Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: qxdW1RJM+QwfGuTrF7UX1FFueigoPKLeOqrnnMVMtIk=
Subject key identifier: 5A:5C:C3:C1:BC:0C:68:1F:BC:36:71:4A:DB:A4:F3:4D:B7:7D:90:C4
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 019CACEBF8615417A1B2D4138C3B9B9AE558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 07B5
Signing time: Mon 02 Mar 2026 05:01:11 +0000
Manifest this update: Mon 02 Mar 2026 05:01:11 +0000
Manifest next update: Tue 03 Mar 2026 05:01:11 +0000
Files and hashes: 1: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: WLxx116roC0j0+gVibK4xfXYHwuzd2Lc19SHVu4jkvg=)
2: yAy7dhfnf5ztz8zG2y2BYT0K2Nc.roa (hash: Yhi2sxhWb+ZdylE1qzvoU8mFvZlrRwD3FR8dKXylg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f8:61:54:17:a1:b2:d4:13:8c:3b:9b:9a:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Mar 2 05:01:11 2026 GMT
Not After : Mar 3 05:01:11 2026 GMT
Subject: CN=5a5cc3c1bc0c681fbc36714adba4f34db77d90c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:9b:32:7a:a0:11:5e:f4:25:a4:9f:3f:f4:
ab:21:00:89:09:d2:70:ae:08:d8:74:72:49:7a:24:
70:56:ca:80:e4:23:1e:44:10:8f:7d:e8:aa:08:2b:
f1:bb:11:5e:f7:cc:46:ea:55:26:7e:d5:12:0b:c0:
09:5e:32:23:c5:46:f6:ac:28:11:4b:5f:a6:c2:4d:
c0:0c:34:64:01:6e:a5:be:fa:3f:16:75:9e:22:9f:
d5:b9:4c:a2:ba:40:da:41:a4:67:c1:a0:e6:1c:dd:
5d:05:9c:8c:8d:5b:0e:75:3f:16:ce:98:f0:18:fa:
00:3a:d2:ce:a8:9b:34:38:ad:30:9c:89:dc:f4:4b:
dc:d0:06:04:99:49:18:b9:c8:66:61:ee:84:5d:e6:
02:5a:bc:44:0d:54:69:a0:b3:de:d4:e1:8e:47:89:
cc:99:a1:a1:9c:57:42:87:63:d0:cd:83:9a:5f:3d:
26:88:50:a0:07:de:93:4f:5f:67:a6:31:42:11:69:
98:68:22:cb:1c:75:7b:6b:9e:c6:17:29:9e:dd:35:
c0:ef:88:17:46:f5:a0:31:65:65:1e:76:90:98:2f:
bb:70:9f:b0:bc:4d:19:9c:04:1b:f4:fc:ed:78:ad:
48:50:9c:08:e1:d2:b3:30:88:1a:f4:70:43:03:c6:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5C:C3:C1:BC:0C:68:1F:BC:36:71:4A:DB:A4:F3:4D:B7:7D:90:C4
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cd:69:18:33:fc:6c:2f:e3:4a:53:b5:1e:20:d0:47:27:e0:
c5:67:ec:73:9e:2e:11:84:06:c9:eb:32:e8:ca:5e:90:c2:a0:
fd:2b:e7:02:d4:e5:ae:07:08:8e:0b:e5:31:27:38:51:d6:f1:
e8:e5:2f:49:cb:7d:80:07:43:9b:1d:45:0c:cf:37:e1:0c:17:
b1:3b:c0:87:4f:65:67:6d:f8:18:a4:4a:fb:0d:bb:cc:95:20:
cc:fb:d9:7f:12:bc:a2:19:40:90:3a:50:91:80:30:19:32:c8:
e1:3d:cb:10:ac:9e:fb:64:cc:e2:60:86:dc:a9:0d:4f:06:8e:
74:b3:ad:de:b6:55:78:8a:98:09:8c:6c:11:c3:cc:29:9d:f7:
e7:44:b7:2c:d9:f5:67:2f:b5:2e:2f:ed:17:bf:da:5b:6f:fb:
ad:d7:44:a1:ad:0c:31:00:23:60:f0:1b:77:bf:f4:67:71:a1:
50:4c:f9:95:9f:6c:98:d7:9d:f7:e2:ff:33:40:6c:24:46:b2:
44:1d:c7:4d:e2:7c:2b:9b:c2:26:a8:48:98:68:e7:7a:d8:7f:
09:50:72:89:d6:a0:67:a5:ca:67:ad:2e:ed:1c:62:28:ed:4a:
be:4a:80:74:14:ae:7e:42:21:40:44:a2:0a:9f:24:41:94:c7:
e0:d3:89:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:42 2026 by rpki-client