Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: Uv2+evkffXWf2Hp2sFwQvFjpFcdFsK/ZVX6qo+i1jIk=
Subject key identifier: 6F:C4:8D:FF:B2:C2:1F:14:2C:E1:D6:1C:E2:5D:0D:2C:4E:81:6E:71
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019D284E451F138F18A924051C0726BCA21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 04:01:51 +0000
Manifest this update: Thu 26 Mar 2026 04:01:51 +0000
Manifest next update: Fri 27 Mar 2026 04:01:51 +0000
Files and hashes: 1: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (hash: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk=)
2: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: y4jZ3ibuFrCeyIo5738XohGPbS9yhmXXbsSqQrAUYtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:45:1f:13:8f:18:a9:24:05:1c:07:26:bc:a2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Mar 26 04:01:51 2026 GMT
Not After : Mar 27 04:01:51 2026 GMT
Subject: CN=6fc48dffb2c21f142ce1d61ce25d0d2c4e816e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:25:95:10:cc:01:23:ae:33:15:6a:84:b2:
8f:5e:ef:28:9e:e0:5d:02:19:75:f7:41:97:dc:b1:
45:ed:7d:f5:8b:00:47:9f:d5:5e:23:b3:73:8f:8a:
57:ea:8b:4f:b6:46:0f:77:c2:04:80:48:36:e4:fd:
c5:e1:dc:fc:0b:ff:bd:46:e0:72:3c:45:f6:81:98:
cb:46:45:27:97:e6:db:9a:b4:e8:d6:36:d8:7a:c2:
f7:45:a5:10:f4:f0:c7:a7:8a:0e:4f:34:a2:87:d7:
c1:82:31:af:d2:58:98:f2:c9:72:a8:01:c5:65:75:
40:0c:a5:21:53:cc:b8:2d:4c:4e:89:34:a9:e2:18:
9e:0a:ad:4a:6e:40:8a:32:78:fb:10:2e:b6:3c:44:
51:d8:f5:ff:62:f6:fe:3c:8a:49:d5:eb:d2:f3:47:
a4:28:26:68:4c:27:99:af:49:8c:2d:08:0b:16:a5:
cd:90:e3:dc:66:55:ac:8b:c8:74:7c:e1:54:5f:01:
2c:62:28:ed:59:7d:76:a0:17:3d:99:af:5d:f2:8a:
5a:d3:3e:9a:19:98:af:cc:22:66:e9:04:f7:d6:42:
51:0e:74:12:b5:f1:ef:f8:bc:a3:13:5a:74:93:68:
14:c2:06:d8:41:de:ac:4a:a1:ef:6a:71:87:2f:d1:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C4:8D:FF:B2:C2:1F:14:2C:E1:D6:1C:E2:5D:0D:2C:4E:81:6E:71
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:37:d7:52:e7:4d:23:0a:96:de:3d:49:f0:72:95:96:1a:a0:
b8:c4:c3:41:6a:ea:ce:59:16:00:83:0d:6c:a7:fc:ee:cd:df:
93:68:1a:77:6b:44:59:36:f3:a3:9c:86:db:46:4e:4d:25:29:
fd:57:91:7a:5d:5b:ca:92:a7:f2:b5:f1:c4:b9:e1:a6:c1:da:
d6:c4:5d:31:07:2b:6a:06:ff:91:b8:07:6d:ad:d3:89:2d:51:
74:58:b5:85:dc:aa:0d:fc:e3:7e:58:ec:80:5a:10:32:ca:a5:
0a:e9:42:61:04:8a:25:7e:2b:87:9b:f9:6a:c8:51:ef:a9:61:
50:5d:d2:f2:8c:53:8d:94:d3:21:f9:1f:cb:ab:8d:6e:b1:c2:
1c:ec:3d:dd:75:c4:53:fe:cf:5f:31:1d:aa:d8:e8:89:94:be:
92:95:24:82:5b:03:65:86:db:b3:14:9d:6e:56:17:c7:c3:57:
7d:5c:b9:eb:cd:51:b6:be:71:41:d3:2d:0c:5e:e9:db:6f:77:
62:1c:ed:05:81:1b:bd:43:4e:79:b2:ee:ae:c8:84:75:46:00:
97:99:f9:bf:91:6f:e0:72:78:c8:a5:05:ba:d6:ad:12:c0:1c:
23:4e:72:3a:4a:c4:a5:8f:4f:57:6d:2d:90:df:e9:78:6a:b2:
23:79:35:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:24 2026 by rpki-client