Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json)
Hash identifier: qV6w6j3xqa4ClTapCAGD/EE51+dlOrIpyNI0XBnkCW4=
Subject key identifier: 55:FB:F0:51:11:0B:72:C9:C4:51:65:E4:3D:D1:3A:19:70:C9:7A:A5
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 019CB0923F93839293EB27EA7ECC7BAD9ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 22:01:40 +0000
Manifest this update: Mon 02 Mar 2026 22:01:40 +0000
Manifest next update: Tue 03 Mar 2026 22:01:40 +0000
Files and hashes: 1: 6TXT9ablV4LVCmi_k3OpnYEj1Wg.roa (hash: RWPdZZfoKBXzOGAFBE4s3FzfbfbvMdOxeWvRnz9S04k=)
2: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: V3CP2XewMulbHfvse3UwIFpYBbsuXReHwY8iq0HJVLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:92:3f:93:83:92:93:eb:27:ea:7e:cc:7b:ad:9e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Mar 2 22:01:40 2026 GMT
Not After : Mar 3 22:01:40 2026 GMT
Subject: CN=55fbf051110b72c9c45165e43dd13a1970c97aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:cf:1f:0c:89:14:5a:84:7f:fc:85:21:46:
0e:3f:42:9e:a9:5a:9c:09:80:a8:c5:eb:fa:ef:e7:
47:b4:bc:c7:32:95:2a:d0:c3:63:59:46:ba:b4:52:
0e:58:b1:fe:5c:05:52:fd:0f:58:83:6e:06:39:88:
e6:3f:44:02:67:b8:bb:ea:21:8d:ab:d6:b4:c6:03:
d0:06:db:4f:40:fc:ea:5a:91:a8:13:a2:14:87:d2:
49:ff:f2:da:11:67:74:56:f6:f1:f9:ef:11:56:74:
2f:60:22:da:6b:94:67:68:36:57:fa:f2:65:a9:47:
ac:7b:20:ec:d5:c6:47:35:be:ed:81:1f:cd:1c:3c:
cc:29:38:36:07:00:1f:b3:4b:3b:b9:77:1e:84:50:
7b:ae:4b:fd:24:65:40:af:4b:32:2f:62:6d:1b:9d:
16:63:81:ad:96:ec:06:a7:a5:0e:5b:13:68:78:c3:
b6:fd:35:2f:9a:c3:ed:ec:c0:40:94:e4:d4:ac:f7:
c6:16:d9:1f:ea:73:c1:78:db:e4:76:51:e6:2f:04:
0b:df:12:cf:3b:42:44:96:5c:a5:f5:b5:97:ce:9d:
84:9f:d2:98:26:d9:a4:6b:f3:6b:18:8c:ce:91:83:
b4:20:fb:c7:55:cc:a7:34:e0:1a:99:94:c1:b3:95:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:F0:51:11:0B:72:C9:C4:51:65:E4:3D:D1:3A:19:70:C9:7A:A5
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:52:69:b9:1d:22:21:c2:c7:b4:c7:e7:bf:5e:0b:e4:b4:ac:
17:03:28:d4:f8:bc:24:c9:6f:16:d5:29:65:28:a6:d7:f0:43:
97:69:43:38:d0:42:b1:31:9d:9f:d8:a8:72:63:cd:5f:1b:aa:
a7:34:8a:c7:de:50:45:4b:df:7a:43:ff:b0:d1:33:91:68:d4:
75:e4:bb:bf:27:e2:5d:06:38:aa:4e:13:e4:14:1e:50:e2:ee:
7b:84:32:1e:1f:f5:08:53:b3:66:5c:3f:a1:b3:d7:d7:0e:83:
36:2b:6c:9c:2a:2e:c1:88:85:41:4d:ea:e7:d0:09:86:9a:51:
ee:3c:cd:d3:6a:10:d1:15:28:42:85:b2:42:e1:c8:4a:d9:cf:
94:96:3f:7f:66:05:89:03:f4:c0:ea:7c:72:d1:a4:e9:18:10:
20:aa:c5:d1:7f:80:86:14:22:7d:1a:77:4f:95:e2:a6:ea:30:
8c:eb:07:68:01:79:9b:fb:3d:99:38:a7:16:07:c3:33:c3:8d:
4e:a2:0f:bd:eb:ba:b0:8b:21:91:9e:60:e0:37:6e:8b:06:77:
d2:89:44:5e:05:6b:ff:e2:25:e3:60:b5:a0:6d:6a:bf:54:77:
19:dd:59:60:83:c7:3c:c8:d1:b1:0e:4c:be:8c:96:c6:bd:62:
59:17:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:18 2026 by rpki-client