Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: jz5Ce9Hc5+5tPDcl6QwJeNpES/EaXiNVn8mZaTqxRD0=
Subject key identifier: D6:1C:CB:2D:53:CE:A5:2A:32:02:BE:06:B1:CE:DA:2F:F7:B8:1D:68
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 019D265EFD0AD64069873CEF157864B03DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:00:52 +0000
Manifest this update: Wed 25 Mar 2026 19:00:52 +0000
Manifest next update: Thu 26 Mar 2026 19:00:52 +0000
Files and hashes: 1: gjzgYMADmxh6Q8pdc-WWoEw7shc.roa (hash: 0P8JuvcWmnVuYZSLeNadkGvm4K+4XLNVcmqTDBqXszk=)
2: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: NBntFy7woCfmLMzsjusPc3IemuQsQpN31pEc2BWgT+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:fd:0a:d6:40:69:87:3c:ef:15:78:64:b0:3d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Mar 25 19:00:52 2026 GMT
Not After : Mar 26 19:00:52 2026 GMT
Subject: CN=d61ccb2d53cea52a3202be06b1ceda2ff7b81d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:66:61:15:dd:21:d3:69:0e:9c:05:2f:f3:
6a:29:cc:ef:ff:4b:b0:c0:30:df:f1:bd:04:54:45:
b1:b0:67:92:5b:fe:7f:c5:90:e8:a6:e9:43:83:06:
c1:42:bb:90:85:c1:b7:02:c0:af:55:01:a0:11:00:
11:c9:fd:e7:52:6a:47:06:84:d2:2d:24:64:71:97:
94:5a:d4:34:22:26:80:1b:ec:46:9d:00:44:9b:69:
cb:4c:03:d5:6e:ee:a9:5a:ab:4a:3f:eb:5b:19:bd:
33:cf:a7:dd:27:2c:f6:b4:c5:ed:cf:58:ab:62:d4:
ab:42:46:36:d8:bc:75:22:7f:82:7a:54:72:c8:39:
7e:e9:ca:87:8c:00:c5:e1:fa:0b:7d:1d:0e:a5:98:
49:c9:a5:5c:64:2f:6c:a6:78:37:c5:ed:c3:cd:d6:
c4:65:ab:ae:12:cd:60:fc:17:82:e5:cb:8a:24:32:
4b:38:6c:b3:53:f7:57:10:b9:80:05:5f:68:3b:07:
dc:aa:aa:8a:d8:f4:72:29:9d:de:18:c5:64:b7:f8:
68:31:e4:7a:d8:4f:0d:52:89:4f:a6:4d:3e:5a:4f:
40:ee:78:4f:e4:27:08:21:48:86:ff:d3:ae:0f:e3:
00:ac:4b:68:6e:57:be:14:cb:cb:fd:65:43:38:5e:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:CB:2D:53:CE:A5:2A:32:02:BE:06:B1:CE:DA:2F:F7:B8:1D:68
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c4:23:ac:82:4b:a8:8c:fd:7e:ad:53:c5:5a:04:fb:98:14:
4b:ac:d6:cc:50:57:fa:30:d6:9b:af:ec:86:f5:26:4d:af:ee:
14:20:4f:c8:3e:79:d7:34:f2:6c:33:84:bf:0d:70:30:05:1b:
21:27:fc:4f:e9:f6:14:8a:36:4b:a7:65:dd:6b:bd:c7:b2:bd:
6f:2b:03:11:2b:04:43:0a:0d:57:74:bd:57:d8:fb:c8:c8:99:
58:9a:21:2b:ad:d3:2b:4f:44:c6:9f:06:de:49:0b:57:85:ed:
9a:8c:eb:58:2f:9d:14:bf:46:ed:bc:fc:38:97:76:22:94:e9:
86:27:e8:8f:02:10:4c:8c:a0:fc:3e:ed:b0:f6:05:a8:08:68:
58:1a:12:42:94:54:56:eb:bb:5f:4e:ef:be:bb:c1:15:1d:45:
2d:b6:11:9a:e1:e7:a9:f3:35:95:3e:7d:86:a2:35:45:be:14:
e4:8f:45:3b:29:44:aa:3e:01:c3:c8:09:0b:ba:0e:60:e0:82:
a2:8e:8a:a4:b2:7d:12:26:ef:25:ba:32:f5:ad:6c:78:8d:ae:
f0:4e:e2:29:86:7f:d7:40:1e:05:0a:5c:df:e7:ca:f2:d5:19:
9e:00:5d:17:04:42:60:ed:2d:63:43:6a:d7:f3:49:35:c8:85:
1a:3c:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:08 2026 by rpki-client