Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: jcEVk6lkk+K8Zt+iXANGPSC9zB6+VveZPWNvDXOvUq8=
Subject key identifier: B7:E8:1C:72:75:FA:AF:D7:EC:ED:BD:E6:61:52:27:13:F4:AE:2B:CE
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 019CABD9354760DD6A58DA95C5B5EF4EA1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 1603
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: 9s39xRIy0ovz43_NNnpZQL7J2kk.roa (hash: oPXpQgKbn2LA/+wlfEIifDrWhGCahORiCPFzylNJltg=)
2: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: IfoKsCa0EynUEdHm3H3FRMRqcIDsndCXxCkYHnIIKCk=)
3: XNqMimQmi16joRmSNKtij3MWcqw.roa (hash: W6R4J2CPCxTIFG92bOgpHJLgm5G3zw04PkJ9pMuWLS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:35:47:60:dd:6a:58:da:95:c5:b5:ef:4e:a1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=b7e81c7275faafd7ecedbde661522713f4ae2bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:4b:2f:d3:c6:7b:7c:90:f4:f8:79:d0:26:
d8:43:df:9a:1a:14:b2:79:7d:7c:36:16:c1:55:f8:
59:42:7a:c9:df:e8:b6:0e:a5:80:20:7d:c8:47:27:
4b:d2:a6:f1:3f:8b:0f:05:65:67:d8:ec:79:aa:2f:
45:bc:6d:8c:e8:ea:5b:7c:a0:2c:a4:e4:2b:90:ab:
e7:dd:fd:9c:39:4e:87:94:f2:f6:39:f7:77:f7:01:
6d:84:8b:6f:ab:35:f7:00:28:2e:df:a0:5d:ea:40:
d8:52:df:15:89:10:be:b5:1e:80:a5:03:b9:47:b8:
31:6b:0d:c7:b7:8e:90:3e:1e:c9:e6:53:b6:ec:4d:
2a:4e:48:35:95:d6:0e:25:b7:af:7a:a5:36:41:21:
46:f7:30:b9:36:3b:0c:c6:47:c2:68:1e:04:4b:89:
67:ec:a5:46:7f:9a:ac:46:c6:f2:a1:f0:e4:cc:5d:
a6:60:f0:3d:4c:75:a6:fd:83:9f:aa:d2:22:40:c9:
41:07:b5:a4:62:02:21:1a:d5:e5:1d:6a:14:06:f6:
bf:1e:42:cf:20:17:2e:39:24:22:5c:db:0a:0f:e3:
62:82:5d:8e:80:32:30:3c:12:e8:64:79:15:f8:a0:
61:9a:bf:b2:b0:ae:99:6a:cc:79:f9:63:bb:52:ac:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:1C:72:75:FA:AF:D7:EC:ED:BD:E6:61:52:27:13:F4:AE:2B:CE
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6f:d2:27:2c:01:36:b3:e9:8b:52:ff:2d:32:4c:9b:0e:6d:
12:e8:6a:61:71:de:76:f1:d0:63:c7:e8:30:12:78:cd:d8:17:
81:ed:bb:af:6d:9a:ce:4d:5b:11:65:be:a8:23:34:58:00:90:
f5:25:84:12:b9:bb:49:c9:f5:56:3b:30:62:00:4f:1c:da:e9:
78:ed:29:f9:63:88:3a:8d:68:a7:3f:95:8e:16:c9:8e:7b:05:
b8:a7:c6:ba:da:ef:67:61:18:16:60:9e:3f:79:0d:88:4d:51:
06:a8:1e:60:1f:83:ef:52:9c:de:bb:0d:3b:a0:52:2e:84:77:
c6:95:d0:fd:b3:5c:35:e8:eb:2d:30:54:c0:8e:de:b2:66:3c:
f3:1b:78:a7:ac:3b:35:e1:fd:b4:22:4c:38:68:e4:48:4f:4f:
f8:bb:a1:8f:66:13:32:fc:30:0b:29:e8:16:05:bd:57:9f:b3:
2f:f4:60:cb:dd:63:33:f6:72:d1:e9:05:f4:ca:61:76:8b:f9:
1f:81:d7:dc:d2:6f:7c:de:58:2e:f8:4e:de:10:13:f6:02:2c:
99:24:2e:c1:44:8e:50:46:27:5a:3e:27:35:1c:d9:6f:b3:8c:
77:8d:4a:dc:0c:74:a9:f5:9a:ca:8e:fd:9e:c1:62:7c:16:5b:
7f:f1:fa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:22 2026 by rpki-client