Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: 1UVB0nNT5SwDAOm24t/z/v5R2cwzv4np3VF4wTY7ANY=
Subject key identifier: E4:7A:EB:1D:61:5F:E8:38:A0:4F:55:65:AC:42:F7:05:F2:03:17:52
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 019CADFE4DB5CE89F6A16BCBEFA66DB421E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 1802
Signing time: Mon 02 Mar 2026 10:00:50 +0000
Manifest this update: Mon 02 Mar 2026 10:00:50 +0000
Manifest next update: Tue 03 Mar 2026 10:00:50 +0000
Files and hashes: 1: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (hash: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: VYtWSwUYiCPOGAd6pWrX33kI/SHRVwPEuY0qXf1trEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:4d:b5:ce:89:f6:a1:6b:cb:ef:a6:6d:b4:21:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Mar 2 10:00:50 2026 GMT
Not After : Mar 3 10:00:50 2026 GMT
Subject: CN=e47aeb1d615fe838a04f5565ac42f705f2031752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:8d:f3:a2:0e:9b:90:6e:b6:77:65:bf:c3:
2f:21:78:e8:3f:0d:a6:e4:10:87:8e:74:2a:da:db:
54:fc:e4:78:00:d4:58:ff:2b:93:ad:e5:8f:a1:95:
72:bd:c0:0f:68:67:e0:e7:79:0c:cc:66:c0:67:6d:
a2:2b:69:1e:d0:c0:98:77:8c:08:39:1c:d9:27:0d:
b2:86:b5:4a:6c:b0:1f:dd:35:37:94:bc:5f:42:f8:
44:0b:58:5c:47:03:a0:fd:64:1a:6f:4c:ee:65:3a:
36:fe:ef:73:75:50:8a:fc:77:93:22:25:04:2b:b5:
45:b7:33:23:38:52:43:41:41:67:69:1f:68:b9:0e:
54:8f:82:75:0e:01:86:60:7e:e7:06:e2:c3:ec:97:
6f:61:ae:f6:c0:3d:1e:63:b9:4f:9d:92:3f:69:3a:
17:00:fc:f1:f7:57:91:6d:00:9d:62:28:d9:5b:de:
4f:24:f7:8f:b6:a6:7a:05:af:eb:c6:d1:5c:2a:ad:
2e:c0:9b:3a:16:42:58:e0:29:b6:fb:88:79:b4:84:
dc:ea:0d:c7:c1:23:79:b5:7d:72:a8:38:08:94:8f:
94:50:39:d3:33:de:97:c1:50:5a:b6:aa:a6:cb:c0:
d2:a5:10:d2:8c:35:99:1f:20:15:b5:cb:d8:7a:eb:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7A:EB:1D:61:5F:E8:38:A0:4F:55:65:AC:42:F7:05:F2:03:17:52
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:2c:c9:b7:da:4b:0e:80:2b:ce:77:f3:83:5e:82:6b:38:
d3:3f:17:de:14:c7:1d:90:e6:c3:e5:d3:6b:fa:06:49:61:20:
45:31:a6:9b:1d:22:44:06:97:22:60:1e:ce:f6:ec:41:24:6a:
86:6c:de:3a:d1:5e:35:d0:d4:89:d7:e8:0d:bd:b1:a4:d7:60:
53:f3:da:6c:21:cb:43:ea:e1:8f:8f:9e:f0:5c:3a:74:9e:24:
07:61:20:07:d5:e9:e0:2b:aa:a2:c1:31:7b:c2:5c:a9:2c:4e:
38:4f:34:27:36:b4:69:9d:0d:5f:9d:57:2c:ab:49:40:82:69:
2a:03:ec:0e:6b:2a:67:24:a8:4b:2e:95:1f:e0:8c:53:39:3e:
82:48:ba:19:e6:4a:70:c8:97:82:f2:01:ce:da:c1:5c:ea:9a:
38:aa:e9:2d:ee:10:b1:16:bc:f0:5c:0d:f8:00:2a:f3:bf:7c:
c2:69:96:16:75:a8:fd:bc:ca:d7:cd:c3:8d:12:bf:02:20:d4:
a8:74:e6:06:b7:86:b7:c7:60:db:e0:db:aa:15:28:db:50:6a:
75:f5:32:dd:82:39:d8:08:66:ab:d8:47:91:6a:0b:ad:97:da:
63:7f:5b:0f:5e:f1:3e:ad:56:05:8d:f2:8e:38:18:7c:c6:54:
11:7d:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:24 2026 by rpki-client