Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: PcRu0YSSTggpJNSEFsFSU6J31sugzoucFvVHwhBUAuY=
Subject key identifier: E6:91:5C:12:9C:BE:EE:75:0B:D1:B6:EB:89:AF:B3:B6:2A:BE:75:B5
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019CAD2266A885D7BDAFB83D941FF8900B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 06:00:38 +0000
Manifest this update: Mon 02 Mar 2026 06:00:38 +0000
Manifest next update: Tue 03 Mar 2026 06:00:38 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: yLIClCrcGAZKha4jpjYNDFXr0E8/4ueJp6vFORWK/Mg=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:66:a8:85:d7:bd:af:b8:3d:94:1f:f8:90:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Mar 2 06:00:38 2026 GMT
Not After : Mar 3 06:00:38 2026 GMT
Subject: CN=e6915c129cbeee750bd1b6eb89afb3b62abe75b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:c6:87:7e:4e:04:0a:f7:0e:8f:83:f1:5e:
fd:5b:e8:45:a8:98:3e:20:16:71:d4:4b:85:43:c4:
1e:8a:05:94:65:e6:bb:c6:8d:7d:ad:13:8d:04:5a:
93:69:49:a3:2d:0d:a2:fe:66:49:fa:e1:e6:a1:5e:
41:02:63:7c:2c:08:1f:b0:56:c9:d1:8b:dc:49:73:
8f:67:27:4a:7f:34:a3:ae:3b:b1:13:8c:36:65:ef:
85:88:fc:24:71:3f:80:02:06:8b:b6:41:4e:a1:5a:
d4:0f:1c:5f:7b:39:8f:30:ec:2e:1d:22:2e:9d:43:
1b:18:f6:7a:c9:b6:ef:bd:15:4d:ae:7b:76:4d:ac:
3a:2a:91:fa:39:57:e0:f9:2a:b2:32:0a:55:98:37:
3a:8b:1a:35:c2:e6:19:a0:9f:b7:ef:b2:95:a1:34:
cd:b0:6e:49:63:f2:c7:23:96:06:d1:7b:af:78:92:
de:7c:12:f7:79:cc:23:8c:ca:74:f5:b4:fa:cb:1d:
93:43:c0:30:87:8c:3c:15:83:07:e9:9d:d0:3a:21:
b0:32:30:85:30:fd:f6:36:17:43:97:58:d5:e5:8a:
f9:22:26:6d:dc:3c:78:f3:01:ff:30:f2:e8:e7:94:
8c:2d:eb:44:08:21:ba:13:dd:1a:70:0c:c2:bf:f6:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:91:5C:12:9C:BE:EE:75:0B:D1:B6:EB:89:AF:B3:B6:2A:BE:75:B5
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b8:dc:f9:91:2b:33:32:de:bf:ad:c5:07:75:2b:b5:b3:80:
a4:f0:fe:bb:8b:b5:e7:70:06:7f:13:4f:4c:34:53:5a:cd:41:
7d:30:9b:d3:a8:94:63:98:af:9e:2a:c4:91:68:11:27:02:aa:
f1:ff:72:ed:4d:e2:6b:45:1a:d7:98:c8:c7:70:b2:39:47:b2:
6a:83:97:1b:df:e2:11:c1:f4:1a:08:b6:13:0f:e0:17:d2:b7:
60:f2:86:d9:3c:8e:39:0f:1d:dd:9c:21:96:30:de:78:93:2a:
01:a4:cf:6b:cf:ed:bf:15:de:04:23:e0:da:52:3f:66:dd:b4:
d7:0b:2d:c1:7c:d4:15:36:9a:2f:6b:26:d5:7f:fb:09:d9:ac:
00:bc:86:27:12:10:37:85:3e:7c:04:01:eb:1d:f6:e1:ec:8c:
50:87:3a:76:26:67:fc:16:28:e0:cb:9d:7c:32:93:d9:69:09:
d2:a0:fe:f5:6c:be:af:d3:d9:43:d4:8f:b8:1a:ee:7e:8f:a6:
c3:00:27:c6:20:ee:22:1a:37:b8:13:ce:71:c1:08:97:82:9c:
01:c9:2a:68:0d:d2:e1:49:a3:b7:f1:03:42:06:a3:31:d7:a4:
65:c8:4e:d2:07:cd:9f:81:98:a3:07:98:79:d4:e7:b6:fe:72:
cd:90:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:59 2026 by rpki-client