac:96:f6:2d:00:b6:94:e1:af:c3:61:af:c7:2c:f1:19:d3:3c:
c6:c3:9e:d4:6b:fe:96:6b:5f:2c:fd:b8:20:fe:9b:06:82:ab:
96:b4:33:f2:2f:56:24:ef:3d:f7:de:9f:bc:14:50:87:4f:fe:
a3:f4:b2:63:d7:f0:39:48:7d:d3:7a:f5:a3:d3:31:21:f8:ae:
f7:ae:3f:5f:70:92:dc:21:1d:a6:de:66:67:f7:13:5e:1d:88:
3d:ef:6a:47:e6:f2:0f:d4:6c:c6:0d:a3:74:1d:18:2e:33:7b:
63:fa:6c:e5:af:71:83:df:5f:ff:d9:72:bb:18:02:b7:50:91:
0f:9f:05:c6:68:f5:61:ce:a3:01:e2:c3:a3:3b:cf:a2:ae:fc:
77:2a:e5:bb:46:84:0f:5a:5d:ba:8a:54:af:28:25:e8:09:20:
5f:9a:31:8d:ef:65:dc:f6:32:ba:14:73:7b:db:e4:43:9c:0a:
bc:2a:59:06:9b:10:8f:f1:60:9f:de:f8:3e:70:8c:3e:7c:65:
ad:ed:d6:91:ca:26:6e:04:f4:b7:d7:ad:f3:12:fa:9c:72:53:
01:09:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:59 2026 by rpki-client