Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier: BLuJJz1dVfZ92gJzdo0fTs8xhMiPlu2Y0wtbkbGMVA4=
Subject key identifier: 70:E1:15:FC:D9:24:30:82:A7:7C:C0:E0:B0:46:59:AA:74:2E:25:D8
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial: 019CACB4735A778E370DA8EB24A1EC8C6346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:00:32 +0000
Manifest this update: Mon 02 Mar 2026 04:00:32 +0000
Manifest next update: Tue 03 Mar 2026 04:00:32 +0000
Files and hashes: 1: 1-1E1uif61o8C4HWLXAligJFDeqQ.roa (hash: D5F7YAusAftPV7C9tS7ICY1e2xvUA57jsFdWv4x/B44=)
2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: PuWa2gm/KYeCpheylOpFaM94UcSgly10SZfqECbuRaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:73:5a:77:8e:37:0d:a8:eb:24:a1:ec:8c:63:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
Validity
Not Before: Mar 2 04:00:32 2026 GMT
Not After : Mar 3 04:00:32 2026 GMT
Subject: CN=70e115fcd9243082a77cc0e0b04659aa742e25d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:17:50:ac:a3:eb:22:9c:74:d3:7b:ef:7f:
8f:7b:aa:46:8d:23:42:fb:2c:65:cd:a6:f0:8c:12:
6b:ef:aa:ef:1a:64:b3:ff:10:b3:59:38:fa:70:82:
6e:25:57:05:54:6d:e1:06:27:cb:13:2c:7a:6e:e1:
67:f2:6f:6c:09:69:8c:a9:1a:f6:12:1f:e4:79:58:
c9:84:9d:14:53:ee:1d:f7:db:72:8b:74:a9:3c:18:
87:a5:19:ca:cd:35:84:85:d5:2d:5a:b2:a6:2e:06:
c9:f2:3d:eb:53:c6:e9:e0:24:1f:aa:20:45:69:44:
f3:ed:79:3b:4a:1e:c4:e3:4b:0e:78:82:80:77:6a:
a1:2f:bc:b2:c3:d5:29:b2:0c:6b:34:b0:7e:6b:c3:
04:b3:30:0b:4f:ba:b1:84:1a:87:40:19:14:c3:e3:
8e:1b:29:63:8a:11:84:cc:6c:b2:10:2d:f6:a0:68:
7a:cc:f0:d5:d0:56:42:01:b9:ec:97:68:f0:fc:71:
9a:18:e6:ac:6e:53:b0:1d:3f:88:78:16:ce:db:03:
45:aa:24:e3:32:f4:b0:80:35:fe:52:ea:8f:4e:f9:
2d:57:b9:0c:31:1a:63:c9:6b:56:e8:f2:a7:90:e8:
c2:a0:f4:1c:a3:8a:34:1d:21:4a:ba:31:06:53:25:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E1:15:FC:D9:24:30:82:A7:7C:C0:E0:B0:46:59:AA:74:2E:25:D8
X509v3 Authority Key Identifier:
keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:67:ea:e9:fb:58:34:f7:98:7e:ba:b9:0c:f7:aa:c3:ca:82:
bd:da:38:e7:f2:45:42:ef:ca:5d:c6:5f:0a:c6:26:48:2a:d4:
da:85:ca:45:3b:ec:da:03:ff:01:70:10:00:e2:77:97:23:dc:
3d:bc:e7:0b:04:6e:b4:8f:8e:a3:0f:5d:5e:86:d4:4b:ac:7f:
a9:5a:7a:a5:86:13:35:d5:ee:ae:c9:0e:ee:a8:c4:eb:5e:57:
59:09:77:e6:a6:53:ab:69:70:6e:89:2e:87:78:89:2b:ee:9a:
3d:18:5d:41:98:6e:b9:73:bc:7d:10:93:74:a0:44:7e:b3:64:
37:f2:47:1b:2c:73:07:28:18:6f:13:9e:2e:05:4f:0c:d4:18:
5d:87:07:3d:80:e3:66:d1:f2:9e:6c:4b:18:10:5c:57:67:29:
e3:50:33:13:c7:61:54:90:54:c6:7e:41:2a:03:71:8a:1e:a5:
06:15:64:7d:92:21:ce:82:ff:37:25:9e:a4:62:eb:51:93:4b:
65:84:34:78:4f:ae:5a:96:6f:17:19:a6:d1:9f:2e:2b:21:ba:
fd:83:38:8e:81:2b:50:93:59:3f:bd:80:eb:30:4c:81:7f:66:
4c:5f:10:3b:03:30:73:8e:e4:1d:a0:eb:d3:40:79:60:d7:66:
58:3a:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:44 2026 by rpki-client