Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/IMZhH8hUYvC8yscvPfTFNRvlEN4.mft
File: IMZhH8hUYvC8yscvPfTFNRvlEN4.mft (raw, json)
Hash identifier: z60esPhhYFoEzS7F3RMM/G8FreJqKNl8fHIizyUeSnw=
Subject key identifier: 0E:86:D7:7A:24:FB:D7:41:28:3B:45:60:12:FB:0A:97:66:1D:15:FB
Authority key identifier: 20:C6:61:1F:C8:54:62:F0:BC:CA:C7:2F:3D:F4:C5:35:1B:E5:10:DE
Certificate issuer: /CN=20c6611fc85462f0bccac72f3df4c5351be510de
Certificate serial: 019CB05ABAB7CE6D3537C7AC368B5EC9986C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMZhH8hUYvC8yscvPfTFNRvlEN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/IMZhH8hUYvC8yscvPfTFNRvlEN4.mft
Manifest number: 0229
Signing time: Mon 02 Mar 2026 21:01:01 +0000
Manifest this update: Mon 02 Mar 2026 21:01:01 +0000
Manifest next update: Tue 03 Mar 2026 21:01:01 +0000
Files and hashes: 1: IMZhH8hUYvC8yscvPfTFNRvlEN4.crl (hash: DoEueMg766sMbFc9k4qKScPx/w07zJWhtH/YyGK9Gtk=)
2: qF2ZodUY37J4i-OZIa3cfOgc5Rc.roa (hash: wDYZQhbUNMQIgvk6fTW/5tpDGzxiDdiDkVT4f+UU/qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/IMZhH8hUYvC8yscvPfTFNRvlEN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/IMZhH8hUYvC8yscvPfTFNRvlEN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMZhH8hUYvC8yscvPfTFNRvlEN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:ba:b7:ce:6d:35:37:c7:ac:36:8b:5e:c9:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c6611fc85462f0bccac72f3df4c5351be510de
Validity
Not Before: Mar 2 21:01:01 2026 GMT
Not After : Mar 3 21:01:01 2026 GMT
Subject: CN=0e86d77a24fbd741283b456012fb0a97661d15fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:d1:e7:4d:f1:e7:68:ac:79:7d:6f:b4:e9:
0d:66:20:0e:e5:cf:3d:4a:2d:a0:06:40:0e:05:4e:
95:52:90:96:ec:e6:ca:67:a6:db:a0:6f:c5:ed:fb:
06:d0:cd:3c:23:35:89:ac:10:3e:b3:8e:47:d8:22:
7e:9d:05:e6:46:7b:04:21:91:3e:cd:b2:bd:a7:f4:
2c:6a:af:8b:91:d6:99:2b:01:0d:06:36:85:90:94:
29:51:bd:0a:57:04:af:18:4a:9d:1d:d9:51:42:b2:
cd:31:a8:5e:ae:c4:54:fd:4c:9a:d5:c0:10:5f:c5:
42:f1:aa:de:32:e3:d3:2c:89:b4:ff:26:6a:6f:39:
96:ff:e9:d6:9a:1c:88:c3:6b:5e:f2:b3:d1:d3:77:
8e:75:70:de:b4:2d:47:49:d8:6a:0d:d3:6f:b7:bf:
4c:5d:a0:72:48:a7:05:bb:0a:bf:56:45:b7:e7:9a:
6e:0c:81:f2:e0:91:32:78:eb:b0:74:51:a9:24:58:
e1:83:47:72:0a:41:dc:3f:06:63:dd:71:f3:81:e6:
40:39:1a:ed:76:a7:9f:af:1f:06:e9:13:71:37:87:
10:28:46:40:39:4c:90:56:1a:79:8c:d5:07:06:0e:
b2:51:19:44:6b:07:a3:a2:e2:4f:bd:1d:64:ce:9c:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:D7:7A:24:FB:D7:41:28:3B:45:60:12:FB:0A:97:66:1D:15:FB
X509v3 Authority Key Identifier:
keyid:20:C6:61:1F:C8:54:62:F0:BC:CA:C7:2F:3D:F4:C5:35:1B:E5:10:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMZhH8hUYvC8yscvPfTFNRvlEN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/IMZhH8hUYvC8yscvPfTFNRvlEN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/IMZhH8hUYvC8yscvPfTFNRvlEN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:62:36:69:79:70:ed:af:ab:a0:ac:c4:2d:92:e5:b7:8a:
62:14:60:37:7e:37:f8:f5:eb:80:3c:4f:a6:8e:59:c8:57:ae:
a7:c3:7b:16:c1:f2:0a:a3:d4:fa:5f:06:68:4b:b5:69:08:aa:
7c:da:46:e9:ca:9a:29:36:a5:0c:bd:e8:53:79:ca:8e:8c:0b:
c6:5a:43:ec:04:60:e1:f9:9b:8b:8c:15:5e:9e:a9:3d:d6:31:
3c:23:9d:e7:f9:16:6a:30:9c:bf:66:d6:c0:12:74:24:a8:b4:
f8:02:c9:bf:35:e2:81:20:d4:16:e8:5e:a3:a2:e4:64:fb:19:
57:f2:5b:15:57:44:49:fb:98:b5:34:12:0b:91:11:6a:94:20:
bf:44:3b:b5:e5:30:bb:85:b1:90:7e:1e:f5:4f:8d:89:52:cc:
46:39:59:ea:c0:cc:8e:3c:35:b7:57:59:e7:bb:eb:ec:0a:81:
00:8b:7b:67:0e:49:51:f2:fa:0f:42:38:8f:07:da:a2:39:8e:
5b:92:15:6d:b0:7a:0e:3f:61:60:83:e4:02:8e:79:c6:2e:ec:
5b:dd:8e:e1:e8:6a:07:8e:5c:54:01:0e:be:20:16:0c:48:26:
18:19:50:dc:7c:42:24:50:34:38:7d:9f:f0:22:a3:d6:7b:96:
0d:6c:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:48:04 2026 by rpki-client