Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
File: IkI4OfIQchYnZBrmtszqzujZBns.mft (raw, json)
Hash identifier: Oh+O/CPjremvtNFWr8zOfL819pazpGjqYWir+H9tnDs=
Subject key identifier: 59:11:8E:5C:47:5D:1A:C4:53:44:B3:FB:8B:17:C8:1A:78:14:17:45
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 019CACEB580E0FC692711084E3B6EB96B404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
Manifest number: 0D8A
Signing time: Mon 02 Mar 2026 05:00:30 +0000
Manifest this update: Mon 02 Mar 2026 05:00:30 +0000
Manifest next update: Tue 03 Mar 2026 05:00:30 +0000
Files and hashes: 1: IkI4OfIQchYnZBrmtszqzujZBns.crl (hash: 7DPu1WBjgr58dN9iyguHa99X+VYtib17umf77SbWZKE=)
2: sojMdgVzKQwkqrETNbM2QVHp_oA.roa (hash: Z2UII6RbUrfp+wZL3LL7DVhq4lhmq9mEWIUdqO9gofc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:58:0e:0f:c6:92:71:10:84:e3:b6:eb:96:b4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Mar 2 05:00:30 2026 GMT
Not After : Mar 3 05:00:30 2026 GMT
Subject: CN=59118e5c475d1ac45344b3fb8b17c81a78141745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:27:48:91:b8:8c:23:49:ef:c5:ca:c7:dd:
38:c4:0f:d5:78:44:42:79:07:74:df:14:ce:d8:cf:
bc:c5:a7:56:73:84:be:c9:4a:b2:5e:1c:4c:8a:d5:
ed:66:63:31:81:e7:f7:2b:6e:80:16:e2:df:60:d3:
40:7b:55:af:0d:98:2e:b4:9e:8c:97:b7:05:7f:09:
c6:2a:75:c2:ed:ea:5a:1c:60:34:ab:23:d0:32:eb:
57:69:87:ff:31:c5:a5:19:71:03:b5:aa:ce:83:36:
27:1a:cc:24:29:6d:0f:6d:a2:dd:c5:a4:d0:48:a0:
9c:28:06:9f:bd:0e:13:6c:6d:12:f9:a1:b3:9e:8c:
fb:43:8d:97:a1:b1:82:29:db:cd:f8:6a:4e:e4:c2:
e0:af:8a:59:c8:c4:ee:d8:bd:96:21:13:b9:4a:2a:
1f:ec:46:fe:50:fe:b0:90:7c:40:e8:ef:d8:62:1a:
e5:25:09:29:83:26:b7:83:1c:49:45:97:f2:8e:dd:
ae:c0:5e:57:72:2d:4a:0a:5f:09:30:3f:43:74:39:
af:bc:3e:f8:91:50:09:95:08:af:1d:26:25:a5:ba:
cb:6a:cd:e1:28:90:27:38:a5:8c:44:53:8e:d1:63:
d1:2c:9d:74:59:3c:2d:83:58:d5:cf:85:67:2c:57:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:8E:5C:47:5D:1A:C4:53:44:B3:FB:8B:17:C8:1A:78:14:17:45
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d8:1b:d6:34:c1:91:17:97:eb:a5:13:38:cc:f0:70:e2:f2:
fa:e4:cc:b3:b7:bc:ae:52:87:42:17:e5:43:9c:82:44:ee:ed:
12:17:65:98:43:2a:e2:b6:ca:ef:eb:87:f8:2d:70:25:c7:45:
19:f9:f8:d9:69:86:15:0e:9d:0e:2b:13:6d:d6:a5:64:1d:be:
99:59:f9:e8:6b:24:6c:70:16:7a:0c:63:8a:16:56:4c:44:e9:
a3:b2:06:7b:1b:42:c9:58:02:41:03:5d:70:aa:cb:6b:82:22:
0c:e2:b6:98:2f:01:e9:5f:27:c1:7b:d2:a5:c3:26:0a:c2:4e:
97:12:59:b7:43:a3:31:09:53:8f:22:4e:8d:51:3c:9f:f8:53:
f5:a1:bf:29:92:2f:42:18:8c:ad:2f:3e:85:20:e1:d5:77:72:
f4:38:c0:b9:c9:80:50:cc:61:8f:f7:5d:12:b2:ab:89:fe:ea:
78:35:8d:f2:60:0a:36:12:0e:f0:bd:6a:27:5a:6d:5f:05:20:
26:0a:cd:9e:c5:27:f0:85:22:77:ee:89:9f:45:2f:bd:87:d4:
78:4f:f4:0f:2f:15:47:c1:92:aa:81:c5:fa:b8:ed:80:7a:82:
ad:2c:6d:c0:bf:ac:bb:e0:62:40:d6:52:56:81:73:b1:78:20:
9d:d0:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:04 2026 by rpki-client