Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: Vh2dByz2itDOubDHWGt7AdHDZKIayHUFlIME7/d/BrQ=
Subject key identifier: A4:B7:3A:C4:63:43:A8:FD:BE:05:7A:47:D8:D9:1B:78:36:DC:A6:F2
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019CAD9071AE4DA4209D31D09553DBD20689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 1064
Signing time: Mon 02 Mar 2026 08:00:50 +0000
Manifest this update: Mon 02 Mar 2026 08:00:50 +0000
Manifest next update: Tue 03 Mar 2026 08:00:50 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: hb7l9WX9ikhHsk4UpqxveWvV47Km73L/xq3F0ubZdXA=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:71:ae:4d:a4:20:9d:31:d0:95:53:db:d2:06:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Mar 2 08:00:50 2026 GMT
Not After : Mar 3 08:00:50 2026 GMT
Subject: CN=a4b73ac46343a8fdbe057a47d8d91b7836dca6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:cf:12:7a:5c:f3:1f:32:8b:31:65:1c:4c:
e3:12:48:17:cb:49:c0:8b:b7:07:3a:48:aa:24:ed:
d5:a0:20:d8:a1:09:f0:06:2b:42:0d:58:db:6a:4f:
7a:67:91:cf:9b:56:aa:6f:62:4d:77:f1:f9:70:51:
11:01:71:12:7b:c3:dc:0e:82:e2:00:6d:ea:45:27:
88:c2:de:ca:52:bf:71:ee:98:0f:09:7b:91:62:21:
18:54:0c:7f:9b:03:54:04:7e:23:82:c1:87:9e:b0:
1c:8e:dd:b7:c3:e3:ef:30:30:08:91:0f:24:fc:2c:
91:92:f4:89:08:71:07:07:aa:34:1f:09:68:40:39:
42:f8:e1:de:8a:76:64:a0:ee:3d:ac:b1:91:47:5b:
eb:00:b2:73:77:28:b6:cd:a8:9e:45:71:b9:e9:0e:
f6:04:e2:f5:3b:24:a0:3c:fb:c6:1f:ef:34:a0:47:
10:7f:43:e1:a9:6f:cf:62:a1:7a:35:5c:29:bf:ee:
84:3e:84:f4:66:4b:50:31:d1:1e:d2:7a:91:61:8f:
77:75:19:89:ff:1e:ea:dd:c9:8b:d9:31:ac:45:fb:
9a:d9:32:f8:de:dd:1c:60:e2:ab:c9:f7:fe:3a:31:
d9:09:82:ba:c6:e4:ef:28:ca:0a:d7:50:a9:38:9b:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:3A:C4:63:43:A8:FD:BE:05:7A:47:D8:D9:1B:78:36:DC:A6:F2
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b1:25:f3:00:5f:c7:a1:c0:59:2b:be:fc:4d:4a:5a:c5:7c:
2e:0b:7e:6e:e2:87:a8:7d:ea:89:4e:f1:48:1f:67:ba:17:83:
70:a5:5d:05:ad:06:23:d9:74:59:3f:9a:a7:44:5f:a2:c2:bc:
9d:cb:c2:ec:11:4b:87:34:ab:03:59:e3:63:be:d9:27:c3:8d:
af:c9:21:9e:08:1d:52:78:26:c8:47:15:a8:09:91:6d:41:2b:
ae:f9:d4:8e:d5:a2:44:03:31:10:cd:60:4e:bd:32:98:5a:63:
bd:1b:7f:32:73:17:a6:39:26:04:c9:cc:34:49:21:34:49:b1:
16:44:a6:19:20:aa:49:ef:28:97:82:06:2f:0e:58:d3:b6:22:
55:60:f4:7e:5b:93:83:32:59:01:bc:51:ee:4b:00:13:ec:e0:
39:bc:34:7b:6f:d8:db:c2:74:a9:d3:90:b5:69:67:1d:80:6f:
a0:07:75:2c:24:56:ad:d2:1d:ae:d7:70:30:59:13:b4:3c:96:
85:3b:22:7d:f4:10:43:2d:69:49:c4:75:4b:c2:76:ae:3b:c2:
d4:0b:d3:65:30:ed:b8:29:f8:a3:0f:7e:25:aa:ed:54:1e:92:
fd:74:ca:bd:49:d0:34:50:52:9d:87:4e:6f:25:e1:33:9a:47:
56:35:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:16:32 2026 by rpki-client