Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: aJbQ7HpNLLGJgP6syoj33hdaKkQQAQVmzSqiBq/rupo=
Subject key identifier: 6C:36:D0:A7:0A:83:AB:BB:3E:24:72:75:D6:00:12:AE:EC:A4:17:7B
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019CB091A69B34B291F43D0D10D28C76B2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 22:01:01 +0000
Manifest this update: Mon 02 Mar 2026 22:01:01 +0000
Manifest next update: Tue 03 Mar 2026 22:01:01 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: Sg6PORsWEZnKD+Rsa1onCtpA7TbuJirQnJhKqQFWUDY=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:a6:9b:34:b2:91:f4:3d:0d:10:d2:8c:76:b2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Mar 2 22:01:01 2026 GMT
Not After : Mar 3 22:01:01 2026 GMT
Subject: CN=6c36d0a70a83abbb3e247275d60012aeeca4177b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:04:eb:00:72:9c:26:45:27:dc:33:f4:0f:
e9:cf:4c:88:5c:99:e0:df:f8:83:e1:6c:3d:bf:d4:
be:9e:aa:8b:a8:a3:ad:12:eb:d1:71:a4:c0:18:aa:
06:04:1e:58:0d:12:4d:bb:9f:62:9b:05:b1:c6:cb:
60:a9:e8:ab:3f:d4:21:ae:81:eb:66:6a:bc:1a:2b:
e6:11:53:ff:7c:a8:27:e0:7f:a3:ab:50:ac:fe:66:
00:79:e2:2e:6b:4d:16:ea:e4:c9:4e:e6:8c:7b:dd:
e7:f3:10:0e:68:9f:b3:86:75:4f:36:41:f6:af:95:
c6:c3:dc:a2:b0:9a:9d:39:f5:7f:02:73:38:c0:cc:
f3:fe:74:5a:74:fb:f2:da:35:92:0b:7f:99:cc:d6:
32:a9:0b:71:79:09:ec:71:14:ff:bf:f8:ae:0f:ae:
8d:3e:8a:7a:19:66:24:c2:9d:65:2f:dd:5c:fc:66:
43:97:e7:12:81:e4:3c:9b:d7:a2:08:0a:c8:ab:a6:
21:21:4c:70:35:b3:2d:5c:0d:8d:00:d5:71:28:e7:
2e:16:41:98:28:46:fd:ef:44:2f:fe:f6:af:99:f7:
8a:c4:30:62:18:74:e3:07:52:ef:18:06:01:61:9f:
ec:ec:78:8a:32:76:9e:17:fa:4e:c4:17:ed:64:29:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:D0:A7:0A:83:AB:BB:3E:24:72:75:D6:00:12:AE:EC:A4:17:7B
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:03:e3:4a:0f:03:d1:89:68:5c:56:7a:81:e2:0f:f0:b8:93:
6f:ae:c2:fc:04:12:1b:e3:6b:70:7d:c4:a6:cd:e7:e5:61:95:
54:1f:13:65:49:3a:07:00:15:3e:80:aa:58:ab:42:6b:33:cf:
d3:f6:9e:38:46:b9:e6:6a:a0:d0:88:2e:8f:24:73:89:f8:72:
03:9e:1f:c5:0a:f0:32:2f:39:5b:e1:84:7b:8f:a2:92:fa:aa:
ce:09:f7:ab:42:28:12:78:85:4c:82:6a:25:4a:0e:73:8c:73:
ab:cf:28:d8:72:4b:0f:82:9c:3f:75:89:99:f5:a6:fc:c7:c8:
58:b7:26:42:40:87:ff:15:96:21:6f:57:5d:dc:df:07:4c:00:
d7:5b:2d:fc:fb:dc:4d:27:8b:01:b5:aa:c1:b9:9c:f7:dc:a7:
f0:5b:6d:7e:1a:54:9a:6f:c2:a5:45:d7:e5:d7:90:85:4e:62:
e2:0e:3b:9a:d0:29:93:b8:33:91:72:d4:17:fd:fe:d8:37:44:
cb:d5:ab:df:07:00:86:37:14:0c:4e:86:f0:9f:60:30:3b:7d:
78:e9:ad:c8:ef:4e:17:fe:1a:2e:fb:3c:34:3a:b4:64:e2:01:
aa:52:ad:34:1b:4b:96:0e:db:85:bc:5f:0e:05:da:f4:70:81:
ad:da:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:17 2026 by rpki-client