Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File: _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier: /BdVByeGLur3nqMT/u7WnWVf7T3XrNkemE6erAz08tQ=
Subject key identifier: 20:81:A7:A2:A3:E3:7F:7A:97:07:FD:54:D7:FD:D0:B3:A1:57:79:C8
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 019CAAC70BD52F39ACD26765F7C83DF05E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:37 +0000
Manifest this update: Sun 01 Mar 2026 19:01:37 +0000
Manifest next update: Mon 02 Mar 2026 19:01:37 +0000
Files and hashes: 1: OA7ua6CV1NawowKipRihY67EFIg.roa (hash: xqJsWriHrPd8Qn5lT9pYETlcfFbLKXpXQUl+bRYJP2M=)
2: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: +kMP3KIPJDuPGA/EepsI6L+xALHtL3w0iIHgDbgfQHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0b:d5:2f:39:ac:d2:67:65:f7:c8:3d:f0:5e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Mar 1 19:01:37 2026 GMT
Not After : Mar 2 19:01:37 2026 GMT
Subject: CN=2081a7a2a3e37f7a9707fd54d7fdd0b3a15779c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:37:99:7c:5d:c8:9c:58:88:8c:6f:8a:f7:
d1:aa:9c:21:12:b7:0b:92:5c:82:46:17:73:d1:88:
15:7e:55:0d:8e:17:a8:00:d0:ee:6a:37:2d:e6:30:
51:33:02:41:1f:0f:7f:9f:77:14:6f:cb:8b:ad:c0:
1d:8f:b1:41:a4:db:61:f7:25:26:55:f6:20:a8:61:
fc:ef:76:44:60:fc:77:a0:32:9b:23:da:fd:de:83:
06:85:88:6b:fa:c4:84:0f:71:95:94:e7:50:1e:91:
9c:ff:88:18:8e:9f:33:2b:66:30:f5:9f:82:b3:68:
b3:d0:49:72:1c:51:48:7b:13:69:58:27:0a:63:ec:
a9:23:9b:6d:3e:50:46:5e:d7:c8:66:0e:06:ce:51:
e5:13:ca:14:e6:cb:70:1e:07:97:12:ee:10:0a:d6:
c9:36:0b:8a:3a:dc:b7:18:56:d3:4a:76:51:af:21:
16:89:18:38:39:58:8f:ed:10:d5:12:d0:bd:45:53:
25:99:44:ba:55:bd:ce:d2:11:7d:b6:df:96:a9:40:
d7:5b:8b:c4:5c:4b:b6:40:73:53:ce:82:da:66:b0:
4b:66:c1:fc:d4:66:af:ca:e6:93:f2:15:60:b0:2c:
62:7f:79:66:02:b9:18:59:91:5a:c3:12:e6:89:da:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:81:A7:A2:A3:E3:7F:7A:97:07:FD:54:D7:FD:D0:B3:A1:57:79:C8
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c4:36:05:82:55:d3:46:eb:c6:2c:2d:d2:61:7a:a6:8a:fc:
6d:6e:bf:3a:e7:ca:21:0e:0d:40:b3:44:36:72:09:be:0b:24:
02:ba:c7:0c:27:78:83:2d:81:b2:77:e3:5a:da:dc:f6:08:6d:
58:b0:79:32:75:6e:83:67:22:cf:3f:4a:01:d6:dd:3c:fa:28:
79:f5:f2:9b:95:11:02:83:17:93:0e:11:3e:a2:42:c5:b5:b6:
ac:c8:70:bc:90:44:5b:40:7e:d5:6b:da:0b:91:3f:9d:7f:68:
2e:df:f4:92:c3:b5:04:4f:7c:0a:80:96:34:35:e3:f7:b3:33:
a2:92:0d:79:c2:8b:42:7f:df:9c:7d:f2:6d:a6:70:30:d1:e2:
c6:e5:94:fd:9c:d1:a0:ce:ab:22:8b:33:50:ec:15:00:d5:a7:
4f:1b:ae:ce:ba:09:7e:2d:36:99:16:62:51:53:f4:f6:51:fa:
fd:12:61:9a:76:9d:5a:55:85:94:af:bc:92:de:17:1c:01:1f:
03:b1:3e:63:3e:f0:cf:e2:63:d1:ce:ec:b6:8a:7e:3a:fc:2e:
93:10:80:31:92:dc:a5:7c:bf:b0:1d:16:50:e4:34:c1:f9:6a:
e4:43:bd:19:84:b9:26:68:7b:91:f4:23:6e:b5:56:4e:c9:39:
28:f8:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:58 2026 by rpki-client