Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier: 8bMqeu4VwNO9gclICrKp5YduPbWS8ml7MtGBS5jSXw4=
Subject key identifier: 34:6C:6C:C9:6C:A6:CA:D4:14:9A:C3:C6:E9:D3:D6:F1:C4:71:FA:73
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial: 019CA9EAD3EB439C3D478FA9ED4AA048D574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number: 17CE
Signing time: Sun 01 Mar 2026 15:01:05 +0000
Manifest this update: Sun 01 Mar 2026 15:01:05 +0000
Manifest next update: Mon 02 Mar 2026 15:01:05 +0000
Files and hashes: 1: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: JggZsbd59gF1nAenQEQHmyaq0Ka+PjUA/R0XAcRw3rI=)
2: huWAMVD5OszFJjEyZMJGyZnVtD8.roa (hash: GrjeMdAe8buThfTaZfxv43GTKukIwEfBZ4IJ+OfmdQY=)
3: tHyYlmCt8b_w6qmDnfmJNsi4fgg.roa (hash: kaLv44KKvA/h97d8YwPeGLLWQK0x8whGbJscB5eOBiw=)
4: vHIrFpXjJbBEQLCFk5449-qqOs0.roa (hash: fu+mos6wV/3DS80C/FDLDSbQMT9S0fJqCvMfKTRbzL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:d3:eb:43:9c:3d:47:8f:a9:ed:4a:a0:48:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Validity
Not Before: Mar 1 15:01:05 2026 GMT
Not After : Mar 2 15:01:05 2026 GMT
Subject: CN=346c6cc96ca6cad4149ac3c6e9d3d6f1c471fa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:fc:c9:96:94:ba:6b:f1:d8:64:7a:03:ce:
f6:4c:1e:60:8b:f6:a0:8d:f9:cf:b9:f0:4c:33:53:
47:20:19:f5:5a:dc:64:33:64:a8:38:51:11:d5:af:
27:e9:fd:51:c8:d1:cd:bf:e2:c9:1e:ea:d7:98:4f:
77:8d:2b:f1:8e:77:6a:94:c2:d3:f9:73:09:ef:53:
11:fa:4f:c4:29:1e:45:40:c2:0c:a5:9d:59:73:8d:
1c:1f:a0:5c:89:29:41:0a:db:b3:43:f0:2a:d5:10:
f3:f9:fe:b7:4b:5a:08:91:0a:41:0f:de:6f:82:cb:
92:1a:2e:eb:94:57:83:f6:7c:30:a1:d8:69:b8:b4:
1b:f7:14:79:64:d6:62:0b:f0:85:90:bb:be:8d:a2:
f3:80:7d:4b:17:5c:30:5c:b1:7a:34:dd:fb:4a:44:
a2:2a:71:63:3d:6c:14:97:5a:4f:b0:dd:57:88:93:
6d:1e:15:67:4f:e9:e5:e4:8f:21:ff:fb:f0:25:33:
da:12:7a:6a:66:3f:f4:05:3f:34:0c:51:7f:78:2b:
de:ab:a0:a3:30:45:28:53:b4:de:de:6e:4e:7e:a1:
78:91:7b:d9:10:7d:50:47:c2:26:87:d8:dc:c6:93:
f7:18:2b:98:95:e8:76:19:38:71:70:46:84:1f:10:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:6C:C9:6C:A6:CA:D4:14:9A:C3:C6:E9:D3:D6:F1:C4:71:FA:73
X509v3 Authority Key Identifier:
keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2e:91:24:de:57:99:be:74:61:ad:b4:f9:1c:f5:f9:d3:06:
93:6f:ab:5c:e1:e9:52:6e:25:55:eb:a3:60:e6:60:db:6f:0a:
a4:12:aa:ac:d6:30:78:7a:e1:ac:8a:d9:55:13:4e:d9:b0:8f:
20:a0:11:75:84:ab:db:8f:79:9b:5b:f2:b9:59:c6:a3:b8:b6:
7b:03:00:fe:36:94:33:95:9a:f7:97:03:10:f8:63:cb:f6:b9:
d2:f0:9a:28:74:07:1f:5b:76:a2:77:d5:d2:07:db:59:80:a1:
26:ad:61:a0:4f:cf:c2:38:79:0a:f5:61:5c:82:f7:9d:32:ed:
e2:f5:67:9b:9c:55:e5:59:29:20:df:a5:a8:7e:3d:42:98:cd:
02:39:a6:00:d7:db:f4:24:86:78:ef:bd:56:61:b6:a3:f7:7e:
0b:7c:16:b4:9b:1b:6d:ae:a9:b2:7f:bd:e6:07:2d:c8:25:e6:
54:d4:1f:08:5b:92:2a:0c:5e:a0:7d:c0:59:f7:be:e9:e9:11:
5b:7d:8d:ae:36:97:cb:44:84:3a:95:2c:46:89:b0:d4:97:a7:
d4:6c:d8:a2:8a:8c:3b:66:c1:8d:cf:6c:1f:e8:1b:4d:75:d5:
a7:47:ed:e1:10:31:14:e6:7f:ff:c6:dd:99:89:09:ec:b9:7b:
68:0c:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:15 2026 by rpki-client