Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: KdtY3pt4/A+LFSxhiqbFgB7+coaWk3U2imwI7Xk7fF8=
Subject key identifier: B0:5F:B9:B6:2C:4B:AF:D0:23:2D:1E:66:3A:4E:BA:AB:5E:A6:D3:8F
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 019CAAC6C1453B9552C2EC0930FF202E2EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 0487
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: 3xmlsxTNDAPRt4_0q9JN37-J_fo.roa (hash: hrh+PtmNTziEnO3zB1N3sBXi6xmDSdZWbvKSyvj1sho=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: OBCKOq5Iwe4EGsZndUYEAL+dxKxQKonOzDggHo9INoc=)
3: pmOgP6lJVCEt59Qkk4t1jrCJur0.roa (hash: jMdmf86ejjzlc+CFJdZFf5qZkdpQs78Wj3mu5HwUV0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c1:45:3b:95:52:c2:ec:09:30:ff:20:2e:2e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=b05fb9b62c4bafd0232d1e663a4ebaab5ea6d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:b1:65:ce:ab:b5:04:25:ae:6c:57:92:72:
96:f9:d9:57:0f:8b:2b:e7:3b:61:f7:a6:d0:71:78:
e1:47:ee:48:07:b3:30:6c:93:df:bd:94:45:f9:6c:
db:d9:f9:19:5d:4a:59:bc:1a:9b:72:91:e6:bf:38:
e8:8f:a5:89:da:c7:3d:c4:9c:9a:64:c2:7c:0e:d5:
e6:b9:1c:34:7f:6e:64:8d:31:cf:28:57:0a:d1:2c:
a7:9b:0b:11:ee:17:69:c7:41:6f:be:cd:9d:06:1e:
37:be:a6:b8:42:b0:e1:67:37:a3:e4:f2:f8:33:3b:
c0:6e:5a:3a:db:1d:13:90:6c:67:75:a5:da:ca:01:
a5:9b:2f:42:da:b8:25:d9:f7:af:ed:b4:5f:c1:7d:
42:d0:58:76:73:e0:44:25:8e:de:57:2d:45:63:f0:
aa:3d:99:97:97:f8:f2:c8:6e:25:4e:3b:5d:6e:0e:
6d:d4:55:20:79:5f:83:07:d4:bd:75:1f:58:e6:d9:
02:60:09:49:37:77:14:35:68:f6:3a:88:12:09:4a:
e3:7f:3e:14:2a:19:70:be:c1:4a:04:5c:30:ee:fe:
f8:ec:31:64:42:a1:69:a1:b8:cf:1b:3e:25:f6:95:
87:f0:98:00:4b:9f:73:7a:32:37:17:bb:fa:f8:74:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5F:B9:B6:2C:4B:AF:D0:23:2D:1E:66:3A:4E:BA:AB:5E:A6:D3:8F
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2e:c4:74:81:8b:6f:01:af:3c:48:40:42:ba:00:92:ed:c5:
85:31:5b:df:1f:0b:73:7f:f8:c6:b0:72:8e:a7:21:17:d9:8b:
c1:34:a6:c5:a2:c8:d1:98:c1:b5:fa:06:6e:93:5c:65:c1:4c:
a4:02:45:a0:ff:30:d5:b2:4c:53:85:e6:2a:03:d9:a1:cc:bf:
fd:a3:e8:d2:f5:b0:f2:7e:2d:e2:31:97:9a:e0:5a:4e:e0:4f:
56:3f:47:bd:17:9b:a7:6d:83:a5:cc:b5:5e:e0:49:7f:45:ac:
dd:ce:74:68:2f:3b:46:a4:4a:34:14:9f:4e:37:f4:97:11:e0:
3d:ff:28:bf:ca:18:42:65:6b:89:f6:f0:d7:27:d9:29:f8:77:
67:8b:c0:f2:fc:d0:f0:3d:e5:f9:dc:72:86:25:5c:c7:4a:f5:
44:bd:e3:16:56:16:31:6a:ae:f9:28:be:34:c1:96:d0:f6:b5:
38:3b:36:7b:b0:dc:42:30:db:cd:23:b6:fd:01:af:83:61:99:
bd:fc:81:83:4d:fa:12:44:25:7d:24:91:c0:84:64:bb:96:4e:
71:6b:13:62:9a:0e:df:08:0e:2e:45:43:37:ef:e9:79:b2:f7:
aa:1d:5b:a2:ed:3f:ba:08:56:00:48:a3:49:5e:d7:a4:02:c0:
b1:b1:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:30 2026 by rpki-client