Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier: UjquOKh4yuctmCs9/UTToZQYn1GyyI/vSAGtGCxvY2I=
Subject key identifier: DE:B5:50:28:36:96:7D:0F:C3:A6:1E:BC:BB:66:73:1C:62:29:3D:21
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial: 019CADC846978A6EBE49EBE5F78E15A7E956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number: 06C0
Signing time: Mon 02 Mar 2026 09:01:49 +0000
Manifest this update: Mon 02 Mar 2026 09:01:49 +0000
Manifest next update: Tue 03 Mar 2026 09:01:49 +0000
Files and hashes: 1: BPaDPKTEMEpX1Fzv_jvryI3ZhZs.roa (hash: dyyBL506kK/U4ZZnY6jdH+HEkq9epTy/PSVjs7aWPIM=)
2: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: bbVuBLMrk5I/ujvxwuqV1N/yng19WeJV2wV9kPQD0xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:46:97:8a:6e:be:49:eb:e5:f7:8e:15:a7:e9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Validity
Not Before: Mar 2 09:01:49 2026 GMT
Not After : Mar 3 09:01:49 2026 GMT
Subject: CN=deb5502836967d0fc3a61ebcbb66731c62293d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:f7:a8:8f:85:2b:72:86:70:84:6e:09:56:
fb:6c:94:4d:0d:6a:3e:65:80:23:43:20:d6:96:d3:
ae:54:2a:b1:b5:84:88:3b:b6:85:3c:03:2c:dc:e7:
e0:10:66:ee:f3:c9:fe:b5:b3:5c:3f:21:43:00:c5:
28:fb:76:2a:44:78:c4:8f:e8:b9:81:52:21:ec:9e:
3f:5d:ba:f0:10:e2:2a:4f:41:9a:d1:a5:53:61:0a:
a7:64:37:1e:53:3c:57:41:bf:c6:7d:31:d8:34:29:
47:13:98:35:cd:5a:e3:25:74:79:2e:8a:1f:76:3e:
e4:7b:0b:f9:b5:ef:1b:d2:4a:12:66:3a:b1:d8:b6:
12:0c:d0:12:f8:5d:b5:a9:65:21:eb:47:f9:5f:9f:
c9:bb:91:6f:4c:8c:6d:d4:ef:2e:30:5b:1f:a5:4f:
fc:3d:03:4e:0d:46:a5:29:e4:d3:87:2f:c6:86:4c:
36:87:5d:07:c5:41:ae:7b:4a:ae:72:50:ad:2b:11:
63:99:77:49:7d:3f:ac:c4:9e:f3:6b:1c:dc:89:46:
cc:64:34:87:f6:47:76:c6:5a:3c:2f:73:9f:51:f9:
e4:70:bb:f9:2d:0f:6f:41:c6:7f:3d:ec:cb:36:a9:
78:d0:81:f3:cf:44:e3:c8:ae:64:17:fe:9b:1e:b3:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:50:28:36:96:7D:0F:C3:A6:1E:BC:BB:66:73:1C:62:29:3D:21
X509v3 Authority Key Identifier:
keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:13:a9:eb:41:04:01:1e:ed:8f:26:1f:de:04:d7:0f:e2:
1e:3f:ed:78:a3:5c:e5:47:e6:21:11:7f:92:05:01:be:e1:fa:
f3:c3:f0:ee:47:8a:42:59:be:88:c9:36:da:2f:52:06:ab:9f:
21:44:de:9f:9c:95:37:d9:e7:5d:ba:29:e0:15:df:7a:93:62:
95:43:69:66:0f:dd:4e:07:d8:7f:0e:24:03:db:ff:e2:a7:6a:
13:86:72:05:c4:d4:50:3c:db:18:bb:d7:d4:1e:04:fa:8a:6b:
eb:89:13:2c:68:ac:ef:b5:13:4f:38:fd:d9:3a:31:b4:aa:34:
87:fd:ec:a2:27:6a:55:b1:2d:34:99:10:4c:d5:cf:29:fd:14:
ad:65:0d:8e:aa:e9:3e:48:d2:06:6b:87:f2:c7:4f:60:99:f7:
c5:cc:d4:d8:ce:6b:d3:f7:4f:68:d0:1b:52:f4:45:72:42:f4:
41:da:be:af:5a:03:7a:35:8e:1d:6c:0d:e4:ae:fc:d4:32:01:
bb:7d:5c:38:18:a9:d2:1b:c7:01:8d:b1:42:24:d4:bc:4a:71:
c5:3e:fe:2d:4b:e9:6e:38:0a:c4:b5:30:f1:e5:4f:74:e7:48:
d3:4e:e5:e0:6e:03:4e:e0:91:81:ab:76:41:23:46:80:33:a5:
6f:f3:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:42 2026 by rpki-client