Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: nJ5I5TiMwrUYR7w4GNHYEv/HnTEsSY8B3O5P3tmA5wA=
Subject key identifier: 16:75:2D:6B:83:A9:35:09:47:98:09:4C:97:C0:81:1F:B6:6E:30:16
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 019D25BABD3367BD385EED9F3738250DAEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 16:01:28 +0000
Manifest this update: Wed 25 Mar 2026 16:01:28 +0000
Manifest next update: Thu 26 Mar 2026 16:01:28 +0000
Files and hashes: 1: HuFQZvhRuo0xrVnhchpAwhxXio0.roa (hash: 5dZkdyNjGGkUNI6gq510mm4AVyEYl5KXnKFtrfLu3/Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: pyggaPy2yUfIEMok2FxM8d2F98jDh/xvPX0sdJ29Qp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:bd:33:67:bd:38:5e:ed:9f:37:38:25:0d:ae:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Mar 25 16:01:28 2026 GMT
Not After : Mar 26 16:01:28 2026 GMT
Subject: CN=16752d6b83a935094798094c97c0811fb66e3016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:7a:49:cf:6a:aa:ed:06:51:77:d7:c7:b0:
f7:c9:6d:a6:81:78:c3:b6:86:71:64:03:1f:41:b6:
83:3d:98:91:92:1e:64:92:06:87:60:b7:7e:e6:9a:
bf:22:29:af:5d:b6:6f:fb:8e:9b:8e:92:4b:c4:82:
f4:41:1c:dc:bf:5a:35:46:2c:c3:22:b0:11:f3:d7:
a8:9b:40:a2:51:51:a4:57:14:74:35:51:46:f7:fb:
e9:f1:c5:27:76:db:6f:d8:f9:46:f6:55:f4:8d:9e:
ef:4d:cb:8c:41:bb:47:d2:19:06:e9:83:16:f1:71:
dd:54:9f:49:8d:bd:1b:98:54:8f:2c:ce:cf:58:2a:
6f:1e:a5:b0:49:bf:e8:2a:e7:12:d8:20:32:6d:89:
0d:3b:25:46:3a:df:03:32:8d:e8:15:9e:9b:9f:2f:
42:f9:80:7a:b7:6d:95:5d:e0:aa:86:ba:fe:a5:20:
a3:d5:17:0c:8c:31:62:9b:73:d5:68:d4:d3:da:4c:
11:b5:0f:5a:d2:fb:0f:a2:6f:fb:76:86:55:0a:90:
8d:33:4a:6a:9c:c2:1f:59:82:73:02:34:ca:a5:47:
d5:c3:1f:c8:b2:77:09:16:e4:71:4c:08:eb:93:f6:
90:c1:2d:30:39:c0:66:58:99:76:e2:78:61:d8:9e:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:2D:6B:83:A9:35:09:47:98:09:4C:97:C0:81:1F:B6:6E:30:16
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b0:7b:6f:b2:0c:c1:b2:10:37:a3:3b:8f:04:98:83:58:16:
49:da:22:b2:c0:85:7e:86:20:6c:26:69:ae:4a:6b:89:32:e9:
ff:53:3f:de:a6:7a:d1:8b:8a:36:db:02:eb:2c:f6:90:be:18:
b8:3a:35:5b:34:cf:35:30:92:eb:1b:5b:b6:36:2c:bc:e4:1f:
61:ee:1b:3d:44:c5:d3:ad:24:fa:f0:9b:de:24:64:84:c0:c3:
35:2e:96:73:47:66:a1:6e:f1:19:46:27:5d:db:78:06:38:85:
05:8a:6d:ac:a3:60:ec:cd:d5:56:37:24:44:fa:38:00:cc:99:
f5:7c:92:ea:81:3c:00:8f:b4:04:59:65:a0:35:3f:d4:fc:27:
65:f8:42:f8:11:09:d4:02:ba:df:47:3c:25:9e:5f:50:ec:1b:
40:4d:00:58:23:9e:b7:dd:35:b7:d5:b8:47:f8:63:f1:39:51:
8a:2a:f3:82:d6:d8:6a:b8:e1:93:55:c7:a4:1e:11:56:8b:99:
f2:42:10:c2:d9:31:01:02:cf:ff:3d:0e:c0:51:67:fd:e6:ae:
d6:47:ef:e1:c2:4b:fb:b6:a1:cc:27:f0:ee:04:73:8d:a3:25:
7d:f1:58:11:68:d9:ab:02:7c:58:b7:46:46:38:fa:37:82:87:
62:3d:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:46 2026 by rpki-client