Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: tSN5XZKVYES2e4prN36BHjj8PYdEvBn5579GNRGSgNA=
Subject key identifier: 0E:03:E7:4C:35:A0:DF:55:F2:2F:19:1A:E8:AA:A9:59:12:B5:00:B4
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019CA86A2522D2F74EB70547B795DA329590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0BDF
Signing time: Sun 01 Mar 2026 08:00:54 +0000
Manifest this update: Sun 01 Mar 2026 08:00:54 +0000
Manifest next update: Mon 02 Mar 2026 08:00:54 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: vPWHnp6RIDOofrwYWbi/1OwxYM6Nehtv5RVp+p8cpK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:25:22:d2:f7:4e:b7:05:47:b7:95:da:32:95:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Mar 1 08:00:54 2026 GMT
Not After : Mar 2 08:00:54 2026 GMT
Subject: CN=0e03e74c35a0df55f22f191ae8aaa95912b500b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:6c:c2:7a:c1:00:b2:0d:4e:ec:4d:92:5e:
80:8d:fd:96:5c:57:58:64:84:5c:0d:54:22:c1:15:
c3:bf:4f:24:24:bd:4c:34:2c:d7:96:ca:7e:19:e8:
83:57:84:59:08:fe:e3:93:12:6b:e6:fe:e5:d3:4c:
15:56:fd:ec:4a:bb:34:8f:48:f4:43:34:f9:35:fb:
48:53:b4:62:04:b2:38:09:f5:a4:fb:48:ea:2f:44:
2a:7b:94:79:90:3c:fc:b3:4a:99:37:fd:ff:e8:9e:
7c:e1:77:56:2c:ba:e4:97:55:94:ce:de:67:a5:24:
03:f1:0a:e2:ce:74:e1:08:51:9a:29:8b:3e:8e:8a:
9b:8c:02:43:69:f5:a5:ab:55:8e:88:e2:ea:68:95:
a9:80:1a:1f:d6:e2:4b:25:e1:89:d0:8e:41:13:06:
00:a9:e9:eb:b2:61:98:b1:b4:25:38:76:27:e0:79:
1a:97:e5:a3:c9:c2:91:61:7f:c6:e6:71:ce:83:bd:
b9:ab:6a:25:20:f5:4b:44:41:70:51:f7:2b:c4:18:
19:44:5f:62:49:12:ef:9c:17:5a:cd:36:46:34:93:
88:ff:0f:04:f4:5b:3c:69:a2:2e:35:60:35:f3:98:
1b:2e:86:ca:9f:4d:63:9f:a3:0b:ac:5f:41:fb:e1:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:E7:4C:35:A0:DF:55:F2:2F:19:1A:E8:AA:A9:59:12:B5:00:B4
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9b:3c:7f:03:b0:0e:a3:8b:04:74:88:3f:e4:38:12:56:9e:
cd:73:74:2c:ac:d6:ef:9f:96:12:6c:83:78:e7:42:47:53:af:
9e:af:9a:82:4c:4d:90:17:87:fe:82:bf:dd:6f:f0:27:d4:9c:
10:48:0f:7c:4a:ab:5d:66:95:b3:3e:2c:5a:69:03:1d:42:92:
a4:b8:8f:8f:cb:32:af:37:ec:b5:8c:18:d1:b6:a7:91:e4:6d:
eb:3d:ca:15:9e:6e:d5:ce:96:d6:e2:eb:21:45:aa:6b:53:46:
08:e2:2f:14:4a:5d:88:2e:a0:e0:be:50:f1:05:18:30:ea:1a:
22:28:36:df:d0:50:9e:cd:ec:c9:9b:1d:fa:d1:93:ba:74:67:
3a:2a:20:b9:c1:17:5d:86:77:d4:f6:71:95:1a:bf:d6:e3:9a:
92:e6:11:ac:97:e2:6a:e3:87:50:69:bd:af:85:eb:c4:4c:ad:
79:48:51:c9:ab:26:ce:24:3c:d6:77:3b:b5:e2:64:d7:5e:20:
b8:29:94:14:a3:28:cb:99:2f:11:9d:23:44:fe:5f:e4:9f:31:
2f:f0:83:21:65:e5:cf:5c:28:c2:fc:01:f0:4d:1e:df:2e:b7:
ee:4e:7d:bd:56:b2:b6:f1:c7:c9:8b:e2:13:98:29:99:6a:0a:
f7:96:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:02 2026 by rpki-client