Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: +33B/g64eogq+hKvrvg1S1mAlwG8I2MryKtWu68hZP4=
Subject key identifier: C8:F6:B5:A7:A1:61:50:34:D4:0B:B9:2A:2A:6B:F2:4E:4C:66:75:4A
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019CAC0FB2FBB5C1F495653E4032935D899D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0BFE
Signing time: Mon 02 Mar 2026 01:00:35 +0000
Manifest this update: Mon 02 Mar 2026 01:00:35 +0000
Manifest next update: Tue 03 Mar 2026 01:00:35 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: LXVR7jnxf98HqR+jnoToKSrLG049DL9LIEyOh8R49PM=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b2:fb:b5:c1:f4:95:65:3e:40:32:93:5d:89:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Mar 2 01:00:35 2026 GMT
Not After : Mar 3 01:00:35 2026 GMT
Subject: CN=c8f6b5a7a1615034d40bb92a2a6bf24e4c66754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:c9:b4:f8:d7:ec:d7:42:90:8d:e0:03:de:
6b:85:14:a5:a8:f8:61:43:46:bb:c5:d2:1f:88:6a:
d0:da:4b:e5:04:a9:06:27:dd:3e:5a:be:97:7a:ad:
46:78:5f:47:29:8c:5a:83:ad:78:c0:14:d2:6e:83:
8a:2f:9c:5e:8b:2d:cf:8c:81:54:1b:ca:be:af:ae:
26:1a:b6:13:29:18:8e:c6:2e:b7:f2:bd:d4:26:c8:
c5:7f:51:8e:70:6d:d5:82:01:31:2b:18:e9:9f:9c:
2e:06:74:0c:d0:ac:4c:f6:d3:5e:d4:56:46:8b:43:
5a:6c:8e:f6:5f:ee:76:bb:84:d9:e3:d4:31:23:04:
f2:c7:72:80:29:e3:77:0d:3f:09:2c:cc:9f:69:de:
44:55:42:5e:b5:99:fb:c8:33:a0:2a:99:67:52:b6:
f1:14:bf:94:d1:d2:3d:de:8f:4d:04:7f:a6:c1:cc:
81:b4:ad:f3:2f:3b:b1:db:c8:08:e2:53:84:60:db:
74:2c:78:53:28:9a:79:f6:1b:30:dc:56:7c:a5:1f:
c1:07:9e:d2:2a:d0:bd:50:99:dd:92:41:4c:27:01:
e4:2e:49:72:ff:19:fd:46:69:fb:1b:74:a8:f4:1d:
3b:8b:0d:80:06:6f:e8:53:89:23:10:59:92:ac:8e:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:B5:A7:A1:61:50:34:D4:0B:B9:2A:2A:6B:F2:4E:4C:66:75:4A
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1a:41:b2:67:d3:29:59:d0:30:aa:16:b3:dc:9c:7b:0b:0e:
f6:ed:c5:56:37:21:17:e9:e8:cb:a0:02:f3:39:7a:5e:c0:84:
dc:da:f6:12:0b:97:37:9a:88:94:00:ae:56:01:a2:fd:63:09:
fe:84:4a:32:b2:7d:ad:9f:48:35:50:71:4f:93:90:3e:d1:a4:
0a:e5:1f:a8:c4:6e:14:0a:56:70:da:53:c8:b3:41:ce:02:c6:
76:c3:da:e2:8f:dc:18:10:98:a7:23:38:72:87:f8:65:59:fa:
c7:45:7e:68:34:cb:26:62:28:31:f9:d1:bb:a8:56:1b:b3:ce:
0d:d9:80:25:75:b5:76:d5:74:82:f5:64:a9:13:37:c6:e5:32:
12:30:e0:9f:07:40:37:4c:18:e7:69:55:9c:91:da:2e:ed:1d:
9f:d1:a8:7e:2e:e2:0e:fa:d6:dd:7c:e4:f1:f2:cc:42:75:26:
f1:9e:f4:4c:68:ef:ea:26:3f:df:1c:a9:ba:f0:f3:71:63:50:
ee:92:af:f3:6d:ab:47:f1:ce:e2:aa:3d:fb:94:31:75:0e:79:
3a:85:74:4e:9f:96:86:39:e7:4d:b6:af:25:76:94:8f:70:83:
83:ce:b8:c6:06:bc:70:91:15:f2:2d:5c:2f:6d:e3:c7:c4:ec:
19:9d:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:27 2026 by rpki-client