Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: yWou/2vMlv5+wNjyiI0ya2HHFufcljVV5cUQLZZaOvc=
Subject key identifier: 20:27:81:0B:E4:00:6E:CA:BE:43:F9:E0:B2:0B:A3:F8:E2:F8:A7:34
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 019CABA2252A04B36B342CC00F316D479D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 07A2
Signing time: Sun 01 Mar 2026 23:00:56 +0000
Manifest this update: Sun 01 Mar 2026 23:00:56 +0000
Manifest next update: Mon 02 Mar 2026 23:00:56 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: 2w9AAvZqS6a7FjEwEH2scZubd/VSc1gF4Fm5JSI4aAA=)
2: N9l_SoYrcFcPv0jC7XqElG5VoCc.roa (hash: R5qOIsjrofGZDxXTlws22ZLH6QPaz3qDwthTa7rQG/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:25:2a:04:b3:6b:34:2c:c0:0f:31:6d:47:9d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Mar 1 23:00:56 2026 GMT
Not After : Mar 2 23:00:56 2026 GMT
Subject: CN=2027810be4006ecabe43f9e0b20ba3f8e2f8a734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:1c:0b:73:44:4c:75:57:82:cc:2d:89:95:
0f:78:de:7e:d4:2f:8e:13:21:e4:04:aa:88:bf:c1:
19:80:b3:c2:62:a4:4a:db:51:1b:58:c2:66:eb:18:
18:91:56:61:6e:59:e9:d3:6d:5f:d9:60:b9:72:25:
e9:44:9f:4e:c9:e7:74:ca:14:13:5b:3a:2b:e2:3d:
0e:3a:7e:f7:af:f6:30:7e:be:a0:e1:6c:61:1a:e5:
78:93:68:2c:f3:46:30:b8:03:64:04:5a:e0:e7:1f:
95:1c:42:9f:30:63:a3:a7:41:92:36:bf:07:c6:ae:
18:76:12:17:4e:35:59:60:4e:a8:69:1a:60:c2:fd:
28:7f:59:9c:94:bc:2b:d1:09:f8:95:9e:7a:70:89:
66:35:90:b0:65:38:7a:e5:02:b8:b3:88:fc:83:74:
0a:26:e8:ff:23:7a:ee:9c:52:29:08:35:38:db:49:
5d:77:7f:68:1a:84:b4:55:7e:99:2d:40:f2:c6:cb:
34:d6:a8:fc:b5:63:79:ae:5f:45:30:e3:34:01:69:
4e:64:96:6f:65:9a:f2:b5:08:e6:38:2f:6e:e5:48:
2a:ec:e4:05:17:94:7f:bb:45:ed:5c:6d:49:60:e9:
09:92:11:42:11:88:4b:1c:34:d6:8b:1c:6b:09:4d:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:27:81:0B:E4:00:6E:CA:BE:43:F9:E0:B2:0B:A3:F8:E2:F8:A7:34
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:87:bc:81:c1:1a:79:66:a6:8e:2b:65:e4:e4:17:00:c1:e7:
25:cd:4e:15:91:25:a2:06:21:bd:42:a0:8e:69:dc:aa:07:b3:
8a:eb:a5:5a:d5:10:ef:b1:41:0c:07:0f:f4:b5:4f:5b:a6:5b:
d3:63:9d:bc:d4:c4:81:8d:a5:5c:80:63:36:4e:41:86:ca:a9:
12:75:3f:f2:e3:94:96:13:13:98:d7:08:ef:c6:cd:7a:92:c8:
c7:44:93:a0:75:71:35:e1:23:f4:c1:2e:73:5c:72:89:72:ad:
71:5b:ec:24:45:65:71:ec:ea:94:b7:c3:3b:78:30:d8:ef:f4:
e2:76:9b:15:f6:6c:cc:87:7c:83:be:7e:f4:7e:9b:9b:c3:81:
2c:3f:10:b7:24:25:a8:22:a0:0e:cd:fc:a1:29:bd:74:a4:c0:
23:d0:a1:33:a4:39:fa:9e:81:b8:52:11:9b:9c:22:89:c7:cc:
b1:b4:d4:67:eb:10:e2:7b:ee:45:c8:45:e6:0d:2b:d1:2e:42:
18:34:5f:ea:55:6e:97:de:33:57:f4:a8:62:7e:45:4b:8a:d8:
32:4c:41:7c:67:c5:94:5b:5b:03:d9:08:5f:a3:84:4f:13:b6:
c2:57:87:62:56:a7:82:8a:f0:23:91:ea:82:84:fe:86:07:29:
c7:a8:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:01 2026 by rpki-client