Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: p/Idb4GnZIYmnbsR5KPuxk2fdidVNUxSGKoebd9yg/k=
Subject key identifier: 8E:0C:0F:03:15:EB:B2:26:A1:84:E4:49:A4:58:7B:59:5E:DE:B4:33
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 019CABD9BB9F168FCCCD3EA804EAFF21D64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 0B67
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: 6MNGtwznR6uqZvpqprVOpk3tB2lYRoRDI363cVKu/Ig=)
2: X5cruhSfs-bcqraXt11JGdkkWoM.roa (hash: ZSQ2DG8b3yrrUNbqmElYxiRoLHUdomd9OU/pi5rywfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bb:9f:16:8f:cc:cd:3e:a8:04:ea:ff:21:d6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=8e0c0f0315ebb226a184e449a4587b595edeb433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:a8:97:62:87:65:f2:78:1f:9a:dd:b8:04:
de:b6:ea:5b:3b:f0:fd:d9:02:0b:f5:38:b8:1e:45:
21:99:f7:8d:b7:69:73:9b:97:58:3a:4a:77:fc:01:
b0:2b:7e:8d:dd:08:90:03:a1:30:d9:07:10:6d:a8:
7c:02:c5:fb:71:8a:36:3f:48:57:69:e7:51:d7:0d:
fe:f6:31:5d:4e:d2:66:d9:64:cd:89:ea:16:a3:c8:
08:cf:b2:74:6c:e5:16:91:e3:48:d7:31:27:1f:53:
70:80:e7:dc:f8:b2:92:9d:d7:ab:57:b8:fe:68:b1:
28:69:f8:61:c4:d1:1c:81:68:a1:62:3a:29:6f:28:
1e:2b:3e:1d:83:70:5d:41:52:97:32:89:d5:c9:91:
27:af:ba:2a:0d:b3:a5:52:ef:71:18:cf:6c:a5:4b:
ba:4b:6b:ce:ce:45:04:b8:d0:26:59:f9:52:bd:80:
4d:e1:0b:56:e5:44:96:10:73:4d:ba:b4:0f:23:33:
39:e2:ee:eb:7b:1f:f3:c1:89:39:be:fa:ee:61:2f:
29:da:70:a3:d2:40:fc:a6:c1:1c:31:f1:d4:ae:13:
1f:05:7c:da:93:32:ae:4c:b0:f9:28:85:c7:03:81:
65:6d:55:4b:e5:61:b7:b4:e0:e5:48:49:1b:d7:9b:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:0F:03:15:EB:B2:26:A1:84:E4:49:A4:58:7B:59:5E:DE:B4:33
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:68:5f:31:65:ba:6a:6b:e3:03:2e:b2:8a:38:53:12:75:25:
ea:88:ab:f1:f6:5c:67:54:34:9e:d7:ed:4d:09:a0:87:41:d8:
71:d9:64:9e:7e:02:2d:09:3a:1f:8c:82:44:16:52:dc:8a:8a:
a9:88:64:2d:8b:6f:fb:f6:55:39:3f:d2:e1:bf:73:ed:9c:cf:
e6:e3:21:b5:ed:4d:a2:50:35:ac:67:85:29:80:1f:ab:c1:c7:
15:b9:25:9b:96:52:7f:cb:40:8f:99:27:41:9c:d1:c2:2e:dd:
92:bd:71:ae:78:ba:84:8c:54:c7:3f:a1:5f:3c:ee:57:57:1e:
36:da:14:b6:a5:a6:07:b8:8a:b4:d3:f1:8b:b6:1f:b4:14:cd:
ec:29:dc:ec:0f:43:15:d8:b5:26:2b:c8:0b:2d:2b:0c:d3:13:
8c:7b:11:ce:c5:87:73:5a:63:e8:4c:42:be:fb:c6:08:f4:b5:
48:6a:7c:62:fe:9a:97:ba:7c:c7:60:52:7e:44:8a:38:3b:85:
b9:24:8e:28:cb:f6:57:bd:ce:1d:f6:2d:72:4a:db:28:b4:88:
7a:bc:3b:55:c4:0a:3c:fb:b6:f8:d5:3a:e4:62:ea:2b:09:48:
45:48:82:9a:37:9f:f8:83:c1:d7:ac:b6:6a:6f:0d:7c:19:d9:
bf:48:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:27 2026 by rpki-client