Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: HIKinBUNLGyRk9rJ9P/EB6dmi7TNrKvfwyStMBvJyMs=
Subject key identifier: 63:29:8F:C1:0F:AA:A4:9F:ED:08:9B:AF:9C:CA:31:2A:27:59:0B:46
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 019CAB344CA4759E055024FC0EF9A173423D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 0B0D
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: vdddHdJP6dYJGAzRM5nCSIyvhq8045n5cqmoKFHGsyk=)
2: PiRgJdP5MCWuU1jNKZLwDVvXfxA.roa (hash: cpBd4dfM6upcsIz22a2feCu0xP3o+cF4Qb/mGhUm2S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4c:a4:75:9e:05:50:24:fc:0e:f9:a1:73:42:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=63298fc10faaa49fed089baf9cca312a27590b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:60:0e:4e:75:e4:a3:fb:aa:f6:42:90:ea:
d7:21:67:7e:de:bd:59:ea:77:c0:1b:49:17:a8:10:
7d:70:df:b1:b8:1c:73:d8:2f:8e:a8:f1:93:0e:1f:
38:58:fa:23:8f:b1:cb:52:79:f6:5a:1d:33:87:39:
ae:99:19:0e:6a:00:20:9b:65:af:13:d3:e0:d1:01:
24:5c:f9:b0:6a:be:79:45:95:d2:0b:43:1f:5b:7d:
86:95:74:4f:3d:fe:74:28:37:1c:95:c7:f8:9f:09:
aa:df:4d:2b:a3:33:c7:8e:ea:5a:e5:00:97:2f:0b:
83:a2:31:82:0b:ae:5e:35:53:35:58:1e:dc:64:78:
d9:60:e0:0e:1e:2c:af:c8:26:fb:70:b9:46:25:fc:
4c:34:c2:ac:a8:fe:c4:1f:36:0d:bf:d4:00:5a:11:
72:6e:53:32:d8:47:24:db:89:67:66:fb:4b:ce:92:
d1:68:62:60:2d:cf:71:7f:92:1f:e4:d8:b6:9c:7a:
40:b1:f2:91:39:b1:5f:f3:f2:e8:bd:4b:ab:a9:f9:
02:1b:35:88:50:53:98:1b:78:6a:2a:af:2d:8d:69:
a8:6c:b0:6d:1d:72:8f:fe:77:61:3b:f1:09:0f:d6:
20:b1:3a:2c:8c:2b:65:85:c8:0d:4f:90:96:30:61:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:8F:C1:0F:AA:A4:9F:ED:08:9B:AF:9C:CA:31:2A:27:59:0B:46
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a9:da:0d:7c:ab:92:01:6a:d0:89:49:18:50:d9:5c:2d:2d:
41:b1:e3:83:00:09:7e:90:c9:20:a1:f0:8b:e8:62:7c:c1:fc:
06:40:ac:0a:c1:6d:61:b6:a5:92:5c:29:5f:3b:8b:66:aa:13:
71:bc:d5:98:41:4f:49:fa:1a:60:b4:c4:48:fb:7e:33:5d:9e:
cf:58:47:48:0e:1b:34:3d:5d:c0:27:af:bf:6e:b3:6c:cd:89:
1b:41:b9:7b:af:5a:f4:b8:9f:21:b6:12:45:9a:42:0e:b7:75:
f0:24:6d:73:db:ba:cd:c4:a1:de:e1:50:72:59:9c:14:56:f3:
23:ef:2f:5c:6e:a7:d8:16:79:c8:9b:7b:58:b3:d5:63:ac:0d:
1e:a5:89:44:6d:dd:81:fa:f8:a4:72:f6:96:29:3b:e4:e4:b7:
c8:d1:54:71:33:1b:b7:ab:c2:d4:52:e6:9d:de:ed:8f:2a:78:
df:03:c1:54:69:b3:ae:30:09:7e:85:9e:66:29:70:45:04:17:
09:3b:25:e1:69:9b:66:75:6e:c7:07:b6:6a:48:ec:40:1d:74:
0e:00:7b:a3:f7:2b:86:03:ff:c6:fb:a2:04:97:3b:40:23:ce:
9c:02:57:b5:03:8f:7c:12:c0:97:a2:f9:e6:76:37:20:b3:40:
38:94:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:55 2026 by rpki-client