Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: R4aGt/ZTdHFzVgDmzhqx4mqpJIGu0jq2GA36yZcmBgQ=
Subject key identifier: C3:25:12:38:80:CF:4B:E7:6C:E3:59:A7:91:9A:1A:A9:9B:83:06:F6
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019D27A875DB2617F775B16BF9E922B926D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 106D
Signing time: Thu 26 Mar 2026 01:00:44 +0000
Manifest this update: Thu 26 Mar 2026 01:00:44 +0000
Manifest next update: Fri 27 Mar 2026 01:00:44 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: 43FsyhhoOvAlrTtOavHrUmk3qveXq37ILEFIUt1/NmQ=)
3: RoT_BRy5K5T_EFywyXjf2sUOgfA.roa (hash: 3g9pqCZcoGTGtwQJjCoF4vdhAm5IX+/HPg+Sn5/5ZvI=)
4: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:75:db:26:17:f7:75:b1:6b:f9:e9:22:b9:26:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Mar 26 01:00:44 2026 GMT
Not After : Mar 27 01:00:44 2026 GMT
Subject: CN=c325123880cf4be76ce359a7919a1aa99b8306f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:fe:44:ed:c5:60:00:ec:01:c2:b6:0f:f6:
44:42:66:1d:99:ff:9f:81:c8:e1:99:9e:b2:31:66:
ed:6a:56:ce:2b:b9:9e:ad:89:a0:f6:8e:f6:80:85:
e1:e6:d0:ff:00:be:13:08:c6:99:24:99:4c:1e:7a:
13:8c:2f:7d:00:97:11:a0:bc:54:48:53:53:29:c6:
b2:51:07:7c:c3:1f:50:8d:96:7f:a9:cd:99:9c:6b:
e0:83:f3:51:16:d2:38:c2:e8:27:21:52:df:73:0b:
73:c8:4e:b9:d8:64:94:25:5a:ce:26:b1:a6:76:a1:
82:44:88:8c:40:93:43:13:24:d2:0f:3e:bc:66:f8:
76:df:42:08:e2:62:d1:2e:e9:62:47:fa:a2:70:60:
46:da:85:cd:5a:ec:b6:56:b8:5b:15:92:54:b8:b5:
5c:f9:b6:59:11:f0:f7:a5:77:3f:82:f5:08:62:eb:
50:61:6a:33:b4:12:f0:30:a0:68:7c:c8:75:99:c6:
91:74:66:76:ba:4c:f4:99:91:da:d7:af:b1:d0:3a:
8f:bc:7e:df:dc:3a:15:77:b3:af:1e:85:fa:23:0b:
f3:3a:fa:1f:6b:7e:3c:a5:af:d4:48:8c:ce:dd:55:
1d:14:43:e7:1b:12:d9:81:79:8c:cc:f3:54:62:84:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:12:38:80:CF:4B:E7:6C:E3:59:A7:91:9A:1A:A9:9B:83:06:F6
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:03:de:fb:9f:f8:d0:64:a4:09:bd:52:d0:18:ee:2e:3f:59:
e0:b2:18:9b:9d:2c:c4:82:21:33:e6:f4:ce:2c:25:a5:b6:ce:
47:f4:76:a5:ca:53:68:f3:28:62:1c:5d:d6:45:ac:e0:0a:67:
6e:cb:66:2e:5b:ee:55:91:51:d6:17:ac:46:4f:17:7c:25:c3:
37:0d:06:64:47:0f:d1:66:63:c6:e6:f5:cb:d6:94:8c:a4:d5:
58:1e:36:ac:f0:c8:52:6a:41:40:b5:d7:80:3f:0c:d9:3d:f4:
af:29:d8:55:f2:41:bc:0f:41:df:5d:4d:5e:7b:43:4c:b8:de:
6d:30:5e:c5:a6:52:16:e6:46:ab:d5:41:dd:8c:9d:bb:4c:f6:
2f:fe:86:86:b5:c0:eb:a4:1b:af:70:4f:a0:93:35:e1:81:15:
e4:77:46:eb:de:db:29:09:c5:15:bd:23:dc:a1:e1:1c:e4:c9:
27:4b:fb:c1:63:11:7f:20:bd:ce:d8:f9:e4:21:9c:6c:f2:72:
f2:ca:2f:4b:79:7b:d1:75:df:98:d0:f2:54:d9:b5:92:da:c1:
3d:de:14:df:a0:e3:83:96:4e:f4:b5:f6:d8:74:2a:c6:73:59:
d1:95:01:35:38:78:f1:81:66:4f:73:69:52:52:4c:6b:df:47:
00:e7:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:59 2026 by rpki-client