Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File: IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier: GxAGoTWhGDdH2IlKzgDSOVvvpwSkGaW4egN+2kkPqQU=
Subject key identifier: 5C:16:1D:E4:53:B9:B5:B2:76:7E:E8:93:13:CC:6F:7B:22:CA:90:52
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial: 019CAE6C496D542549BDE50A5F1C4CA2A687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number: 035C
Signing time: Mon 02 Mar 2026 12:00:58 +0000
Manifest this update: Mon 02 Mar 2026 12:00:58 +0000
Manifest next update: Tue 03 Mar 2026 12:00:58 +0000
Files and hashes: 1: IAWiQMEI7lBYE-yiLrq0N4vd600.roa (hash: 7MWeCmwerIQVPacLYiQfFeLxjpHdbEK+iRaLdCOlJtE=)
2: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: SKDrrLjplAYQwYn4Ojajw5gDcK/LNRJP7+c9/NJcOl8=)
3: jcJ1FEJq00hankjZHcjsw8w2u-s.roa (hash: Qo2AdracuK7vyRKsDuRBiYGss9rpdhbei/opc826d7Y=)
4: yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa (hash: Mu3AswMCG2U7NEViX0UJQTVg05J0CMB40dFTF5KkWro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:49:6d:54:25:49:bd:e5:0a:5f:1c:4c:a2:a6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
Validity
Not Before: Mar 2 12:00:58 2026 GMT
Not After : Mar 3 12:00:58 2026 GMT
Subject: CN=5c161de453b9b5b2767ee89313cc6f7b22ca9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:68:29:5c:da:4c:c1:8f:13:70:87:b3:6b:
45:e2:ef:3a:93:51:94:4c:4e:59:79:fb:6b:66:a6:
28:df:2f:7c:a4:b3:e1:7b:ce:97:8d:ba:41:f7:6b:
b2:0d:46:05:fe:cb:41:47:4a:41:3c:fc:b8:bd:e7:
c3:23:c0:ff:1d:1b:63:dc:24:04:ed:a8:af:26:66:
16:7f:02:a3:17:3d:2f:4a:71:67:74:97:37:f6:24:
ff:bf:d7:22:fb:44:6d:6a:b4:4c:a1:92:97:47:f4:
80:7e:c7:ba:f3:4b:6f:50:1c:61:fa:8e:74:56:94:
11:a1:76:aa:d4:95:2b:10:85:87:5b:e8:b1:17:cc:
1a:41:bf:87:db:e4:d9:dc:6a:f3:07:1f:73:f7:30:
f6:b3:78:6d:27:98:c1:80:d9:00:4e:1d:46:57:3b:
ff:12:75:ed:4a:c5:34:65:89:79:a3:75:39:9c:98:
5e:28:04:8c:72:15:e1:10:d4:57:86:9b:4d:2a:35:
fd:28:2d:51:79:d1:08:88:0a:e6:2a:37:2c:44:b3:
95:2e:f6:08:c3:e8:08:5e:27:45:5b:af:12:d6:0f:
7b:eb:af:ee:b6:a5:93:53:ab:ca:a9:cc:dc:e7:54:
49:39:31:67:84:64:07:7a:45:a0:34:b6:14:a5:0f:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:1D:E4:53:B9:B5:B2:76:7E:E8:93:13:CC:6F:7B:22:CA:90:52
X509v3 Authority Key Identifier:
keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5f:0b:74:db:70:86:b4:1e:c2:37:2d:80:59:e1:26:2f:d1:
f8:38:66:5c:ae:15:f1:b6:89:a2:7c:30:d3:38:e1:96:b6:32:
3c:1c:0d:46:de:91:34:d8:f5:0a:8f:29:07:f5:33:c7:66:f4:
4d:ec:1c:e4:3d:8d:ca:51:4c:78:5b:9c:de:89:2b:ef:d5:0a:
81:15:f9:c2:e1:12:1d:ad:24:a2:8f:b1:f9:0d:7e:3f:79:df:
60:18:08:67:1c:68:66:02:2f:53:a7:78:d7:15:df:e7:3f:30:
ec:30:b1:74:39:d6:ec:9c:9a:07:71:a1:59:bb:2c:5b:c4:b8:
ce:51:c1:c4:fb:57:67:31:34:9b:fb:f3:c1:15:8a:90:8a:4b:
fd:b9:69:c7:f6:13:74:19:a5:7f:e7:ca:df:b8:85:7b:1f:1c:
63:28:9b:81:8d:a5:5f:f2:66:6c:e6:02:eb:bc:6f:63:f8:26:
95:c3:2e:de:e5:94:bc:2a:83:13:97:06:41:1e:36:73:1b:f0:
29:60:55:45:f5:6f:b5:bb:5f:51:db:36:5b:6c:d0:11:32:aa:
87:27:32:4f:86:0d:e0:80:d9:79:25:b7:1f:bc:f3:2d:73:41:
7c:25:ac:c5:bd:61:07:b7:10:05:42:8d:5b:e7:50:10:d6:d2:
f4:bb:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:55:48 2026 by rpki-client