Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier: 3ThcOA/7rXvK7wCqH9ha/f/4rxl+D/65ilE539OMUjY=
Subject key identifier: 0A:8F:BA:18:8C:E7:83:A2:99:23:2F:5C:80:5E:49:D3:03:A3:07:74
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial: 019CAB34744C448F160B39AFB4D54D99872D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:07 +0000
Manifest this update: Sun 01 Mar 2026 21:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:01:07 +0000
Files and hashes: 1: EkKLuZw4LV_kTAmqXpErqPpsQB0.roa (hash: NBo+lqt+AsFMxVrnLsaa8l21I1AWQ5KFNlmQ5ApE1BQ=)
2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: T97L2NDScvwvviYrp58pthxDp3En52UL3T56t7jV2Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:74:4c:44:8f:16:0b:39:af:b4:d5:4d:99:87:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Validity
Not Before: Mar 1 21:01:07 2026 GMT
Not After : Mar 2 21:01:07 2026 GMT
Subject: CN=0a8fba188ce783a299232f5c805e49d303a30774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:cb:ef:a1:9a:b7:17:55:77:12:02:38:30:
46:e8:43:91:5d:a0:85:e3:7c:07:a8:47:a9:65:45:
14:86:37:d8:45:80:f0:45:e3:ab:8c:bd:41:60:a1:
c2:2b:3d:bc:4b:74:ad:36:de:21:72:cd:f7:f3:81:
2d:28:fc:ac:f2:ac:aa:23:3d:27:8b:a1:bc:9d:80:
49:0b:8d:6a:bb:b3:5d:8c:01:d0:cb:49:eb:12:3f:
44:e0:e2:45:48:da:41:e2:79:c9:09:18:de:bb:55:
bc:a8:a7:c6:9b:30:b3:e0:28:54:ad:8a:c1:27:17:
21:1c:d5:c6:5d:d3:30:9a:7e:23:6e:54:6a:21:9b:
b6:80:bf:d4:24:3e:53:b5:80:43:d3:ba:10:92:2f:
6b:76:34:16:82:66:b9:c5:55:36:13:62:b0:d7:ce:
fb:1e:20:8b:13:46:f5:74:8d:fc:e2:74:23:7b:64:
85:11:0c:a7:e8:a5:3b:c1:bb:1f:36:e3:3b:11:63:
a2:2a:7e:d0:0d:72:0b:4b:d8:c3:5a:9e:42:9c:61:
cc:39:29:17:c1:f9:a3:fa:a3:e1:95:38:36:95:a3:
a3:2a:f9:cc:53:a7:33:69:7d:24:48:43:c8:d2:98:
28:77:a4:69:46:c0:1d:fe:2a:e9:7c:8e:72:db:92:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8F:BA:18:8C:E7:83:A2:99:23:2F:5C:80:5E:49:D3:03:A3:07:74
X509v3 Authority Key Identifier:
keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:be:ab:dd:86:1e:bb:66:87:fc:4e:90:91:93:32:32:15:94:
4f:db:32:89:03:bf:26:2c:30:a9:83:78:5b:21:b5:a3:08:a7:
da:9d:8a:68:18:57:18:ec:14:86:64:c3:d1:d4:c5:4e:56:a4:
99:42:07:c1:6a:5d:57:b3:2c:bd:f4:15:81:00:b6:fb:ce:2d:
58:b1:50:dc:16:60:b8:57:4b:e9:d2:92:a0:d0:96:45:72:f6:
e5:b5:7e:26:32:37:5e:66:89:1c:81:6b:0c:88:ff:12:0a:02:
7d:26:75:fa:22:d2:a5:cc:b9:60:7c:f6:d9:19:59:f8:1d:12:
18:5c:dc:e4:fd:80:a5:87:7c:ac:54:09:05:37:6c:69:4e:cf:
d7:02:ce:24:16:be:e2:74:98:e8:b8:14:3e:fc:83:02:94:4b:
ac:46:5c:af:59:6c:5a:6c:0b:43:55:19:d9:f1:4e:8d:e5:88:
f7:f4:af:92:38:e1:bb:17:13:d9:b3:31:81:ae:0c:d2:05:a0:
ff:f9:6c:6b:5e:7f:5c:26:41:28:af:f5:a1:b5:94:d9:31:84:
47:1d:02:8f:09:14:fe:0c:d3:e7:48:18:11:21:d7:f4:b1:4c:
6d:b1:2a:15:3c:c6:c3:6e:c9:a1:9c:fb:a6:57:3f:2d:c4:c4:
6c:c5:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:39 2026 by rpki-client