Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: WG85TMf70jkrPrNoW7PzwE13Tk0J9hbARWqKwkaRNqg=
Subject key identifier: 39:5E:BE:63:10:BA:80:14:D9:68:EF:9F:87:E6:5A:2F:51:C7:B1:71
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 019CAA58ED9EB826F22F3261CAE67FF4854B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 1352
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: DtLePmxN_wJv4PSLH6EKntHcVY0.roa (hash: U7UziCjdX8EIkcuGoidh45rKj+4qBu43u+i8Cgl9CBQ=)
2: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: mIa22ggLYvXaMBuGRSKjh6LGjBXuX4OJgLnDReV+YPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ed:9e:b8:26:f2:2f:32:61:ca:e6:7f:f4:85:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=395ebe6310ba8014d968ef9f87e65a2f51c7b171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:98:d8:7d:b0:39:55:bc:0d:b0:85:2a:3a:
dc:78:69:bc:74:43:f6:a3:d5:e2:46:8a:ef:45:99:
01:86:1a:aa:4f:50:d2:dc:5b:24:6e:02:b1:07:17:
34:5a:d1:54:17:64:70:dc:c2:62:da:3d:fa:38:90:
da:47:6f:f5:69:02:35:8a:07:c8:1b:ed:a7:73:b9:
1c:36:f4:1f:88:4d:47:c7:37:ce:f8:d0:f6:8a:c3:
e4:d8:10:41:17:99:ac:dd:c2:9b:8f:75:b4:eb:50:
4d:08:43:67:e7:e1:57:66:ac:0b:a5:b9:0e:8f:97:
9e:a9:6b:df:49:03:e5:0e:c8:dc:4a:72:94:9b:77:
92:14:04:b8:0a:41:a6:f5:4a:42:30:b5:df:45:aa:
77:93:fd:07:24:bf:ce:db:1f:71:cc:85:dd:f0:cc:
7f:3b:63:b8:70:17:d8:78:c7:6e:c7:a0:0d:7c:b2:
10:35:cf:47:e2:39:50:e1:d8:07:c2:3c:e3:d5:10:
79:8b:df:62:0f:70:6b:b9:76:b4:a0:ba:d2:57:25:
a0:63:3f:1e:d4:63:0d:82:ee:49:52:a7:4e:b7:61:
96:0e:04:6c:ab:3e:ed:66:9a:11:e5:6f:0b:82:cc:
9a:35:3c:86:fd:45:ec:86:e5:50:41:b8:ed:99:b5:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5E:BE:63:10:BA:80:14:D9:68:EF:9F:87:E6:5A:2F:51:C7:B1:71
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9c:c1:10:92:2f:a5:49:98:36:cc:ec:d6:46:67:b1:a9:25:
45:ed:d5:fd:3b:e0:48:49:0e:2f:5a:51:7f:f8:87:de:68:2f:
18:f1:9a:ee:22:ee:cf:3d:ea:3a:dc:f3:54:f9:0e:f1:5c:36:
42:b5:26:b1:38:ad:a2:87:bb:6f:65:d6:18:4c:20:c7:94:6e:
37:58:a0:ef:a2:aa:bc:81:87:65:b2:98:be:45:6d:34:40:a7:
d4:6d:ba:22:9c:c5:e9:11:04:f4:22:6e:8c:d3:04:51:84:95:
fb:b0:79:66:af:63:85:48:80:29:af:98:26:0b:1c:02:46:59:
e3:88:d4:7a:bb:ad:90:bd:56:c9:4b:d2:f0:6c:e2:13:a2:3a:
50:43:86:16:7a:33:7b:29:25:2d:ac:16:cc:67:34:a1:5b:64:
c5:5c:15:01:0d:8e:de:ae:6c:28:25:e1:2d:92:fb:34:db:63:
f1:92:d8:73:98:21:c8:99:3a:95:bc:71:e5:af:72:05:79:62:
38:ca:7c:35:20:5b:94:82:9f:79:bc:f8:95:be:a6:80:4a:c8:
0b:88:72:40:d1:bb:94:f4:72:dc:9f:75:a7:41:7a:01:1e:73:
6a:0a:de:21:c8:38:0c:df:9d:19:26:34:fe:d6:88:c1:19:17:
d3:2b:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:53 2026 by rpki-client