Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: sQG2jjoCvc6m68W0f3/gqk5LuwJo20npIlUM67jU7qg=
Subject key identifier: D7:CD:E2:06:15:FC:EF:81:79:97:DF:AA:59:AF:4C:05:66:7E:46:DE
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 019D27E026E3EFBA5566EEAA5DD057E93AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 05A0
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: wTHeOcz1hUfIkdMLg+xWi1zuAsRbDfW0a+hL0l1Dj7M=)
2: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (hash: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:26:e3:ef:ba:55:66:ee:aa:5d:d0:57:e9:3a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=d7cde20615fcef817997dfaa59af4c05667e46de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:58:bd:cb:0c:ec:fc:ea:a9:6f:e2:94:09:
9f:5a:24:ae:17:88:98:84:25:ac:42:77:21:06:0d:
4d:db:5e:0d:01:6e:20:ee:96:d6:9a:a6:21:5c:79:
89:c1:e6:ea:0e:c5:51:ed:7a:5c:51:35:e2:7f:84:
c6:2d:d4:b8:92:82:52:17:c5:0c:32:ce:cb:c6:af:
19:cf:4f:87:a9:fa:48:96:9e:f9:c4:6a:2b:cb:39:
6f:77:6e:bf:59:8a:9a:22:90:9f:cb:c2:01:36:6f:
37:25:17:e6:d9:ba:6b:58:81:46:ac:67:86:bd:22:
da:19:cb:38:29:3f:29:02:05:64:67:16:da:6d:1e:
24:76:2b:ec:d5:b4:bc:c5:55:66:0d:61:96:0b:a0:
10:0b:21:39:f5:bf:1f:84:e1:62:8d:a1:0c:a0:73:
f9:41:86:2b:e2:40:81:3b:88:48:07:d1:fe:77:11:
ea:a6:5e:8f:b4:64:c0:af:fc:55:e0:ee:1b:82:45:
64:a0:d8:2f:dd:0b:6f:cf:67:65:6f:2d:52:4d:d2:
a5:97:8a:f2:f2:ca:c2:0e:6d:e6:3e:e7:0f:32:d0:
88:5a:38:d3:3c:2c:57:6f:93:35:a6:c5:8a:d7:df:
10:8e:b1:4f:54:2a:60:1a:fe:4f:b9:cb:20:64:a9:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CD:E2:06:15:FC:EF:81:79:97:DF:AA:59:AF:4C:05:66:7E:46:DE
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c3:e8:c1:43:d2:49:95:27:29:da:e1:d5:3b:56:8b:7a:9e:
88:dc:3c:ac:9f:32:e2:f0:11:94:fb:a8:91:cf:7e:ff:53:e1:
5d:ca:e0:e1:0a:7f:50:f5:c5:ed:92:48:29:5e:75:a6:0f:44:
4c:73:b9:a3:8f:ff:74:77:36:3f:f1:3f:03:6e:00:60:d6:9c:
b1:65:b8:4b:02:30:cd:fe:69:24:18:6b:f7:34:a8:90:6f:b1:
dd:42:77:37:8a:58:3b:75:c9:1e:93:25:5d:57:98:26:31:f9:
67:91:cb:2b:f7:a7:91:3a:66:0f:0f:15:c8:8f:d3:ac:04:85:
c9:a9:71:be:ed:11:5a:6d:8d:79:38:2a:24:80:8c:67:c8:13:
68:1e:3e:6d:e2:db:5f:8b:72:5e:0f:7b:e4:fa:7f:5b:bf:88:
01:d1:6d:e5:23:29:1d:61:da:03:a5:d4:1b:3f:ef:25:f5:d0:
e6:b1:29:bd:0d:ad:ba:66:e8:71:fa:7b:73:43:c5:97:34:3b:
5c:6e:51:10:90:a5:81:1f:c0:d5:85:bb:97:d1:5f:37:1c:21:
d9:9d:35:d8:71:2a:c9:ab:71:f0:ed:f9:5f:ca:46:02:a6:ae:
e7:d3:06:a7:b1:48:cb:d0:4c:92:a5:b8:51:e3:46:dd:3d:f8:
e1:f8:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:43 2026 by rpki-client