Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File: dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier: AAovinVzUZra95UQAuQiwwMWIajzOsijxjctuJyh50g=
Subject key identifier: 22:26:A2:C0:DC:71:94:D7:EF:14:D9:47:A2:CF:49:13:BD:AD:EA:36
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 019D29608B50D563A2CD141C0A7395A74F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number: 0DA4
Signing time: Thu 26 Mar 2026 09:01:26 +0000
Manifest this update: Thu 26 Mar 2026 09:01:26 +0000
Manifest next update: Fri 27 Mar 2026 09:01:26 +0000
Files and hashes: 1: CbxnjlJBX1CICFT1kGWKTEy-Z-0.roa (hash: a7S+YgDlHzYeUVzNU2fan5Qha2NudAAgRA43fxRQexg=)
2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: BbgCKM0FoX1Dqte+CdLuCnlgWuOYyT+qPpvKLMoEEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:8b:50:d5:63:a2:cd:14:1c:0a:73:95:a7:4f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Mar 26 09:01:26 2026 GMT
Not After : Mar 27 09:01:26 2026 GMT
Subject: CN=2226a2c0dc7194d7ef14d947a2cf4913bdadea36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:e1:81:c7:a6:50:4a:5a:99:87:b9:50:51:
56:65:01:34:1f:f0:f8:39:0d:30:59:ca:db:c7:2c:
80:9e:61:37:0a:58:36:a7:22:3c:ab:94:6e:f6:31:
43:89:a1:3c:94:6f:1b:a0:af:c8:9b:bd:a7:91:b8:
25:f7:57:d2:15:b2:f7:4e:f7:4c:6a:68:41:a4:f0:
50:c7:6e:c5:99:3a:35:99:b1:53:be:30:29:6c:ea:
6e:9c:6e:95:3f:41:69:d5:ce:4f:72:dc:1b:10:35:
82:3c:36:f8:52:30:90:d7:49:21:0c:fa:ff:6c:3f:
97:84:3b:1c:f7:e0:6b:1e:ce:c9:c8:7b:33:b1:3a:
6b:b3:38:93:ce:4c:3f:d6:e8:9f:7c:e6:6a:27:81:
ab:d4:57:30:78:3b:b7:64:95:d8:ca:4a:4b:d0:1c:
dc:0d:1f:9a:f0:64:bc:76:54:2f:9c:4e:d8:4b:f0:
a7:57:51:93:8b:19:55:e9:ff:a2:ea:1e:3b:ac:88:
32:4b:7b:50:99:23:aa:98:dd:af:f2:46:62:c2:74:
ec:97:1f:86:7e:23:9f:1a:a2:8f:00:ae:ba:f9:c4:
90:78:ae:0f:2a:89:9b:d5:65:94:e6:d2:35:4e:5e:
13:d7:0d:9c:98:8b:4c:82:da:9c:60:2b:e3:c6:b0:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:A2:C0:DC:71:94:D7:EF:14:D9:47:A2:CF:49:13:BD:AD:EA:36
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:11:39:43:4b:94:00:b6:cd:56:ba:3e:de:43:98:3a:66:2e:
a1:f2:3b:e8:91:ac:79:a1:fe:8c:49:be:7b:66:93:23:16:2f:
6c:98:ef:2a:a0:f8:39:8b:ea:14:92:f3:ac:d8:95:cc:d2:6e:
6e:63:cc:d2:aa:41:9b:57:44:51:01:6b:6e:9a:69:d5:04:ce:
bb:73:87:65:e8:ce:6e:63:01:cd:72:e2:7f:f2:9b:09:82:d9:
59:27:e4:ba:ba:f2:e4:7c:bf:9d:20:5e:e7:91:b3:e9:1a:99:
af:3b:fd:cb:c9:2f:8d:f5:50:e9:26:18:ac:f6:7d:2b:f5:62:
a9:02:12:57:3c:0b:11:4b:33:d8:72:ff:45:11:91:ac:78:24:
16:0e:b7:f6:cb:f1:21:d6:e9:6d:97:9f:07:f1:3f:8b:4c:be:
ee:f6:48:7a:4b:42:cd:f6:e0:df:a3:9b:37:cb:be:5f:d2:87:
0c:93:21:54:08:28:9e:49:79:a1:ba:4f:b9:92:2f:fd:35:f9:
2d:e0:9c:6c:10:5a:7d:3d:5c:3f:7e:e2:4b:6d:29:e6:ba:8f:
06:bd:65:df:96:1e:fe:8f:af:2b:4e:9c:81:9e:5f:e6:5d:50:
bd:b9:b3:5f:2d:e6:bb:64:c0:0e:d5:0d:aa:99:51:46:3a:a3:
18:21:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:03 2026 by rpki-client