Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: iexHBxrBX0OVRuTuJxLY0ug6XzUYTbXUpcftmGNQPn8=
Subject key identifier: E1:0C:EF:01:96:CE:C1:A3:8E:EB:ED:86:3A:1A:13:FC:72:54:8D:D9
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 019D273ADF811F1EAAA3EA4FCEC87620902B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: GT0kOF6jyqWDhoTgUI8zkpZi938bPbGGr/DopSyLCQI=)
2: tQHKW_5yxjpKOHe3d-ZP6p2sC64.roa (hash: 3+Hu+PFHtyBzCp4FY8HXvj0Pcdpyb0FAw5+YbzrL8sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:df:81:1f:1e:aa:a3:ea:4f:ce:c8:76:20:90:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=e10cef0196cec1a38eebed863a1a13fc72548dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:87:85:aa:78:0f:69:7f:56:07:8f:48:ec:
67:93:82:05:cd:eb:8b:e2:d7:ef:63:da:1c:bb:e8:
74:3b:4d:8a:af:46:07:e1:86:55:2b:c6:df:8a:48:
e2:62:5e:81:4e:e7:1a:e5:4f:02:4b:e5:f1:a7:c4:
31:e1:ad:18:16:59:2a:4f:7f:11:a2:68:1e:e5:d6:
03:41:91:ad:a5:67:fb:30:db:0c:97:7a:eb:dd:72:
73:a6:0a:86:ba:81:51:a0:29:eb:4c:11:e8:03:4f:
20:c3:a1:ad:eb:62:2d:b3:9c:77:1e:8f:8f:21:05:
cf:dd:f8:cb:04:6b:90:6c:92:c6:58:2d:3b:7c:e0:
32:57:f8:fd:a9:7a:01:96:42:4d:8e:a9:34:6c:98:
fe:e9:42:4c:53:23:bd:30:b9:f2:cc:3c:12:df:ee:
13:4c:a6:8a:7e:2d:af:c4:4e:24:1a:8e:76:f2:01:
6f:c2:5b:1d:5a:55:70:13:01:79:92:a6:3f:39:de:
3f:b4:3c:66:0c:9b:46:34:ab:7b:a7:cd:33:74:a9:
f4:48:99:25:5d:42:75:fb:2f:77:69:d4:24:c7:a0:
25:8f:e0:be:72:f1:73:68:e8:4a:9c:0b:71:f6:60:
2e:31:66:45:a9:91:4e:d3:6d:89:c0:d6:6c:67:4a:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:EF:01:96:CE:C1:A3:8E:EB:ED:86:3A:1A:13:FC:72:54:8D:D9
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d8:3d:da:b3:40:b4:22:48:9b:97:1c:ee:87:36:f1:1d:cf:
1f:31:7f:a6:39:21:40:fe:10:e2:3d:89:1c:78:c5:f5:86:d6:
1c:95:d3:d7:dd:5b:bd:d1:a9:d5:1d:6b:7f:1d:32:34:fe:75:
85:f9:9e:4b:d2:4f:e3:da:73:28:af:51:b8:4a:ec:7a:f6:5c:
70:3e:80:c4:2a:2b:2b:41:30:ec:89:f8:db:c4:4b:93:db:b2:
5a:43:95:41:b4:fb:52:e6:73:c5:d7:48:0a:08:39:d9:90:a3:
95:a4:5c:96:c0:34:d2:f4:4e:fd:98:62:b6:f2:cc:bc:46:e7:
09:b1:5a:9d:8a:8c:5f:45:b1:f7:9e:46:06:63:05:e9:34:fd:
f1:22:2f:ca:54:d7:cd:a6:d3:ff:a2:67:b3:a3:28:a7:4f:f1:
98:b0:ee:46:dd:a1:17:20:50:5f:6a:ca:b6:ed:fd:2f:f4:70:
8a:dd:13:3f:08:2f:fc:73:21:b0:cf:b6:2e:c9:1f:fc:35:4a:
0c:1e:74:1d:b3:87:11:45:a3:01:6d:86:84:b6:af:b6:c9:48:
2e:c8:a6:b0:80:ef:88:1d:40:6c:bc:3a:ea:4b:82:b7:b9:99:
e3:0c:a2:cf:76:ff:eb:66:03:7d:a1:b3:12:11:b6:1c:af:b0:
07:13:90:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOt+BHx6qo+pPzsh2IJArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjVmZjA3NjcwNDUyM2ZmNmJlODgyYjg3ZWVmYTgwN2Ix
ODhhYTkwHhcNMjYwMzI1MjMwMTAyWhcNMjYwMzI2MjMwMTAyWjAzMTEwLwYDVQQD
EyhlMTBjZWYwMTk2Y2VjMWEzOGVlYmVkODYzYTFhMTNmYzcyNTQ4ZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcSHhap4D2l/VgePSOxnk4IFzeuL
4tfvY9ocu+h0O02Kr0YH4YZVK8bfikjiYl6BTuca5U8CS+Xxp8Qx4a0YFlkqT38R
omge5dYDQZGtpWf7MNsMl3rr3XJzpgqGuoFRoCnrTBHoA08gw6Gt62Its5x3Ho+P
IQXP3fjLBGuQbJLGWC07fOAyV/j9qXoBlkJNjqk0bJj+6UJMUyO9MLnyzDwS3+4T
TKaKfi2vxE4kGo528gFvwlsdWlVwEwF5kqY/Od4/tDxmDJtGNKt7p80zdKn0SJkl
XUJ1+y93adQkx6Alj+C+cvFzaOhKnAtx9mAuMWZFqZFO022JwNZsZ0qDjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEM7wGWzsGjjuvthjoaE/xyVI3ZMB8GA1UdIwQY
MBaAFCD1/wdnBFI/9r6IK4fu+oB7GIqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDct
ZjZhN2I0OWY5ODFhLzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDctZjZhN2I0OWY5ODFh
LzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftg92rNA
tCJIm5cc7oc28R3PHzF/pjkhQP4Q4j2JHHjF9YbWHJXT191bvdGp1R1rfx0yNP51
hfmeS9JP49pzKK9RuErsevZccD6AxCorK0Ew7In428RLk9uyWkOVQbT7UuZzxddI
Cgg52ZCjlaRclsA00vRO/ZhitvLMvEbnCbFanYqMX0Wx955GBmMF6TT98SIvylTX
zabT/6Jns6Mop0/xmLDuRt2hFyBQX2rKtu39L/Rwit0TPwgv/HMhsM+2Lskf/DVK
DB50HbOHEUWjAW2GhLavtslILsimsIDviB1AbLw66kuCt7mZ4wyiz3b/62YDfaGz
EhG2HK+wBxOQ4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:56 2026 by rpki-client