Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: H2nWdEONODrRCZwBLAlHT6cvuQ0+UCmuJkjtJEuDfPQ=
Subject key identifier: 26:EC:FD:B6:61:2B:F6:04:5D:A9:96:37:65:E3:35:AD:0E:96:C8:A8
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 019CAC0FA67AB0D15F6B05B0789E989BA8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0F6E
Signing time: Mon 02 Mar 2026 01:00:32 +0000
Manifest this update: Mon 02 Mar 2026 01:00:32 +0000
Manifest next update: Tue 03 Mar 2026 01:00:32 +0000
Files and hashes: 1: 6g9Sdo-eJYElfuGgjU1PsahjZn8.roa (hash: Q4WRD5ukCrgnTo+xu8mbOedNwPrNG14LcRDJEgtOWxI=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: NAZ59BZT2WAN8oeCiHRVp3/Vpcb0hgkiElRb/UFR/Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a6:7a:b0:d1:5f:6b:05:b0:78:9e:98:9b:a8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Mar 2 01:00:32 2026 GMT
Not After : Mar 3 01:00:32 2026 GMT
Subject: CN=26ecfdb6612bf6045da9963765e335ad0e96c8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:c8:d9:48:88:78:12:ee:1c:cf:b7:58:8d:
b3:85:1c:b7:67:f6:2f:b2:f6:ce:a9:c8:74:3e:d4:
31:6d:fb:43:06:67:6b:af:20:71:2d:6b:82:97:8a:
c7:df:b4:ee:40:ca:65:a8:d2:bb:50:ac:dd:65:21:
1d:c7:9b:89:6c:15:97:46:34:60:5b:bf:e0:51:b0:
03:d5:25:19:8c:23:de:f8:1f:10:3d:8c:13:c1:bd:
a5:08:f1:cd:46:83:04:6d:55:44:f8:b6:97:d5:8e:
79:0c:b5:0a:ab:e4:5d:84:df:a9:14:bb:52:99:df:
b7:54:00:38:88:4e:39:fb:5d:3a:ac:19:f8:ea:dc:
32:95:c9:5c:a7:9c:94:77:02:82:43:b1:37:d0:2c:
d6:f1:90:3f:85:2c:a2:02:7f:1a:03:ed:e1:32:58:
20:ca:bb:2b:bd:3b:a2:22:05:be:62:93:50:b8:43:
67:35:b9:e3:5f:97:69:73:d3:a7:86:d1:65:b2:27:
85:47:a3:87:29:b1:fd:a2:de:77:57:e8:e1:de:9c:
6e:2f:e7:45:88:27:4d:d5:49:03:0e:e6:95:77:02:
f8:a9:42:88:7f:e0:32:53:a8:2e:9d:55:be:45:a9:
b2:f3:de:b0:11:77:81:56:70:9c:ba:c4:bd:9a:e0:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EC:FD:B6:61:2B:F6:04:5D:A9:96:37:65:E3:35:AD:0E:96:C8:A8
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7d:c4:ce:d2:93:12:2d:9f:0c:c4:0e:4f:de:ea:d2:82:3e:
b5:32:b9:6c:b5:15:a1:d7:f6:b7:24:7e:cf:bd:ae:6c:3b:f5:
d0:5e:ac:b8:58:8c:6b:45:a8:54:26:a5:68:e4:fa:39:b6:bf:
3b:2b:6a:58:4f:06:15:8c:0b:3a:88:17:57:e4:33:c5:33:c0:
d9:0d:57:3d:0d:00:17:44:9d:86:0d:5a:a3:bd:88:5a:b2:bd:
b8:be:5b:77:ba:20:2a:a4:cc:29:2e:e2:de:98:58:a0:8d:69:
36:35:d0:75:96:62:ee:0d:56:8c:7d:f5:51:3f:20:6d:2c:af:
87:49:5f:cb:c9:f7:fe:9f:6c:84:09:4d:9e:ba:d0:b3:7b:ef:
2e:95:4d:cb:9b:ac:cd:09:ab:43:9c:21:8e:48:6e:bd:ba:f6:
9b:74:32:bd:33:93:8f:28:e3:52:ff:7f:34:9b:10:3a:7e:ca:
9d:f3:f9:d0:e9:7f:af:f1:64:47:f4:0f:75:8c:78:ad:d2:34:
4b:d3:6e:5a:24:06:fe:4f:af:f2:c0:19:10:81:95:c1:f5:3f:
c2:2b:01:cf:53:b5:a0:42:a4:4a:c3:c1:d2:ff:99:d3:11:3c:
72:8f:dc:3f:5f:f7:23:75:67:03:62:f1:4b:56:ff:a8:35:b1:
6d:c0:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:49 2026 by rpki-client