Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: oddP7jF4bucG1ySwPSJsx6se8QpyI9HxGgmqLt1v8cE=
Subject key identifier: 45:ED:25:52:67:1B:F1:18:C3:66:E8:E7:99:B5:A8:12:2A:C4:EA:E3
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 019CAA214699E81CCBF7F5E97356DE8E08E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 15F1
Signing time: Sun 01 Mar 2026 16:00:33 +0000
Manifest this update: Sun 01 Mar 2026 16:00:33 +0000
Manifest next update: Mon 02 Mar 2026 16:00:33 +0000
Files and hashes: 1: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: QeGnBH9YlLJTUzcAeS1Rw7jk7aeZjjLIon71HtKVs6E=)
2: oL7Va2kH8P-3vrFReEUhkCyRmcY.roa (hash: r6Ou/HXbegxpeXGw26fS8AHPIewd+N00kGGB9t5uCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:46:99:e8:1c:cb:f7:f5:e9:73:56:de:8e:08:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Mar 1 16:00:33 2026 GMT
Not After : Mar 2 16:00:33 2026 GMT
Subject: CN=45ed2552671bf118c366e8e799b5a8122ac4eae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:31:91:66:15:67:04:c9:b0:07:c2:e2:6e:
96:84:34:5d:1b:d4:0d:64:b8:95:f9:0f:70:71:dc:
55:52:87:fb:18:8c:7e:2b:79:06:f8:64:f4:04:69:
30:5f:01:24:3b:ed:67:dc:29:f6:8d:db:c5:3a:f6:
fe:ae:a2:b0:a1:22:1d:4c:3b:e8:1f:8e:e1:ee:47:
ee:35:70:9d:b1:b3:fc:76:e8:a6:ab:47:7f:e5:62:
74:6d:9c:c9:6f:83:c1:89:78:32:cb:7d:9a:6c:b0:
94:14:93:f0:22:9d:6b:28:77:e9:8b:6c:5c:1d:64:
b2:9f:59:ce:9f:5a:ce:db:38:e1:ad:2a:bb:ab:58:
54:d0:c6:3b:98:fb:8b:de:06:a9:ab:74:30:bc:d6:
3e:35:1e:41:4a:78:46:b4:a6:f9:0a:a0:b0:43:10:
90:80:d0:89:55:9e:64:c1:72:de:2c:13:ef:18:74:
14:a5:78:60:ec:2b:43:4a:f1:34:86:06:94:59:45:
f0:cf:f1:e7:67:b9:74:3d:a9:23:f2:07:fc:79:61:
1b:8e:92:49:3f:d9:be:ff:01:09:2c:0d:85:28:0a:
fa:b9:48:41:9d:a4:a4:af:1e:e5:d3:68:f4:9a:9c:
2f:2f:90:c9:bd:5f:73:15:81:3c:15:28:fb:f0:2c:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:ED:25:52:67:1B:F1:18:C3:66:E8:E7:99:B5:A8:12:2A:C4:EA:E3
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:45:56:23:3a:ea:94:ca:48:89:7a:db:ad:f2:b1:b0:38:b4:
90:63:83:d5:d2:88:9d:94:cf:a1:7c:36:f1:da:d9:5e:58:ea:
99:62:f3:b8:c6:9a:5a:39:5b:55:62:65:cf:2a:bb:8c:e5:a8:
59:a1:cd:97:e0:11:36:e0:93:21:3c:db:93:31:1f:3e:e9:47:
4f:80:33:70:c0:5a:c5:d5:e4:44:00:ea:00:8f:e2:5a:04:e8:
c2:56:9e:46:5c:58:52:73:25:8d:e2:1d:29:81:be:f0:b8:48:
a9:e3:9d:fb:4c:ff:f8:98:4c:b2:37:13:93:dd:c5:32:b8:e1:
05:01:a2:36:10:0f:5a:a8:02:0e:cc:9e:0f:21:f8:53:88:9b:
93:89:db:2d:cf:cb:30:0d:fa:63:ab:5c:65:86:fd:1f:de:61:
c7:71:5e:0f:27:c5:a5:c2:fc:6a:98:1d:fd:d5:fc:e4:7b:70:
7e:ad:d2:c4:7c:2a:00:71:62:c5:eb:33:53:c3:93:b5:50:87:
d2:e1:26:e7:d4:5e:8b:d5:f2:a7:f8:e8:a5:38:f9:2e:7a:01:
60:22:a5:92:87:16:c2:e0:de:cc:92:dd:d4:aa:7a:bb:5b:e7:
04:9b:3a:77:23:14:d0:f9:f9:f6:cd:05:37:73:31:63:27:e3:
aa:32:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:50 2026 by rpki-client