Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: hyLf8U4lcIBibJUy0Rp6MBCY72V3XZyvPmcdnrt6KQI=
Subject key identifier: 82:7C:C4:81:8C:7E:0D:62:AE:90:42:4F:2A:CC:1C:92:9A:52:95:0D
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 019CAAC68562985673E80EF08B187783F541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 1176
Signing time: Sun 01 Mar 2026 19:01:02 +0000
Manifest this update: Sun 01 Mar 2026 19:01:02 +0000
Manifest next update: Mon 02 Mar 2026 19:01:02 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: Y+ZkRET32Qn8DsHMT4P2Rn/u0u02ORJuUC/tzzBN4HI=)
2: v2k0Z2ANI4HpUtzeG5E2tPsoW1g.roa (hash: tCUybVD79wplSeTPTl/iXVsu/t1DC6P3qKe+acUwYhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:85:62:98:56:73:e8:0e:f0:8b:18:77:83:f5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Mar 1 19:01:02 2026 GMT
Not After : Mar 2 19:01:02 2026 GMT
Subject: CN=827cc4818c7e0d62ae90424f2acc1c929a52950d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:3a:df:bc:98:8d:8f:21:b5:43:4b:28:9d:
b4:03:9c:e9:9b:2c:dc:73:25:ae:21:ab:c8:e8:79:
82:aa:9b:de:60:e4:3a:da:18:c4:39:c0:31:f3:d9:
c1:20:10:64:a0:4b:c5:6c:e4:ea:d3:70:1c:73:aa:
18:fd:d4:4a:a0:93:ae:4e:f0:af:50:fb:0b:bd:5e:
a3:6a:14:95:50:d9:47:76:0b:39:f6:a2:e1:34:57:
32:9e:60:83:28:f4:5e:f0:f1:1c:64:f6:48:bd:70:
ed:4a:ed:52:01:ec:e8:2a:a0:8d:81:83:f7:d7:4c:
63:01:b1:08:e6:e3:e9:d4:9e:63:db:79:12:86:4e:
51:76:97:ce:b1:b7:df:2f:b0:7b:2d:c3:c6:3d:b4:
1e:df:e8:19:5c:35:90:e1:25:15:94:c6:71:97:0e:
3d:11:e8:a7:53:bb:f1:2a:26:54:6f:2a:36:6b:06:
30:fb:28:a4:d8:9b:83:54:77:2d:af:cd:92:db:11:
a6:58:d4:a8:6d:ef:0f:75:cf:18:f4:77:23:36:fc:
49:3c:cb:e3:1b:3a:0c:d5:cf:a0:ff:d6:23:14:1e:
49:3c:a6:95:e1:6b:2a:0a:56:b6:58:65:78:bd:8b:
a7:58:bf:19:96:15:ca:21:3e:2b:a4:3e:e6:c4:dd:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:C4:81:8C:7E:0D:62:AE:90:42:4F:2A:CC:1C:92:9A:52:95:0D
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f7:c9:f5:a5:7f:44:67:d6:67:6d:57:bd:04:62:46:ea:f3:
d1:69:11:3d:14:56:ff:cb:5a:9b:67:d7:04:6f:8a:cf:8b:d4:
16:4e:ef:1c:71:d9:31:dd:55:a5:0a:1b:91:b5:12:81:7d:bb:
0e:1c:a1:74:de:27:b7:2e:98:f0:0e:6c:c6:6a:80:b5:4b:d1:
43:bd:c6:7b:a7:8d:7a:61:1e:a6:8c:38:4c:63:97:47:80:a7:
65:56:b5:1f:50:cc:f1:f2:d9:b7:ec:4b:28:88:2a:30:f5:6a:
c2:ae:44:c5:51:19:04:b8:d4:8d:24:04:be:7a:cb:35:df:f5:
67:76:3a:85:f9:e3:27:a6:fd:d5:27:22:5f:c4:95:48:85:08:
3a:08:41:7f:76:cf:ab:29:45:91:32:61:23:95:e5:99:a7:c1:
37:1a:f9:f8:0d:b0:82:20:32:db:8a:c4:fc:b1:1d:70:e5:af:
84:08:27:56:ab:08:47:34:92:90:96:e3:2e:78:d1:3a:ad:b2:
4b:22:25:d5:e8:6e:66:d1:6e:46:e2:ee:dc:24:40:b4:e1:02:
db:db:f2:9a:69:72:03:63:78:6f:60:6b:75:ac:7e:a6:4a:ca:
d8:c6:15:8e:eb:b5:1e:4a:a8:e6:d6:80:39:68:25:b8:61:71:
2f:cb:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:59 2026 by rpki-client