Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier: c1UTAZOCN9lXz5LLroSG68mNAS49/KZxLLdymECZfkM=
Subject key identifier: DA:C3:6E:03:E1:BE:90:CF:88:65:39:ED:16:71:C0:A7:2D:12:CD:AD
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 019CAAC6CA5D69D2223F14BE0B709B2FE776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number: 110C
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: 8mKhApHYp_839P6yQXD0oAwm2qo.roa (hash: dEUbCXMVw9xAIsh0W5Y8ji1NQ46062f5dJUppcXKzCY=)
2: C3xZ11UfhI0GeWTbExlimKS-cZs.roa (hash: xhykIG9PAX9cR5qhXwtefG/7lrssloObCNE0+5PnTIg=)
3: ZQHzJnKmGMmYQF_x6i-pgoB3otk.roa (hash: y+ugl+hZqb559F4FeCaZ0WayeCgZERvzHW8L8s5FBBo=)
4: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: xPW50+fiPkO7Wq6qMuN3FBd7DgigEcsEyDv+0LeM3p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ca:5d:69:d2:22:3f:14:be:0b:70:9b:2f:e7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=dac36e03e1be90cf886539ed1671c0a72d12cdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:d7:70:52:c1:ac:9b:b6:af:b6:26:a0:47:
34:f9:e2:cb:2e:07:28:92:94:83:9e:fb:51:7f:2e:
d8:d4:bf:4f:ba:05:6f:4e:53:fc:8d:1a:6a:84:1a:
46:49:7b:33:78:16:31:b2:eb:cb:51:1f:6b:62:87:
06:1d:44:ad:b6:74:72:3d:fb:65:c9:dc:b8:67:ae:
f1:ef:a0:65:57:24:da:ca:90:20:65:18:c1:33:62:
a2:a6:bf:89:3d:e1:3c:27:10:63:64:c0:a0:cd:3f:
60:a1:db:d6:ba:fb:81:44:3f:79:48:5c:d8:45:38:
50:39:0f:31:36:d3:5f:ec:67:8d:34:d5:a8:58:6f:
01:69:20:23:38:cc:ce:54:b8:2a:bb:80:8f:be:c2:
42:96:03:ab:0e:d4:7d:78:62:e4:78:a9:3f:e5:61:
aa:e0:3d:e3:82:b8:68:98:da:df:d5:c5:41:0e:ba:
fb:ab:da:e3:f6:e9:39:96:88:ad:21:2e:bd:a8:f9:
f2:30:ba:bc:54:ab:1c:6f:e4:e5:fb:9b:1e:60:d5:
7d:19:23:e2:1d:55:72:b8:76:c0:ef:13:92:63:ec:
9b:dc:96:65:e2:8c:2b:17:39:3b:7c:0f:83:37:fa:
17:73:e7:67:bd:d9:ef:9c:f4:4a:bb:23:d4:5c:e3:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C3:6E:03:E1:BE:90:CF:88:65:39:ED:16:71:C0:A7:2D:12:CD:AD
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:33:f7:1c:b7:5f:eb:9d:be:46:6b:f5:28:9e:bf:0e:11:d1:
44:64:74:e7:6d:3e:a8:1a:7c:79:f7:da:70:e7:97:ec:a6:b0:
d3:2e:7f:ab:81:8b:d2:3f:0f:31:8b:8d:39:07:c1:61:4c:20:
b5:83:30:9b:65:74:4c:fb:db:08:19:75:4d:d5:21:47:05:e3:
68:98:ac:be:61:52:74:7a:13:c9:a5:e7:68:98:78:ac:ce:db:
e6:8f:0a:19:29:51:12:92:49:a5:25:5f:18:1c:9a:a2:3d:bf:
cf:f0:34:1c:70:ff:46:87:31:8b:40:49:8d:3e:1e:a6:7f:a3:
03:f9:15:cd:59:4a:2f:48:2e:29:9c:a1:8b:de:f1:cc:c4:1c:
99:12:9e:3b:93:57:cb:4a:99:bc:50:96:0d:33:cc:b2:14:61:
93:8c:d9:b5:eb:56:0d:79:8b:b3:4e:5f:39:ad:6a:42:b6:02:
67:61:9c:a5:30:3d:32:21:5a:62:2a:87:63:7d:ee:51:c6:fe:
50:82:87:aa:e7:30:42:d3:5d:ae:db:42:7a:55:b1:08:d1:d0:
ae:7c:a4:35:eb:96:32:11:df:86:0e:6e:c5:2f:06:32:76:0b:
10:d7:6d:bb:a9:4f:8d:f5:46:2b:f5:69:65:31:e8:f7:45:d9:
f2:a1:56:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:58 2026 by rpki-client