Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: Cq9tfODwwTnly1qKunwVIZlnCYk+5fruUDWisESE1AI=
Subject key identifier: 49:F8:8C:27:0D:74:A4:C4:41:0A:E5:49:67:B9:F1:6E:C4:D2:5D:18
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 019CADC75FCFC7588460B3319A9FD4D32063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 09:00:50 +0000
Manifest this update: Mon 02 Mar 2026 09:00:50 +0000
Manifest next update: Tue 03 Mar 2026 09:00:50 +0000
Files and hashes: 1: CQE3Ua-6p5IOmLVZBdiochWyjps.roa (hash: gNg92KVIAocfXOKmJRK5kb9MA5JxKznIoERJBi3d7ws=)
2: IeF5X1a3aG1itamyPWDSY8JYd_s.roa (hash: y2AA0T0iuCLSj/XH3EgJGp5sX2Tv0JE6WQ9K2PDxxXQ=)
3: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: zc2tvUaRfU7iNtsY2d7BCvesNP3ZZwSzcPo8n6FwPKs=)
4: KATv9TIszgZ-B1Uoi7DkR6JPCXQ.roa (hash: /5lbXOjfh+/6SdaUgfM3MyOsJ/JBXtRsEqHn8qkyRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:5f:cf:c7:58:84:60:b3:31:9a:9f:d4:d3:20:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Mar 2 09:00:50 2026 GMT
Not After : Mar 3 09:00:50 2026 GMT
Subject: CN=49f88c270d74a4c4410ae54967b9f16ec4d25d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:8d:bf:40:7e:fb:25:2f:11:2c:e9:84:25:
c5:36:53:95:ad:31:2d:6e:d4:35:29:95:ab:76:05:
45:e9:8b:3d:51:9c:54:7e:2d:5b:4d:bb:ef:53:4f:
77:13:22:ea:32:69:2b:3f:de:e2:2f:9c:28:d1:f9:
a4:58:87:51:99:97:6b:de:d4:65:ce:14:7d:b0:74:
64:32:3b:d2:3d:25:79:12:96:5f:61:78:89:0b:8b:
fc:a0:f5:16:18:e7:ee:c2:23:b1:6b:2a:f2:c5:e7:
b6:0a:e8:23:25:30:72:55:ae:5b:92:1d:b9:1b:04:
fd:c2:b0:17:c0:9e:14:27:ba:de:63:5f:98:87:e5:
f4:c6:3c:9a:48:c1:55:21:d2:b2:40:bc:75:92:77:
9a:5f:48:e3:cf:89:33:1f:02:9a:c5:7e:a8:c3:f1:
14:90:80:a7:37:00:f1:28:ab:56:1a:f1:46:e6:7a:
65:6e:c1:48:9d:65:60:0b:9b:19:17:cc:f9:52:95:
44:84:7d:81:80:1e:7a:0b:30:77:4e:65:5c:57:a1:
30:d4:38:7c:0d:08:4c:07:eb:8f:d4:54:64:01:36:
32:7a:81:24:d8:b9:24:2e:ee:de:d7:98:7c:4b:a4:
62:45:c9:f0:d7:53:09:d0:09:ae:0f:34:aa:46:40:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:8C:27:0D:74:A4:C4:41:0A:E5:49:67:B9:F1:6E:C4:D2:5D:18
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:62:13:a7:28:1f:a2:6b:c1:db:28:76:f1:c0:17:db:c6:7b:
32:b5:dc:4d:56:a5:13:e1:0e:6c:48:78:eb:d9:50:b4:d5:47:
74:7c:11:d2:19:a2:21:4c:0c:3d:3d:ff:b0:55:04:c2:62:6d:
ab:e5:1e:db:c7:5a:9b:c5:72:32:cb:ac:e9:b6:b2:1a:f4:71:
ff:80:24:92:f6:ee:19:6f:f1:01:6b:be:b2:73:65:c8:6a:a8:
f5:95:f8:01:ad:e7:68:77:b8:49:89:9a:70:59:5d:0a:56:a1:
be:d9:10:47:26:e2:a3:03:bc:88:84:31:7d:10:ca:11:b9:3a:
d9:71:21:4b:49:9c:ae:ad:71:0f:39:f0:c0:4e:0f:e5:b6:46:
7a:4a:07:cd:81:73:51:fd:68:79:db:09:f8:d2:fb:c5:0e:e7:
d3:bd:e1:a5:c2:d2:52:93:c8:7d:2b:97:a5:9b:36:db:c8:75:
f7:99:5d:c6:46:89:05:2d:7b:29:e8:61:62:08:42:ea:ca:1b:
0d:2d:2d:ed:2d:02:27:c3:9b:68:33:26:19:4c:e6:7c:93:0e:
72:71:fb:ff:1a:fb:a1:aa:57:35:ea:50:c3:e2:c8:06:22:e0:
f0:65:db:60:5c:94:da:3e:c5:e5:45:10:e0:91:d2:6e:b0:c4:
b8:2c:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:10 2026 by rpki-client