Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: B64UhgA4fZS8aHhW4BpDtdYbJwY/ZfQnp4f4MCvyikM=
Subject key identifier: 51:55:92:C0:E0:3A:72:89:D8:2D:42:A4:77:E6:67:12:DA:CF:F4:63
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 019CAA586F95DEAD9311C1D26BC6405469C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 13F2
Signing time: Sun 01 Mar 2026 17:00:48 +0000
Manifest this update: Sun 01 Mar 2026 17:00:48 +0000
Manifest next update: Mon 02 Mar 2026 17:00:48 +0000
Files and hashes: 1: 2dwCjqUUqCKWVJ6DvVzwdYlDvXQ.roa (hash: DPrgb6Kgdw0KIjv41bfjhUKWYAfrl79h2DWiUA8CcIQ=)
2: IMFLS8lmXO1X5kPh5brIEnkKfS4.roa (hash: w30MlBbSWaBo/k7+866HLmrY83fawU5Z9usPbYOh250=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: jGsqmM6WQBZQAha3W35X+4lBFEGyTjIYP/3c6DFXMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6f:95:de:ad:93:11:c1:d2:6b:c6:40:54:69:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Mar 1 17:00:48 2026 GMT
Not After : Mar 2 17:00:48 2026 GMT
Subject: CN=515592c0e03a7289d82d42a477e66712dacff463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:6d:f1:12:b2:27:03:80:4d:09:2e:8f:cc:
19:3e:3d:39:90:70:23:fa:1e:9f:35:27:ad:40:29:
bd:fe:0c:08:d6:22:f2:c7:d7:cc:ba:07:3f:87:7a:
f1:1b:ba:87:a2:f4:b8:c2:72:bd:85:be:5c:78:e3:
9a:a5:eb:d5:fc:95:76:ab:eb:9d:78:e7:21:8e:7a:
00:c9:0e:06:05:d4:8c:45:53:33:fd:29:a4:6f:49:
ef:ce:f6:11:ef:c9:81:91:fe:a8:e8:7e:ea:0a:d8:
9c:5d:fc:48:d8:3d:14:8b:a5:54:9b:ba:bb:d7:d4:
f2:a8:7a:33:c2:f1:dd:9e:17:48:6f:5d:5d:88:40:
55:d3:60:24:5b:35:35:57:95:09:2f:87:0e:5d:2f:
c3:57:e0:1b:23:12:f0:da:88:d1:d1:37:96:8a:d1:
dc:24:96:1b:2b:ed:5f:f9:79:33:48:c4:5b:fc:58:
36:d3:62:d6:eb:04:3e:9e:2d:52:e1:ac:af:37:a9:
87:0e:73:4d:2b:b6:22:7e:e8:8f:17:59:18:3b:13:
c1:ad:d5:73:f5:13:13:b8:97:a9:d0:ac:f8:a0:2e:
a2:d5:41:e4:8c:c9:0d:d9:24:a2:9a:b5:59:73:bb:
d7:61:dc:00:af:a5:84:66:7e:6e:9b:99:82:38:d1:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:92:C0:E0:3A:72:89:D8:2D:42:A4:77:E6:67:12:DA:CF:F4:63
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cd:3e:c0:a1:17:a2:48:00:c7:65:4b:5b:19:cc:4a:21:f1:
1f:9d:64:7a:49:01:85:82:d0:a7:7b:bc:17:0a:3f:b1:b0:63:
2c:a1:4e:44:68:f2:c4:03:b8:4a:2c:b6:9c:dc:d1:23:69:4e:
25:c5:07:12:1f:92:94:b8:37:9f:ef:ec:90:b4:6a:b3:db:ef:
ce:2d:14:58:78:e1:45:e5:3e:38:69:a8:02:3c:a8:5f:29:78:
36:b0:96:c1:7b:65:3e:19:ca:b2:74:16:8a:bc:4d:24:c9:1e:
ce:b9:4f:0c:47:40:59:7f:aa:a0:98:64:3b:5c:f1:ad:89:54:
56:40:c3:90:2b:65:65:ff:3e:f4:73:ec:74:fd:1f:c2:9b:40:
7d:90:c0:9f:0d:52:23:2f:f8:71:ce:11:98:e1:81:53:13:58:
c9:69:67:f0:3c:f8:30:89:2d:6f:d5:f1:69:4a:56:8f:36:f4:
f8:2c:52:cf:ea:59:44:cb:d8:0c:82:7d:95:b0:14:8b:7d:67:
cd:58:0f:cc:e5:23:bb:71:bc:8d:2b:92:12:8e:10:d1:06:63:
a7:e2:f7:84:a7:27:5b:cc:30:19:51:0f:98:3f:2c:3c:1d:ab:
d3:b4:53:8c:5a:3f:32:c4:95:86:16:fb:2a:92:8c:ac:22:5e:
20:91:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:06 2026 by rpki-client