Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: 7x8t6RLt4Wg9yW9EFF7ZwxSYniXuP5KCxltff9APCFc=
Subject key identifier: 0C:AC:2D:6C:1C:B2:22:1B:49:EA:CF:D3:7F:DF:37:D0:08:53:F4:DC
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019CABD90846AD8C6BA96BC092974C3C4F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 075A
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: 5xxcAEo_4vIQvQTZ11nCDFMgZo4.roa (hash: N8rxJgsy2l36Fd1o/jwhRwE3qaDQpQB4/meaBlVTHWs=)
2: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: n+yPjwArpwn0opXaf0xLzMZmjgAZyqKi9HmZoNMHbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:08:46:ad:8c:6b:a9:6b:c0:92:97:4c:3c:4f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=0cac2d6c1cb2221b49eacfd37fdf37d00853f4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:9e:d7:f9:39:c1:85:20:9a:63:3b:41:dc:
7d:a1:a5:db:18:e7:6b:09:49:f4:25:73:95:ef:e7:
36:fc:c3:1e:1d:12:20:f4:82:bb:7f:25:aa:59:ba:
99:d0:14:06:0c:99:ba:5a:e0:6d:36:8a:56:d3:06:
a5:dd:35:6e:e4:08:d3:7f:a9:21:d0:af:c2:a8:a8:
62:c9:e6:08:64:d3:a8:ba:ed:c7:83:11:21:fd:cd:
ce:b2:86:23:9a:14:61:0f:93:e4:1f:8a:60:65:02:
54:6a:77:8d:82:f4:1a:c7:db:e1:d5:fc:5a:12:65:
73:3b:a8:ed:56:91:a2:7b:41:fe:c7:54:ad:2b:2c:
95:96:1d:d0:31:57:88:4e:fa:5b:3f:5a:c9:8c:84:
7f:ab:76:a4:b0:dd:69:e6:3b:36:19:b8:fe:56:ca:
ff:0d:67:99:37:95:b2:ac:ea:0e:6b:30:cc:31:b4:
16:b1:6d:ad:87:77:1c:5c:03:8e:a3:60:5f:f8:6a:
12:5f:28:fb:bd:09:60:1e:47:9c:a5:35:ee:b9:42:
5c:47:ee:ec:55:f6:9c:89:0b:b9:77:6c:b3:4f:99:
42:3f:db:7d:5c:19:53:53:06:e8:19:bc:68:13:f2:
48:c6:4e:79:b7:5e:b4:cb:25:c2:74:6a:a3:0d:00:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:2D:6C:1C:B2:22:1B:49:EA:CF:D3:7F:DF:37:D0:08:53:F4:DC
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e1:2d:e5:67:f1:53:2e:8a:ff:9e:f0:57:79:0b:d2:fa:81:
a4:f6:f0:e5:b6:aa:22:7d:50:77:56:04:4f:d6:24:81:b8:86:
b2:1b:33:88:b1:87:7b:fd:80:59:40:a2:c3:c1:b6:69:90:de:
00:12:ff:cf:45:1e:1f:3b:a7:1c:9c:14:f3:64:93:d2:d0:54:
5b:5a:3d:7a:a5:40:62:f9:9c:b8:df:7f:be:9b:a6:6d:1a:ef:
2a:29:e4:b1:65:a8:8e:07:84:08:08:93:31:be:c2:84:3e:fa:
db:16:40:f3:f7:f9:fb:3c:a1:b3:e1:72:13:13:40:c4:be:ba:
53:71:01:8e:58:34:36:87:20:3d:f0:6e:63:b7:22:d4:2c:c8:
84:b7:d5:fb:48:f8:64:a4:45:c4:30:cf:0c:6f:26:a7:ba:82:
21:f8:a6:2a:c3:8b:6e:ad:f1:56:40:a6:5a:84:7e:14:62:5d:
30:3f:f4:5c:94:f2:39:9a:7d:6c:8d:0a:03:07:7c:2c:73:3a:
de:c0:2a:f7:62:02:7d:e0:7a:25:74:57:12:07:8d:c5:34:24:
14:01:bb:d3:87:79:2d:3f:7e:82:a5:59:bb:c0:a7:59:2e:8a:
55:1f:02:bb:77:35:74:71:c5:8b:d3:83:47:b1:a3:50:d9:d9:
0f:95:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:04 2026 by rpki-client