Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File: iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier: GroJACszcHVYCxgsesOpj+NUn4ZT+4dSOdwvdMk6Od8=
Subject key identifier: 39:CB:EE:55:96:61:09:4A:84:77:EE:BC:78:EF:F4:BA:06:5E:C3:FE
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer: /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial: 019CA8D872D5D9CF265AC558BB67535734C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number: 45
Signing time: Sun 01 Mar 2026 10:01:23 +0000
Manifest this update: Sun 01 Mar 2026 10:01:23 +0000
Manifest next update: Mon 02 Mar 2026 10:01:23 +0000
Files and hashes: 1: hJofpYR3L86Ix_mTdSAsG_U4lk0.asa (hash: 4C8aCygO/X3fl3HXLBRg/+yx+Jd9t1N5ZuOPPqxIAvc=)
2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: XuBfyn+iZU2hC/nulLr1C1XkKwC+pBqEHFDMAIT6Q7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:72:d5:d9:cf:26:5a:c5:58:bb:67:53:57:34:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Validity
Not Before: Mar 1 10:01:23 2026 GMT
Not After : Mar 2 10:01:23 2026 GMT
Subject: CN=39cbee559661094a8477eebc78eff4ba065ec3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:1b:44:9c:9a:bc:7c:73:ad:be:ea:3f:ee:
c9:97:66:8c:1a:c9:49:db:85:43:dd:7c:99:45:80:
61:ff:85:77:bd:f6:c7:03:79:c6:9b:b6:b8:39:53:
22:75:1e:8b:76:95:d3:4f:ac:bd:88:81:4f:47:3e:
d9:1f:fd:78:5e:26:99:54:07:5f:40:23:ab:92:45:
87:43:39:83:97:c1:c0:a3:ce:47:79:67:8f:86:38:
6d:0f:12:d0:1f:aa:24:99:61:7c:87:91:70:6b:0b:
ef:4b:c0:77:a4:18:b8:c6:e1:54:7a:3a:0b:42:da:
c0:09:04:e2:dd:d5:7b:1d:da:e7:11:36:8f:85:6b:
98:07:a2:1d:0c:64:c5:47:59:f6:46:44:b8:2e:41:
a3:c6:b2:6a:40:ea:ea:21:cd:d9:4e:4e:12:eb:9b:
32:ef:94:57:33:5a:5f:f1:be:bf:b2:74:92:23:90:
80:3d:23:a6:a0:16:3a:8c:25:48:a9:9f:a6:10:d5:
0a:65:28:74:86:6c:21:3c:23:c3:5d:12:ab:a5:22:
15:06:de:73:a3:f2:4c:23:ae:d3:9e:df:a5:68:69:
66:15:ab:d4:14:ee:d6:53:f9:36:67:bd:d5:a1:4e:
72:05:ac:8a:51:78:ba:1a:07:75:ef:f4:64:e9:7d:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CB:EE:55:96:61:09:4A:84:77:EE:BC:78:EF:F4:BA:06:5E:C3:FE
X509v3 Authority Key Identifier:
keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2a:9e:bf:df:f4:3d:04:06:95:8d:17:c4:d9:97:94:aa:bd:
71:8d:de:b0:a9:29:3f:17:e9:b0:db:f3:b3:a1:49:50:ff:8e:
c8:11:21:10:8c:e9:bd:32:08:b2:60:d3:15:90:3c:6e:94:d2:
46:12:71:06:fe:dd:9f:23:30:3b:32:c8:42:0e:5d:39:1e:84:
e6:91:3a:63:23:14:dd:9c:94:d9:88:8c:ec:3c:d9:b0:94:43:
c9:bb:a5:11:7f:c9:2c:f3:e3:c8:b0:7c:a4:50:8f:50:48:d1:
10:22:59:f6:ec:9d:7d:6d:d8:46:2e:45:19:28:24:5c:35:d5:
5f:df:de:34:51:85:c8:07:79:7a:d9:7c:aa:32:f2:06:38:a4:
86:35:38:fb:2d:1f:fc:86:09:99:78:84:b7:95:d8:cf:70:2d:
0c:07:1e:05:98:f5:f3:f5:4c:59:e3:78:de:62:19:3f:e3:4e:
d3:82:83:a4:bc:6d:f4:fd:ab:9d:05:63:7c:98:9b:b3:15:eb:
b3:f5:97:54:f8:13:a0:d6:01:66:18:77:f7:99:d0:d4:eb:57:
a3:c5:24:70:3b:6a:22:7a:c6:0f:ce:1f:d2:2d:c2:e2:97:27:
50:a5:c8:b6:56:b1:99:0c:3c:0b:b9:cf:14:d5:85:bb:06:56:
3a:b6:15:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:10 2026 by rpki-client