Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: SAgw8SwkLwXmR/LSOjiA6ztxvx8xqriPRS+Fzyd+D3k=
Subject key identifier: 72:C0:28:A6:9A:D0:3B:4F:64:BB:78:92:D2:46:E8:92:86:EA:D1:DC
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 019CAA5834E11F95993DCD0B16388FAE884B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0D6F
Signing time: Sun 01 Mar 2026 17:00:33 +0000
Manifest this update: Sun 01 Mar 2026 17:00:33 +0000
Manifest next update: Mon 02 Mar 2026 17:00:33 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: B9m+QbkjExqMZ2peJZ2o3AJu58N6uf/Kf+ePPiIxUbM=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:34:e1:1f:95:99:3d:cd:0b:16:38:8f:ae:88:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Mar 1 17:00:33 2026 GMT
Not After : Mar 2 17:00:33 2026 GMT
Subject: CN=72c028a69ad03b4f64bb7892d246e89286ead1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:88:3d:75:a5:14:f6:75:79:45:2f:27:01:
71:cf:0f:28:72:c8:00:37:14:66:95:7d:4c:12:fd:
b9:a6:10:e1:8c:a6:58:19:8a:bf:3e:c3:a8:5c:02:
be:88:d3:b8:aa:99:19:53:c3:ea:89:b2:01:5f:e8:
8f:2d:81:f0:06:4e:a5:ee:1a:e2:dd:f4:8c:ef:ec:
52:9e:8d:45:18:53:13:eb:f1:d3:6a:e5:84:9d:9b:
a2:cb:7e:90:3d:7c:c1:12:8a:30:af:0c:5f:e6:58:
c7:28:6d:17:7a:00:42:3f:01:6d:70:51:73:d2:3d:
06:17:30:43:e0:08:a6:91:c5:48:92:00:bb:15:ae:
b1:10:36:1d:b2:bb:5b:22:e5:82:78:3d:a8:d0:2c:
9c:1a:de:81:31:c6:e8:a8:78:df:9c:b9:84:b8:39:
06:d7:44:1b:78:9e:09:46:53:d2:cc:38:c8:17:ac:
50:ee:69:76:28:d2:11:4a:6b:e5:d0:af:fb:6c:98:
11:0d:8b:1e:a9:b2:6f:02:81:a6:2b:b5:93:67:e5:
14:98:d3:db:b9:eb:d2:94:4c:a0:e7:8c:63:65:f6:
7d:b8:df:59:2c:14:5e:23:66:5f:76:49:49:a4:0c:
2f:9f:4a:e4:a1:14:48:e9:25:e2:5f:ab:f6:cd:8c:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C0:28:A6:9A:D0:3B:4F:64:BB:78:92:D2:46:E8:92:86:EA:D1:DC
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:34:9c:cc:23:68:35:98:8b:3d:53:ac:f8:09:b5:aa:7f:64:
6e:bf:82:f0:dd:2c:97:d1:5a:f4:ef:80:e3:37:ae:0f:a9:a6:
60:7f:4c:6d:87:7a:b8:e9:f3:eb:b2:1f:c4:ec:4a:4c:6e:26:
a9:5f:da:6d:fb:64:c9:0c:09:b1:de:8b:30:6f:ee:45:55:14:
4c:70:8a:c3:c2:ed:6e:0a:a0:35:7b:2a:a4:3d:e3:52:8c:84:
73:a9:e1:90:04:9b:75:8b:90:b6:5e:56:0e:c8:e7:ec:1d:8e:
ed:b8:7d:84:2a:7a:79:9c:cc:4d:07:99:3e:af:0b:86:f6:7e:
49:85:22:40:6f:4f:09:b6:24:3b:a0:1a:9d:9c:f5:60:ba:28:
be:c4:00:54:75:c5:b4:8e:4e:a5:9d:f4:7e:37:44:2c:b3:c7:
2f:73:67:95:a0:33:02:77:ce:c3:74:ce:e0:d3:8f:6d:8b:c2:
31:fd:9e:32:f9:db:da:a9:8d:ad:8f:d1:39:17:3d:32:ca:df:
5a:8d:b6:55:97:63:c5:46:f0:ee:2f:c6:65:db:3c:42:3f:1b:
91:5e:ea:44:67:2b:88:43:55:c3:7f:9d:57:66:ee:cf:28:57:
da:7e:0b:13:4c:07:1a:e7:c4:39:4e:1c:0e:62:2d:9a:80:15:
85:72:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:20 2026 by rpki-client