Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier: RWiaMsf+ilVggY4bKqIh5lx5tGCCpClWoq1yZVnmAFs=
Subject key identifier: F8:72:F7:A0:02:C5:C9:C7:9D:23:3E:D0:0A:FF:18:49:E4:8B:8D:55
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 019CABD9FCE1644713CC4B73B96A5F26E8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: dX7Fg62lzMBhYY8foGUv7wEZPoTI6bOmBo4uh/q8/1E=)
2: YB2rJph3jtykrU245nJwP-cGOQE.roa (hash: aIiLHbCrLpw92COeGL73Eh5jy1guo4i8Y4Mb82Pormc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fc:e1:64:47:13:cc:4b:73:b9:6a:5f:26:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=f872f7a002c5c9c79d233ed00aff1849e48b8d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:9f:b0:88:be:54:74:20:e3:54:b0:bd:5e:
ed:66:b5:5f:6f:8c:4d:61:5b:8c:2a:72:5c:84:62:
99:6a:9d:b9:ba:48:2a:6c:56:c8:41:a4:b2:34:fc:
c3:d3:95:de:8c:c9:45:ca:af:a7:bc:4e:88:32:58:
47:6d:8b:d9:45:f2:ba:6c:68:fe:16:80:4f:14:80:
0a:38:75:44:5d:0c:19:85:7e:a2:ed:e4:27:3e:f0:
2e:fa:c4:a6:9d:96:a7:38:a6:e8:82:85:20:74:3a:
25:c8:da:19:9a:84:88:99:ae:22:9e:33:40:10:43:
67:91:70:cc:e8:6b:8d:f5:7c:2a:b0:81:8d:89:aa:
ee:2c:10:be:fe:ca:7f:93:11:ef:2d:63:cf:94:90:
c7:90:df:a1:1b:40:63:7e:76:aa:55:35:f7:99:f6:
a0:56:1d:12:5b:10:d2:1e:52:a5:5d:fe:d8:f2:55:
93:5a:a9:d3:29:53:6d:ba:db:de:30:93:0b:1a:7c:
d9:d9:b0:a3:3d:32:43:3e:29:27:c0:15:a7:82:56:
17:a4:ec:e9:39:d9:36:29:6e:08:f9:31:40:c6:01:
f5:2b:84:7f:f7:57:54:7a:64:b6:74:5c:a1:1e:b5:
a8:dc:22:31:ac:ac:f8:92:d8:8a:ef:a9:e7:a9:7e:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:F7:A0:02:C5:C9:C7:9D:23:3E:D0:0A:FF:18:49:E4:8B:8D:55
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:72:94:15:0c:3c:a8:29:05:d2:9a:dc:6f:98:c5:37:22:cd:
d1:ef:d4:5b:b6:53:ef:ba:93:04:b0:80:8c:e0:10:90:80:da:
f4:fa:51:d0:82:23:e8:2a:53:2c:30:4c:65:03:ca:e0:b2:3f:
5f:e0:4b:19:65:35:f3:20:50:35:9d:2c:36:cd:a3:36:68:d4:
71:3f:19:a9:17:d4:71:15:53:c8:fa:11:60:c5:37:67:43:a3:
84:a7:88:84:22:95:b5:c2:a3:47:78:b4:5e:1f:34:c2:6d:f0:
57:1c:e7:f3:9d:77:e8:67:ae:52:75:4b:0a:e8:dd:81:b1:56:
aa:93:29:d5:4a:66:c2:f1:4c:b4:26:be:74:98:11:5e:40:67:
bb:9a:07:1f:8e:24:27:9b:3e:97:91:70:5a:0b:55:d8:18:78:
1c:93:ce:f7:42:3c:5e:ef:45:da:d7:0d:d4:c8:f8:02:74:83:
60:ca:af:8c:e0:2a:6b:60:96:cc:b7:57:7a:ee:f5:cd:99:8b:
58:27:79:a0:60:ca:6f:d5:c5:98:fd:70:93:8a:3f:c9:10:06:
4e:0d:51:aa:24:c0:2e:9f:a4:15:e2:aa:34:31:12:84:3e:ab:
c7:15:6f:8e:1b:fa:7c:b1:c1:66:58:90:98:95:d8:65:d7:16:
49:c8:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:59 2026 by rpki-client