Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: zk0+1eE5EcuguQfMFj53DS2dHaCUBPeYOvFjLGljcoA=
Subject key identifier: 62:9D:35:3B:20:D2:9C:97:92:22:46:FF:8C:6F:4A:89:17:62:B7:A2
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 019CAA58DD2E3167403D064B6F260109A390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:01:16 +0000
Manifest this update: Sun 01 Mar 2026 17:01:16 +0000
Manifest next update: Mon 02 Mar 2026 17:01:16 +0000
Files and hashes: 1: 1-t_zhWLilE6KvhfiWmcU3qakEiY.roa (hash: 0Yp7FcFsKOjytovm/Gd90cW5FsF6AebKXtz8XB/GJT0=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: dPhTpxGdhWCu3Y4nrCUvSpm+lXYjhJxuUNmQq/FUWA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:dd:2e:31:67:40:3d:06:4b:6f:26:01:09:a3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Mar 1 17:01:16 2026 GMT
Not After : Mar 2 17:01:16 2026 GMT
Subject: CN=629d353b20d29c97922246ff8c6f4a891762b7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:29:c9:28:d4:b0:69:e9:f1:6c:20:d4:42:
2b:17:75:45:6c:02:46:95:c1:54:cf:ef:99:e2:4d:
6b:af:20:c3:71:ac:cf:89:82:8a:09:c5:1e:02:a5:
8e:57:b9:a5:4d:30:c2:84:ea:23:b7:67:7e:73:ea:
9c:60:88:d8:57:1a:73:ad:62:3b:d4:fb:50:ad:fe:
60:14:f9:24:0c:49:2d:c2:d7:17:5e:1d:e7:81:84:
18:f3:5c:b1:ed:09:85:36:ac:6c:1e:56:97:a3:ac:
7b:69:d8:64:23:33:32:75:21:c8:f8:b1:d7:d3:13:
6b:b6:e7:66:1f:4b:e9:ad:a5:79:21:f5:4d:17:3c:
90:46:ff:df:da:8f:cc:92:af:77:d3:e7:bb:d8:39:
e5:30:a8:29:cb:e8:ad:66:7d:0a:5d:cd:16:ac:2c:
5d:da:13:b3:11:f3:6f:ae:cd:9a:c6:09:3a:bb:d8:
71:3a:9a:e5:53:fe:76:18:9c:90:c9:52:fd:96:43:
12:16:28:47:2f:b4:43:3e:83:a5:22:86:96:94:5e:
ac:df:9b:3e:81:98:f3:cb:b2:9e:c2:2c:70:8c:f1:
12:f5:80:79:99:cb:e4:c2:6b:a6:1e:4c:0c:86:bc:
09:29:54:b9:50:af:8b:0a:90:09:2c:28:c8:10:8f:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9D:35:3B:20:D2:9C:97:92:22:46:FF:8C:6F:4A:89:17:62:B7:A2
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:18:98:ff:fe:fd:79:5c:93:11:bc:95:59:7c:31:93:cc:88:
99:6c:ed:8c:10:d6:e4:55:a9:2a:7c:b0:e5:c8:bd:0a:96:ff:
86:45:2e:75:a8:e7:dc:45:69:4e:4c:67:15:16:29:9f:b8:69:
5b:1f:7d:f8:d3:6f:c3:bf:31:43:ef:30:4a:ae:05:8a:e3:82:
85:cf:3f:0f:d9:3a:a3:f7:90:b9:b8:55:27:18:e9:23:0a:2d:
57:c9:88:6f:f6:86:2b:11:66:79:ce:e1:97:24:b1:8d:ec:7f:
cd:5b:72:e2:ed:28:96:72:a6:2f:a8:df:81:04:d6:f9:df:d3:
a5:ca:68:8d:53:f8:33:96:a1:5b:7a:bd:eb:68:8d:ae:62:84:
a3:8b:c6:9e:e1:2c:48:f3:4a:ab:0f:90:1a:6d:85:8a:4f:8f:
27:3f:01:c3:3f:44:d6:aa:ca:b5:fe:ec:01:1b:b6:42:d6:44:
07:0b:52:4d:8f:09:64:c3:e8:ba:29:f9:f5:b7:18:35:84:ab:
e5:a8:0d:7c:5e:33:8e:ca:e2:e0:ff:a4:9d:8d:83:b0:59:37:
7b:66:53:65:80:9a:05:56:8e:ee:14:1c:ae:76:a1:96:f2:cc:
7d:09:a1:9d:59:d2:47:2a:11:52:c3:6d:53:e8:90:41:d4:c2:
4b:34:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:33 2026 by rpki-client