Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json)
Hash identifier: MIY02Elu2AxKbaoEuuMRxmRvQ2MN1rxMCu1OU69UfjI=
Subject key identifier: 8F:A3:D0:80:CF:6D:2C:78:E2:B0:ED:7A:55:A2:3D:02:F5:27:6B:FC
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 019D26CD0D0293001819650025188611206B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
Manifest number: 033C
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: p7R9UubRGGzfEpRlSHKd84spnZwlv/vowTxMKtOFVCE=)
2: oKbMR38c6g5Sb8f_q8_DP98D8vc.roa (hash: QbHsSOABpHInSeNj8NMGYtmUXI4ZAi0ELzxa77Y6VMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0d:02:93:00:18:19:65:00:25:18:86:11:20:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=8fa3d080cf6d2c78e2b0ed7a55a23d02f5276bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:48:9d:b7:8e:3b:6d:dd:b6:cc:e9:37:79:d0:
b9:f7:38:3c:cb:56:53:be:78:41:0b:7e:5e:ba:16:
b5:31:50:8c:d1:ff:4d:8e:e1:91:31:8c:e0:f3:6f:
d7:53:8c:4a:8c:eb:24:77:f6:ce:5f:98:4d:ef:99:
e0:1c:1f:c3:30:9b:b5:58:99:5a:f1:10:aa:b2:a9:
89:83:29:d0:a7:78:9d:bd:79:9e:24:1a:c0:39:0d:
99:d4:8b:83:62:bc:3a:a4:33:0d:87:f6:e1:94:90:
ce:ab:9b:ca:7c:a1:1a:04:60:48:8a:39:05:68:a8:
e1:a0:ea:dd:d4:8a:b9:0f:8d:93:0c:35:d2:6c:c3:
91:f8:37:32:4f:37:6a:20:20:95:da:ef:06:3f:69:
17:54:c7:cb:e9:88:b1:94:cf:fb:7b:6e:a9:dc:ee:
47:1d:2e:27:31:8e:2e:6b:9a:fe:f7:c2:0d:54:02:
25:91:30:b2:3d:f1:0c:9b:3b:3a:0d:c2:22:0f:57:
30:b7:1f:00:0f:c1:50:32:c0:69:d6:e3:1a:76:6f:
29:58:86:af:53:a9:d9:05:70:4d:6b:f2:f9:19:d2:
33:d0:ba:92:6d:7e:9f:ca:96:fb:b1:f2:63:2f:ef:
ce:b7:ed:ad:b8:49:4e:84:99:b3:54:ac:28:d7:c6:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A3:D0:80:CF:6D:2C:78:E2:B0:ED:7A:55:A2:3D:02:F5:27:6B:FC
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:66:26:fe:ba:2f:df:21:4b:20:12:0e:25:26:77:b1:56:
a3:e8:dd:e1:90:51:be:68:0a:09:88:67:36:3c:20:f2:31:88:
1a:da:7e:73:b5:01:c0:99:1d:a2:a6:64:e6:b3:8d:00:3f:ec:
1c:2f:28:e7:51:4b:0d:f5:7f:e5:fc:1f:a3:fe:0c:75:62:93:
2e:5b:9b:67:94:00:1d:de:15:f0:12:b0:27:47:5b:3c:bf:c9:
b4:b2:85:2f:27:ad:22:6e:1f:97:50:ae:ea:58:a7:24:05:cf:
59:33:e2:c7:43:ac:d6:8f:97:51:49:ce:a2:5d:9a:76:14:03:
38:f1:16:b3:d0:35:2e:00:fa:f1:f1:32:38:95:73:da:87:8d:
88:3e:ee:22:02:6d:55:fb:43:2d:f9:f6:38:6e:97:65:d3:cf:
aa:09:a0:a9:a7:1d:74:b2:51:cd:cd:bc:ce:39:01:28:4e:82:
79:d4:18:07:5a:67:6c:5e:49:cb:f2:87:07:90:d2:90:82:23:
37:96:fc:94:82:59:98:82:e5:71:25:83:c6:8c:be:c1:ff:e5:
b9:17:52:04:fd:d1:1d:a3:d8:4d:97:d6:14:22:3f:1f:94:1b:
9d:11:54:11:8c:53:c6:70:b1:1f:2e:de:d0:20:54:f9:0e:8c:
f2:6a:68:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:11 2026 by rpki-client