Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
File: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft (raw, json)
Hash identifier: lkfseglLytc0H8Ot8WUY67CR8OmZ/nqNh2l5KFA+2bc=
Subject key identifier: CD:72:57:1D:12:17:B0:DC:6C:1F:3C:F6:8F:7C:E0:16:12:76:F6:7A
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial: 019CAB344CEB197D7F05CB653EBDCEF9FE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
Manifest number: 089B
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl (hash: 6w6laqKnr/WSak9TYE9EvH9ItZt4yLdOhLV9/Xsr/30=)
2: VEvXqpjtpnWqPhFsK1VjLPWcZ84.roa (hash: Ivq9B7fCTNtjnlU9FptxC9e2xrpHUztFCNXJ+qaH7LQ=)
3: Y2rIYreLOiywxBX2z6aRfWF7q04.roa (hash: dpqG15krdpxJUlUEVSBqVv3+kw/A6MahmXEVhi6w3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4c:eb:19:7d:7f:05:cb:65:3e:bd:ce:f9:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=cd72571d1217b0dc6c1f3cf68f7ce0161276f67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:2d:1d:69:c4:a3:6f:64:0e:f6:c8:1f:73:
f1:aa:d5:86:fd:22:35:31:45:1e:dd:62:29:0d:b9:
98:71:6c:c2:d1:0d:53:01:7f:30:22:77:32:f0:a7:
50:18:b4:95:5b:89:84:4a:6d:95:9e:11:9c:91:dc:
36:e5:9d:12:d5:dd:f3:3d:62:6f:54:d7:07:43:f8:
83:81:cc:33:49:8b:f0:d5:38:24:59:ca:68:95:23:
16:73:6e:8e:70:7a:56:d7:b6:75:f1:4b:11:74:62:
f2:70:cf:bb:02:2a:43:dd:48:f8:0b:81:28:c7:98:
c7:f2:a0:e9:24:ad:9f:d8:e9:4d:75:87:55:7f:0e:
e2:e0:02:a8:5e:b0:91:dc:12:1e:0e:c8:1d:77:6d:
3f:1f:f0:2c:51:59:19:e4:a3:2e:a1:ef:a6:24:47:
65:02:8a:a4:c3:c8:d6:d9:c3:6a:65:7b:43:d5:5f:
6c:75:ab:5e:ec:94:c1:be:7a:2d:5a:e4:e6:29:c0:
62:63:23:fa:b8:3a:4c:a0:14:a4:66:df:1a:d0:b9:
17:a7:92:38:91:73:36:02:be:0a:71:e7:32:84:78:
76:b7:a8:cf:14:80:7c:1c:ea:75:f1:93:bd:db:7e:
ac:4b:16:cd:ef:9c:d4:2d:bc:55:5f:50:87:c5:c4:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:57:1D:12:17:B0:DC:6C:1F:3C:F6:8F:7C:E0:16:12:76:F6:7A
X509v3 Authority Key Identifier:
keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2c:61:ce:70:05:3a:0e:cf:40:b9:70:a2:d4:fe:7d:bf:4c:
a9:ea:e7:e1:70:d8:64:69:31:8f:df:0f:e8:c9:c7:47:f9:50:
1e:54:74:45:64:7a:b4:1e:53:d3:40:60:27:98:d4:d9:b3:fc:
1b:f9:a2:49:18:8b:5f:df:f8:5f:03:55:39:32:ad:c4:36:55:
36:1c:4e:15:9b:92:25:da:c3:8f:08:f0:d1:cc:c4:cc:47:cc:
80:61:d2:4d:4b:90:d0:bd:22:73:50:06:5a:c8:2c:bf:b8:30:
b1:f4:96:ab:b7:fa:b0:a4:e2:be:6d:8e:7a:66:3d:d5:0e:af:
65:fc:42:da:f2:9b:2e:7a:cc:a2:ce:e2:4a:6e:8b:df:b7:2e:
ad:77:f3:12:04:6a:1e:f4:2a:41:11:6a:80:22:e7:2d:5e:ae:
24:31:27:46:6c:6d:4d:fd:82:dc:8f:6a:31:4d:4d:99:d1:a0:
6f:b3:f2:3e:74:f4:5e:b5:f4:9d:36:9c:c5:9f:ee:22:8b:fe:
a5:d7:17:74:3b:62:9f:78:d8:7f:62:9f:74:75:94:29:4d:27:
db:ed:32:5b:10:65:36:18:ba:0a:a9:49:a0:2d:9e:81:e0:cb:
c0:42:fa:41:4c:42:76:d6:d8:31:cf:28:42:e4:90:43:e0:a1:
19:f8:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:32 2026 by rpki-client