Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
File: iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json)
Hash identifier: Ru5p3Yp707+koOgBHx2wnSEmOJbLt0FKZMW30Fv+Pf8=
Subject key identifier: 8A:F7:3E:8B:77:35:32:D8:9B:E9:34:2D:C0:8A:1A:53:34:DD:F9:E6
Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
Certificate issuer: /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Certificate serial: 019CB0920CA08F26AFFD8557FE127C2AB625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
Manifest number: 033A
Signing time: Mon 02 Mar 2026 22:01:27 +0000
Manifest this update: Mon 02 Mar 2026 22:01:27 +0000
Manifest next update: Tue 03 Mar 2026 22:01:27 +0000
Files and hashes: 1: 4x52VzYQnWKO_ybg9X988TnYMsg.roa (hash: P/+424hxb13nk4lYvoJNoDe5orzU5YP9hjQuy88CbIw=)
2: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: 3KaDlxt1i0YT8HeijISsJsCBSWLP16MJmssdt4naBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:92:0c:a0:8f:26:af:fd:85:57:fe:12:7c:2a:b6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Validity
Not Before: Mar 2 22:01:27 2026 GMT
Not After : Mar 3 22:01:27 2026 GMT
Subject: CN=8af73e8b773532d89be9342dc08a1a5334ddf9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:3a:63:d7:1c:ce:1e:6b:d7:df:ba:39:60:
6a:f3:26:2b:cc:1a:90:3f:84:bc:85:89:f4:7c:71:
8f:39:04:ff:01:1f:a6:fc:22:57:d9:bd:44:81:38:
81:d9:bc:0e:b2:15:14:74:6f:e4:f2:dc:7a:e4:0c:
f2:37:08:7f:a6:63:39:b6:d6:78:84:81:61:29:b9:
67:f7:e2:ef:96:82:5f:94:b4:8c:5f:78:59:84:95:
6b:06:30:71:d1:e9:94:13:8a:23:20:2f:27:75:61:
98:58:8f:71:64:23:fc:36:16:99:f8:64:b4:ed:84:
d7:d3:c2:4d:e4:88:90:ca:15:bf:0b:e9:f0:2e:fb:
0f:12:7f:4d:2b:76:44:6e:9f:dd:37:04:59:25:01:
5f:4e:2a:11:37:45:fd:cc:53:43:0a:e6:54:8e:72:
7f:17:45:c7:2f:7d:53:84:e2:a5:a7:77:10:95:f2:
6c:be:28:c6:ed:c4:e1:91:da:1d:d5:f5:d7:37:b2:
07:90:0e:53:0a:49:1c:d5:b4:0c:6d:1b:5c:06:8b:
6c:4b:a9:07:59:c1:0f:96:6f:79:8d:a7:b3:0d:35:
e0:5e:a5:59:b3:ea:82:02:55:dc:d1:91:7e:ec:38:
70:28:54:ce:0a:7b:4f:5f:b4:75:13:0c:83:60:cf:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F7:3E:8B:77:35:32:D8:9B:E9:34:2D:C0:8A:1A:53:34:DD:F9:E6
X509v3 Authority Key Identifier:
keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ac:24:12:ec:48:93:86:7c:46:59:fc:af:7d:65:c9:22:d3:
9b:e0:a5:c0:b0:66:e3:ad:e5:28:74:9e:01:c5:f8:d0:25:f7:
99:3a:fd:c0:af:e8:8e:69:e3:76:e7:17:a6:81:83:e9:a8:5f:
f7:76:66:33:7e:8a:19:b0:2e:c7:82:07:1c:7d:bf:62:6e:84:
b6:ea:32:93:af:81:b8:51:8f:82:3d:1d:90:3a:13:9a:90:b8:
de:7b:7e:23:dc:27:09:72:8c:c7:e4:9c:1d:bd:c6:3f:fc:b5:
90:9b:e7:0f:bc:ea:3c:54:27:42:66:b4:3d:fb:87:f2:d2:4b:
c6:20:cc:04:5e:a1:59:b0:a5:4f:06:f4:bb:01:a5:6d:b9:e3:
f0:24:07:ac:d7:ee:81:2e:95:9f:68:e3:71:90:0f:93:4c:5b:
52:5a:9c:1f:0d:d7:73:f4:99:1d:34:90:c9:5b:e2:f0:09:77:
77:33:04:68:f4:6d:b1:df:d9:21:7c:bc:02:b7:15:d6:17:92:
80:65:09:29:07:8e:17:38:91:16:d4:a6:3b:0d:4a:ea:75:cc:
0c:ec:31:c5:de:90:07:6e:0b:64:12:7f:d1:c3:de:9d:df:d0:
43:84:2c:5e:f6:71:de:d5:91:db:ac:bf:43:1c:c1:38:ae:1a:
3a:66:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:19:46 2026 by rpki-client