Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: AdKlZNPCRrI7bnAfFajk67roKF8QWaGUshJk6ORUqZ0=
Subject key identifier: A2:C4:9D:40:CD:D6:CC:49:4C:19:26:AD:5C:FE:2D:03:CA:4A:B4:4C
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 019CAA8F54F6A2F3919D4DAAA2563907921E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 18:00:45 +0000
Manifest this update: Sun 01 Mar 2026 18:00:45 +0000
Manifest next update: Mon 02 Mar 2026 18:00:45 +0000
Files and hashes: 1: Hbn8x0ebxYPZ2S4cZB-DuECWRIY.roa (hash: vgpms375ZNHUjcZk9fgkMXFPfvTYsPPbiXsTHzCrq6o=)
2: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: imJ4Vk462sdImLzAdJLOJwQy/TMUNjlPu7fEbr5JkEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:54:f6:a2:f3:91:9d:4d:aa:a2:56:39:07:92:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Mar 1 18:00:45 2026 GMT
Not After : Mar 2 18:00:45 2026 GMT
Subject: CN=a2c49d40cdd6cc494c1926ad5cfe2d03ca4ab44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:fc:cb:17:3b:15:b2:4e:f2:4a:e3:49:6f:
83:9b:f1:1c:62:9f:1a:83:33:e4:e1:be:1f:60:d4:
0a:df:f0:7d:1a:26:ac:cf:b1:42:cf:56:d1:76:0c:
ca:00:30:59:55:0e:95:ad:0a:a7:23:85:81:75:13:
d8:0d:29:a4:8b:af:7f:57:3c:74:a4:9f:ec:27:52:
d0:21:bf:58:f8:31:16:3a:1f:e4:a0:ef:48:a6:27:
6a:92:59:2f:11:04:69:cb:d8:be:1c:10:0e:fa:c8:
54:54:90:b6:94:cb:b0:ce:d5:66:f9:b1:d9:d1:b8:
48:69:54:88:8f:70:0e:09:31:e8:5f:0c:62:8b:0f:
f7:49:35:bf:8e:95:13:da:9f:64:78:c9:29:82:43:
84:21:e1:34:ce:ba:d1:ef:80:60:04:71:9b:ed:6a:
7a:24:e0:d9:08:74:d6:f9:b5:b9:1f:6d:1e:2d:0e:
b8:d0:a2:a8:3b:68:38:75:93:6a:fb:d5:5c:12:5d:
c2:e7:19:fd:d5:ae:69:e8:28:1c:5d:79:3d:9e:f7:
4b:28:89:1c:e1:5f:6a:48:47:ed:19:89:40:f7:5e:
af:b2:18:77:4d:3d:5c:ef:b3:2a:87:9c:1b:f2:de:
1d:8c:d9:f4:b5:15:dd:08:c6:32:f9:90:13:6a:2c:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:9D:40:CD:D6:CC:49:4C:19:26:AD:5C:FE:2D:03:CA:4A:B4:4C
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:6b:d4:8d:89:e5:6e:7c:2d:3f:ee:9a:46:cd:11:e9:d0:c4:
ec:5c:56:3f:b6:e2:a8:eb:fe:49:8a:3b:3a:b3:52:e4:9a:be:
56:ed:15:a5:0d:7e:2c:66:bd:09:8e:01:c4:1a:d4:fa:39:3d:
01:93:aa:38:f3:53:7d:f1:87:6c:9d:72:34:4c:70:31:a7:80:
a1:e5:6d:62:ea:c1:da:9b:65:b8:af:01:0b:ed:9d:6f:75:73:
2c:72:22:82:c8:9d:a4:57:42:33:8e:bf:18:93:61:49:78:42:
2a:1e:fc:01:92:d1:3f:85:94:71:3a:3e:ae:f8:22:ff:4e:9d:
67:15:c9:c7:08:d3:fb:1a:1b:2d:66:d2:b2:d4:33:09:c5:11:
a1:2f:a5:57:99:6a:69:40:2d:1f:c7:e0:68:71:c4:bb:71:e3:
2b:90:e6:7c:bd:24:cc:1f:70:a2:f8:47:49:24:e2:3c:03:fd:
fd:9e:81:a1:af:98:64:3c:00:d2:28:c9:f6:61:15:39:f5:08:
18:bc:28:c6:fd:ed:48:5d:ff:9d:2a:d6:a6:c4:dc:98:2b:07:
64:8c:8b:f3:23:ac:c7:32:d3:a6:5c:58:6c:e3:14:cb:49:ec:
59:fb:09:36:41:aa:b2:32:fe:b4:42:0f:64:40:52:3d:7c:0a:
a4:9e:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:42 2026 by rpki-client