Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: S1jU8gP3C7ELY3p9JXsjuVea+ge6eSe48kLSVVfwrCc=
Subject key identifier: 37:AB:9F:92:4C:77:94:F5:61:4A:CE:3B:E1:FB:3A:F0:6D:A6:A6:91
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019CAEA39A302F457701167B269246217885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 13:01:23 +0000
Manifest this update: Mon 02 Mar 2026 13:01:23 +0000
Manifest next update: Tue 03 Mar 2026 13:01:23 +0000
Files and hashes: 1: DGukc6480PTm8A6qHwc8DlqO2P4.roa (hash: f9ejFsVfN9O7L7m90T24ZiiptOfoC8NK6uhiGNPuCps=)
2: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: YyZuCoq3XppWYkT/CnDpRr73CXIT7lcTaVVfW33diig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:9a:30:2f:45:77:01:16:7b:26:92:46:21:78:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Mar 2 13:01:23 2026 GMT
Not After : Mar 3 13:01:23 2026 GMT
Subject: CN=37ab9f924c7794f5614ace3be1fb3af06da6a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:a0:03:57:4e:6d:d9:52:c2:5b:97:b5:2d:
9d:6d:82:d4:40:2b:83:78:d6:3c:ee:f6:c7:a0:3b:
15:00:79:ff:04:da:9a:23:e4:15:44:ec:0a:29:53:
fb:22:a8:01:af:ed:b1:98:0b:a2:bd:eb:64:4b:51:
b5:df:32:2e:05:34:40:92:96:c1:2e:7b:90:c5:79:
50:0d:fd:af:bd:ef:91:a6:e8:97:24:56:ed:ed:00:
18:ea:9b:4b:52:37:01:68:d5:cc:6b:e3:93:ed:79:
3c:13:49:da:b1:57:d3:03:96:f7:d0:1a:9c:19:a6:
4c:7d:9b:66:5d:5b:e3:d3:ac:6b:c2:c3:cf:39:d2:
ec:90:c6:6c:eb:f2:69:ad:12:80:4b:0d:c7:80:f3:
94:c1:00:67:3e:00:a7:56:28:5f:60:bb:84:0c:92:
a0:27:d3:bf:7c:ce:cf:8c:47:eb:92:0c:0e:d0:4f:
b6:08:71:80:2b:da:b2:5f:94:1a:dd:8e:a2:19:ee:
61:62:ff:23:06:29:8f:e2:fa:fe:30:5b:7e:95:11:
02:ed:46:0d:53:ce:e9:36:b5:89:15:a8:44:20:f0:
6f:26:e8:d1:85:d0:a4:ca:dc:57:25:02:84:7d:21:
00:68:13:10:6b:f9:d6:41:53:91:c6:c0:55:1b:40:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:9F:92:4C:77:94:F5:61:4A:CE:3B:E1:FB:3A:F0:6D:A6:A6:91
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:49:92:57:10:0b:aa:e9:e5:c7:a9:67:2b:2b:67:49:ae:79:
99:cd:f1:ea:88:51:97:ae:05:74:e9:be:af:8b:42:6b:1c:b0:
48:c6:06:bf:98:83:dc:f0:59:78:d9:45:e4:93:59:97:f3:8e:
c4:46:94:4a:f2:27:ea:61:8a:20:15:65:76:3d:f6:e1:08:dd:
b0:73:4d:87:af:b4:47:e2:fe:01:0f:b3:a8:7a:39:54:a7:9e:
ef:e0:22:38:b2:9f:22:d9:18:e5:b5:56:2c:57:99:b3:a3:03:
f0:91:13:41:d0:74:b2:fc:fa:13:2e:6d:ac:f6:4b:3b:f1:87:
23:27:ac:35:2b:81:0c:6c:1a:bc:33:ef:5c:df:db:32:4d:05:
c0:71:9a:ee:c8:f9:e3:2d:6d:9b:ea:77:3e:8c:20:28:25:0e:
5e:c9:4b:53:81:ac:b4:14:3a:8d:74:be:c6:68:6e:e7:c4:c7:
be:ac:36:2c:f9:de:56:90:fb:50:de:6c:20:17:fb:3d:bc:5d:
33:95:be:05:03:92:08:d0:1d:df:a0:bb:52:84:f4:16:db:05:
55:20:f9:1d:3d:e2:96:f3:52:a2:18:02:96:47:40:4d:06:27:
d2:3e:1a:8c:52:bb:ba:7e:24:d2:f0:90:b0:62:fa:0d:5f:13:
c9:5f:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:48 2026 by rpki-client