Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File: cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier: z26VEDAfQb/VCfJTQPMpqXVaog0QoETov5Z6LyO5LQA=
Subject key identifier: DD:6D:DF:EE:EB:B2:0D:E1:37:B7:FA:6F:EF:D2:8D:F6:CC:C0:07:4E
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 019CAAC679FC670D6D1492596E3FB348F97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number: 1150
Signing time: Sun 01 Mar 2026 19:00:59 +0000
Manifest this update: Sun 01 Mar 2026 19:00:59 +0000
Manifest next update: Mon 02 Mar 2026 19:00:59 +0000
Files and hashes: 1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=)
2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=)
3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=)
4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=)
5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: dG5VGDKGG1n/obDqA3+bdj0BQTme5royMklSX8RLoHM=)
6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=)
7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:79:fc:67:0d:6d:14:92:59:6e:3f:b3:48:f9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Mar 1 19:00:59 2026 GMT
Not After : Mar 2 19:00:59 2026 GMT
Subject: CN=dd6ddfeeebb20de137b7fa6fefd28df6ccc0074e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:c5:5e:ea:92:78:98:d7:68:7f:35:0f:89:
51:38:16:bf:de:8d:6e:d5:1d:78:91:1f:77:c2:54:
2c:24:d6:63:5a:b9:d8:9b:5e:cd:83:a3:dc:24:e3:
ad:3a:f2:05:45:d6:42:4a:86:22:7f:75:1d:15:2c:
8d:90:77:74:71:5c:98:4a:7e:9e:e7:66:54:22:d7:
85:7e:15:96:fd:78:62:d9:bb:21:38:58:7a:49:a2:
15:06:ac:e6:de:28:85:86:d2:93:1f:7a:1c:16:e5:
23:33:73:84:69:d8:9f:a1:c6:33:7f:55:71:b0:52:
75:55:ae:37:88:46:fa:91:5d:ba:15:1a:29:27:d8:
38:86:d8:52:b1:fb:75:50:9b:92:b8:15:84:53:88:
96:fa:d3:7f:10:c0:81:e9:89:29:04:cd:1b:5f:3a:
14:5e:79:9c:96:c4:cb:58:b9:59:5d:22:68:1a:e5:
44:14:cf:0a:27:9d:9b:6b:8d:57:9d:e4:e2:66:21:
ea:b3:c7:c5:33:ac:9b:03:47:f6:b3:c5:02:f9:3f:
77:48:09:2a:cf:4e:7b:03:0f:17:a4:49:ca:83:40:
32:cd:51:a4:9f:46:48:9b:35:bc:54:2e:46:78:c8:
e0:d1:7d:35:e3:36:48:9e:7c:d1:29:82:89:60:af:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:DF:EE:EB:B2:0D:E1:37:B7:FA:6F:EF:D2:8D:F6:CC:C0:07:4E
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:be:b4:8b:2c:63:3f:f5:8d:6e:c7:e3:dd:8f:29:1d:75:ac:
bc:e9:5f:c5:e0:ba:14:ad:91:13:74:75:10:14:12:33:41:ae:
c4:d8:1a:9e:59:e9:5a:cc:49:64:57:b9:3c:d1:a4:15:e0:b3:
74:61:47:46:b9:07:36:4f:c1:d3:3c:2f:75:5d:4c:14:8b:8a:
a3:1d:41:6b:e5:28:db:a7:86:81:7b:7e:4f:19:e4:e2:21:3c:
9e:ac:a6:01:8f:9c:44:20:82:6f:f7:77:f5:03:bb:66:22:f6:
61:37:73:ff:32:04:86:a1:86:e3:4f:f4:3f:2c:6e:62:e5:4e:
35:d6:0b:74:eb:44:b5:fe:1d:43:b9:1c:71:9f:99:2d:22:22:
d8:fd:d5:d0:ba:25:41:df:5c:99:9c:54:d0:fe:5d:d6:dc:0a:
e1:f0:40:c8:82:c2:31:4e:8c:07:5e:c2:08:f1:ca:73:5a:c3:
20:74:a0:92:bf:13:51:45:13:8d:8f:13:4b:32:64:9c:81:26:
18:cb:a5:58:1c:4b:36:11:9b:f2:fd:09:25:ed:11:9e:36:b7:
45:a0:0d:fb:15:d0:53:56:fa:80:a2:41:b8:8a:93:1b:bc:cb:
20:45:09:3b:f6:a3:f4:3a:89:f3:de:db:16:a6:fe:3e:74:0c:
52:7b:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:32 2026 by rpki-client