Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: gY36/hpHm0W+hPu+qbBLaaddjz/yCAf3mu4IMrvDc54=
Subject key identifier: 52:00:98:1A:E7:BA:73:10:97:00:FF:E0:CA:C8:97:D1:86:45:BC:CE
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019CAEA3214F31BF95129BCF2F6F6E396FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 13:00:52 +0000
Manifest this update: Mon 02 Mar 2026 13:00:52 +0000
Manifest next update: Tue 03 Mar 2026 13:00:52 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: 4WWgSFYwGBSlYsxARdaMFzM30AW3GEhr8x1UzCTIPBM=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:21:4f:31:bf:95:12:9b:cf:2f:6f:6e:39:6f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Mar 2 13:00:52 2026 GMT
Not After : Mar 3 13:00:52 2026 GMT
Subject: CN=5200981ae7ba73109700ffe0cac897d18645bcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:08:a9:54:c6:f3:e3:84:fb:5c:d6:67:2a:
31:7b:67:bf:2b:a6:fb:e6:fb:50:f2:39:c3:78:a6:
9f:8a:e6:14:3c:29:fb:4c:10:e3:cb:62:76:2f:45:
04:b4:43:f2:7e:4d:3a:a2:ca:05:a4:7d:6b:cb:ed:
e2:b7:c4:7c:16:3a:cf:c0:89:fd:26:8a:ab:4b:37:
0e:07:be:c3:d9:7c:08:b3:3c:18:90:67:3d:82:76:
46:c4:f7:ef:6d:56:bd:ec:fa:94:8f:5b:08:f8:05:
c7:48:c9:53:c5:c8:3c:6b:a4:00:93:17:d3:d4:e8:
3d:1e:49:fc:ea:7f:24:bb:ea:2d:22:03:c7:07:f5:
3f:97:72:89:e6:65:75:c5:9b:ab:07:4e:e0:e9:d0:
38:b1:8b:43:7b:c2:e8:97:7b:8e:a6:92:35:29:88:
1c:77:2b:27:a5:13:0d:f2:e7:46:6a:e3:37:ce:78:
a5:08:8c:a2:39:e2:0a:9d:81:88:88:38:97:61:ee:
89:22:32:da:1c:ea:a1:74:c9:d4:63:a6:6e:40:1d:
a8:62:39:da:14:18:19:fd:fa:b1:f6:af:1e:43:d5:
5d:11:ae:0f:e0:2c:ce:27:bc:54:ba:24:1c:85:13:
6e:47:80:a7:d3:b6:dc:ba:be:c1:3f:f7:4f:04:60:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:00:98:1A:E7:BA:73:10:97:00:FF:E0:CA:C8:97:D1:86:45:BC:CE
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4c:4e:43:87:7a:88:c8:57:ba:22:a9:62:ca:33:50:d4:b9:
be:c9:cc:3b:d8:8e:c8:32:19:70:eb:ac:1d:58:71:fe:b8:5e:
3f:b0:92:a4:4f:5c:9a:f9:f5:5b:74:24:db:27:64:5f:81:a1:
69:9a:08:ac:7e:4e:0a:86:45:68:21:4c:25:a8:d8:9c:14:03:
d1:08:73:a2:bc:0d:f0:ce:b4:d7:ec:39:0e:b9:bf:28:9c:9a:
24:0a:f3:3a:5b:41:dd:24:5c:d4:7d:1b:a4:91:4a:dc:b2:66:
73:bf:c6:47:82:46:a6:06:94:69:dd:ff:ba:2d:e5:e4:42:54:
ac:05:8c:9b:c1:cd:c4:bc:cd:f1:22:2d:69:8b:e8:3b:0f:c2:
fc:4b:6a:56:d2:3b:e3:4e:0c:bb:48:b3:16:0a:21:4a:ce:b1:
56:fe:58:3f:ce:5e:4a:e3:1a:32:d8:68:ce:1b:7c:12:1b:ca:
4c:fd:b0:68:ca:d7:55:32:b5:42:2c:01:09:f8:fc:8d:b4:41:
da:62:96:e0:3e:48:21:b6:67:c9:be:ee:f4:a9:9d:28:a0:85:
b5:35:ba:81:cb:17:ed:01:6f:1e:40:6c:3b:1d:65:29:b7:d7:
4c:74:16:c0:fb:1d:88:97:14:5c:ac:af:9d:31:db:93:8a:a1:
9a:56:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:00 2026 by rpki-client