Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: bbzbuB0xu39ansnuH5I9+dTa/1PpCs13VMZqgPriA4c=
Subject key identifier: 7B:A5:92:B0:9B:1D:34:5A:36:96:08:C4:BF:78:5F:B0:E3:5E:FC:73
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 019CAD22F1509B72BF29F29015C58555A8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 14F5
Signing time: Mon 02 Mar 2026 06:01:14 +0000
Manifest this update: Mon 02 Mar 2026 06:01:14 +0000
Manifest next update: Tue 03 Mar 2026 06:01:14 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: /Nn3hqKhLS6c+o07BiARsO8HFjiT61uoYzA7dUDVXls=)
2: UKQ5Gx_xeBxacDeIbWDFvI2sD3w.roa (hash: QrqhBBMsTTwSodsla3NMIT0+aTJqntAImLif4CjmD3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:f1:50:9b:72:bf:29:f2:90:15:c5:85:55:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Mar 2 06:01:14 2026 GMT
Not After : Mar 3 06:01:14 2026 GMT
Subject: CN=7ba592b09b1d345a369608c4bf785fb0e35efc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:df:38:ce:52:6c:a2:58:4c:ce:be:b7:8b:
4b:ec:77:90:00:51:38:9a:46:4a:8c:6a:21:6e:e9:
bb:1e:96:3a:74:3f:2e:bf:b0:33:95:32:c6:a0:8f:
cf:8b:a2:8c:1c:b6:f7:c9:de:4a:1c:20:9a:f0:20:
35:95:67:32:cc:06:8d:3b:ff:f6:1b:8c:9f:f6:80:
e7:fc:6b:6c:71:74:cf:de:40:d5:5d:c7:4c:e0:bb:
82:0b:30:26:e4:c8:ba:b2:49:3c:1f:78:04:55:29:
8e:72:ad:15:3f:b8:f5:9a:a1:ad:06:07:99:10:be:
54:67:95:0e:3c:97:06:b7:58:1a:76:d9:52:e4:78:
10:42:d9:c4:cd:78:52:44:e1:60:4a:b5:79:70:0d:
90:5a:64:e8:b9:25:f1:0d:84:41:0e:fc:51:cd:37:
44:c8:b4:1e:43:25:78:fa:9c:63:e4:1c:5f:a9:22:
88:4c:9c:d2:67:01:ff:bf:b5:d9:0a:2f:d6:ac:04:
45:99:ab:36:41:3b:38:a2:d2:de:82:bc:8a:b4:3b:
5c:d2:49:5c:46:d4:9c:16:b6:99:e7:dd:68:28:24:
b0:52:dc:0b:ff:f9:4a:54:d7:74:85:d0:26:a1:0f:
76:be:e8:00:96:dd:fb:ff:64:fc:12:1b:39:96:b5:
62:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A5:92:B0:9B:1D:34:5A:36:96:08:C4:BF:78:5F:B0:E3:5E:FC:73
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c8:4f:73:47:02:51:fa:c4:dd:70:a9:85:b7:2b:1d:b6:79:
28:37:b5:17:b7:c2:e1:44:5c:6e:aa:43:7d:01:03:7d:31:1b:
c5:2d:43:9a:78:92:6e:a2:9d:84:60:b8:51:1f:87:10:87:7d:
11:82:6c:1b:90:26:f8:d0:89:f5:00:90:e1:bc:8e:e6:fd:62:
02:66:59:ba:95:72:26:fe:23:9a:2a:88:00:03:1c:3d:b0:50:
9d:bc:c3:66:42:20:36:72:77:3e:9b:13:12:0b:d1:ed:d2:4f:
05:dd:ed:12:02:92:f2:39:65:b2:ab:b3:7a:ed:61:b1:20:cc:
1a:58:23:6b:ff:38:80:97:51:aa:51:b7:99:c1:76:ac:6c:3d:
a5:eb:54:08:37:5b:9f:fc:f0:eb:ec:11:0d:f2:d3:61:16:78:
bc:d6:df:e0:c7:15:d8:19:92:b0:00:bc:8d:a7:32:fe:73:9b:
2a:04:e4:bc:31:86:50:dc:45:9c:f3:82:17:06:ed:7d:be:8e:
fd:dd:00:e2:a6:60:36:f7:62:78:d3:40:b5:c5:ad:87:9c:bf:
00:df:b1:bd:b3:18:fe:49:4a:70:e6:96:78:9c:a7:45:25:5c:
61:35:ca:ab:67:89:04:d7:bc:24:ec:35:2d:a5:13:03:f5:9f:
32:9f:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:25 2026 by rpki-client