Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json)
Hash identifier: /rW3E3qNDWagHNcyNP2Wag3ZjLZYJCaVHM7fCRGavGw=
Subject key identifier: 9F:A3:ED:A1:A8:F1:A1:80:C5:09:C6:37:08:1B:6C:7A:FB:AB:CC:B5
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial: 019D28168A9DE22B3293FD7114B87D75FBA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
Manifest number: 0384
Signing time: Thu 26 Mar 2026 03:00:59 +0000
Manifest this update: Thu 26 Mar 2026 03:00:59 +0000
Manifest next update: Fri 27 Mar 2026 03:00:59 +0000
Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: 5BqFBuDaMsNTceh7NWbM9W0/2mXvmzqICXHyp/Ej7ko=)
2: ths8OXX3QSMsj9e29cfZdF76uD8.roa (hash: aGHUmAejD8Fr+WhhhtcNvvY0gSQE1mI1EhqqEc3+N9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8a:9d:e2:2b:32:93:fd:71:14:b8:7d:75:fb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
Validity
Not Before: Mar 26 03:00:59 2026 GMT
Not After : Mar 27 03:00:59 2026 GMT
Subject: CN=9fa3eda1a8f1a180c509c637081b6c7afbabccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:19:be:d9:f6:8a:64:79:f7:d5:d8:83:b8:
e7:f7:b0:62:cf:66:bf:80:ee:17:25:2c:66:cd:0c:
ec:ba:8a:e2:d1:69:72:fd:aa:c4:52:d9:ca:a3:9f:
7f:8f:89:f8:35:cf:a4:32:10:aa:78:2e:ee:26:a4:
5a:b1:26:d5:5d:46:6a:e3:8e:a2:b2:50:c5:6c:3b:
f6:2f:12:41:d9:96:fd:ca:7d:48:af:e5:4b:69:4d:
96:de:b3:62:d9:d1:70:fb:77:3b:06:0c:74:3e:ba:
a8:4d:30:6a:d2:e2:84:1e:e5:b8:a0:e1:4d:0a:af:
0f:c9:ee:8d:8e:a7:97:44:e0:99:c4:54:45:db:30:
a4:1a:95:5c:72:2b:cb:39:d9:63:23:78:60:7a:fc:
a2:44:63:b6:96:68:8b:4a:47:7e:91:ad:aa:e1:bc:
4e:2f:ab:cf:c0:d2:c1:3f:0e:88:2d:ca:21:42:58:
05:f7:6e:a5:48:89:4e:61:05:70:52:9f:90:a3:72:
0d:58:5e:96:94:bd:25:97:8a:6a:78:fd:f9:25:86:
48:00:84:d4:c2:c8:df:f3:6b:1e:dd:fc:e6:59:be:
bf:d9:5d:b9:d3:4a:a1:d0:d3:c7:e8:59:93:5c:7a:
a3:13:57:d7:8f:82:f5:f8:d4:8d:d2:b6:d1:6b:34:
40:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A3:ED:A1:A8:F1:A1:80:C5:09:C6:37:08:1B:6C:7A:FB:AB:CC:B5
X509v3 Authority Key Identifier:
keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d8:47:90:a2:cb:f2:28:f2:15:03:6c:bc:80:a1:45:7e:e7:
d7:c3:a0:0b:71:02:fc:61:1c:d3:31:1f:ac:36:55:4b:b0:40:
9b:9b:61:50:69:16:d9:9c:a2:c1:3a:b4:f7:0a:e2:b1:88:84:
3c:ca:b4:09:4f:27:ce:f1:c5:fa:2b:ac:c4:bf:a7:eb:69:26:
03:19:14:ea:8a:c9:15:ec:78:c4:20:cd:c0:63:ab:92:23:3b:
6a:81:c8:1f:66:5a:6c:ba:0f:3e:7c:eb:ab:db:0d:1f:fe:4d:
cb:3a:1f:a3:80:26:ed:d9:ce:97:bf:4b:ae:1b:c0:95:14:9a:
0a:91:49:ea:90:5b:2a:08:1d:19:d9:c7:c0:ce:3e:9d:f8:9a:
5c:0b:e4:51:36:45:f2:8a:90:66:dc:4c:c4:95:32:7b:c4:d9:
19:5d:36:90:d0:df:6d:75:d1:5d:44:2a:e5:bb:e2:1d:d1:5f:
a6:26:4c:60:32:21:1e:b0:71:ac:9f:67:48:15:be:fc:fc:2f:
cd:43:eb:6c:86:7c:78:17:b5:7d:11:9a:94:1a:b4:9a:71:3c:
cc:69:cc:70:96:bc:af:a1:96:60:19:d9:a3:80:26:87:c2:be:
59:34:95:46:97:6a:1b:81:7c:69:7f:e4:fb:f1:00:d0:cb:64:
0a:cb:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:01 2026 by rpki-client