Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: wTLGc7IycHmmzlGcWA1Ed2ZFBW9l4uxRCIAGjBUMPtw=
Subject key identifier: 9F:56:3D:71:60:BC:12:AC:D3:41:F5:12:6A:FF:8C:44:D3:9E:66:6C
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 019CABD9216B0AB00EAC56BBFB9376AF8482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0978
Signing time: Mon 02 Mar 2026 00:00:59 +0000
Manifest this update: Mon 02 Mar 2026 00:00:59 +0000
Manifest next update: Tue 03 Mar 2026 00:00:59 +0000
Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: qVuHSwWzWlMd7jm5WYZHMZLxeGGs8nWeH+n14vND2/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:21:6b:0a:b0:0e:ac:56:bb:fb:93:76:af:84:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Mar 2 00:00:59 2026 GMT
Not After : Mar 3 00:00:59 2026 GMT
Subject: CN=9f563d7160bc12acd341f5126aff8c44d39e666c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:18:49:08:1a:1d:19:ce:e0:c1:01:06:42:
8b:1a:f7:3d:30:27:80:27:60:88:e2:71:d6:f3:22:
7a:5b:0b:f4:3f:62:b2:4a:f4:45:e5:e0:47:bf:7d:
b3:43:43:bf:2e:05:91:cd:39:95:20:e6:73:c9:63:
05:99:ee:2f:3b:9d:04:14:d5:b2:ef:54:b5:1d:5e:
a9:60:4a:e2:08:25:f1:c5:16:6a:b3:9e:7d:fc:ee:
db:3d:3b:3c:94:be:71:bc:9d:ea:f8:0e:e2:8e:e6:
c5:0f:17:b3:b0:cd:4e:97:01:b2:5b:70:b4:82:96:
8f:de:d2:d5:48:7a:3d:c1:46:b5:44:34:79:64:7d:
58:74:00:03:10:10:2d:27:9c:78:d0:ca:a4:c4:5d:
95:45:56:9d:7c:e6:f4:5e:67:ed:c8:4d:8a:ad:a1:
3b:d9:3c:9a:8c:0f:0b:53:1d:e7:b1:34:9b:cd:80:
a6:27:72:c6:f7:d3:90:96:25:7b:cd:0e:32:09:12:
c6:27:4d:1e:11:1b:a4:cf:29:ab:b7:39:13:04:40:
43:88:95:d6:f2:21:b4:93:3a:53:25:fd:4b:72:31:
5f:14:3f:fe:05:6e:c9:4f:16:3d:68:a9:3d:5b:ac:
aa:c5:ad:57:77:e7:0a:a8:f4:f6:c5:18:1c:02:d6:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:3D:71:60:BC:12:AC:D3:41:F5:12:6A:FF:8C:44:D3:9E:66:6C
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:df:97:16:b9:47:45:06:1c:07:b2:b9:58:78:97:a4:e4:cb:
ff:fa:8f:c9:0f:dd:52:a4:4a:c4:a9:0d:5a:9b:7f:63:43:23:
b4:08:ab:b9:00:0e:6a:be:8b:47:70:b4:27:4e:ad:89:db:db:
42:eb:ed:45:7a:68:fc:10:7a:41:44:ab:dc:3e:09:fc:f5:56:
a1:d0:92:da:5a:93:a9:f2:ce:ce:e3:f7:7c:d4:ce:89:fa:a5:
6e:46:fe:13:56:18:b5:7a:2e:2e:56:c1:bd:5a:b8:d5:fd:1a:
4f:22:35:46:58:0b:4c:3f:c1:77:47:0e:7d:f0:6e:cc:a7:1e:
03:55:df:69:30:b1:4f:37:b9:c9:55:b3:0f:2f:29:3f:9b:60:
88:13:7a:d1:6b:3a:eb:f3:39:a0:af:80:df:16:9a:15:2e:84:
e2:49:3c:db:fa:d6:ed:91:7a:55:41:80:a5:1b:9e:ba:f0:ea:
1d:9f:1c:78:83:bb:0d:81:96:6c:cc:fa:a1:9a:ec:02:3f:0c:
7c:57:e1:9b:3c:a0:f6:b3:87:a5:56:0b:61:7c:07:66:56:c5:
6f:67:37:a4:43:3f:f1:ce:e2:52:03:86:d2:39:63:62:ab:a9:
3a:76:83:c6:5a:0e:b8:ca:5d:11:10:64:f8:ef:e6:81:a1:eb:
a5:65:59:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:09 2026 by rpki-client