Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: P/NTIFKphUKMwRFR0n1aY3J77O/qx6s8pG1kE+jVLlA=
Subject key identifier: BE:9F:A3:4C:CE:66:7E:0D:FA:AB:40:9B:D2:4C:D4:42:F2:6B:A2:B5
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 019D28BB3C8EE5B989E075D42082453A856F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 067D
Signing time: Thu 26 Mar 2026 06:00:52 +0000
Manifest this update: Thu 26 Mar 2026 06:00:52 +0000
Manifest next update: Fri 27 Mar 2026 06:00:52 +0000
Files and hashes: 1: QdViC720LUGk8rbETFc7icn6Tx4.roa (hash: wxpHqs3D6Qy6qVLUeFjXp0nQiZFcnT7PBeNSBBjzhuM=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: k/8+qmNLA1lP8sUFgkeXxwjNj7hGyS1tDI7gIC/v9s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3c:8e:e5:b9:89:e0:75:d4:20:82:45:3a:85:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Mar 26 06:00:52 2026 GMT
Not After : Mar 27 06:00:52 2026 GMT
Subject: CN=be9fa34cce667e0dfaab409bd24cd442f26ba2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:2e:1d:d1:b6:30:3e:2a:9f:45:1e:89:11:
c9:fb:a2:45:48:69:9b:6b:de:44:0b:31:aa:0b:ca:
b7:d3:5d:0f:4f:6f:df:3d:34:da:42:ac:7d:cc:24:
ad:4a:e6:a4:5c:08:a2:5d:a0:52:90:4d:d2:22:2b:
3b:06:74:ab:ca:02:36:da:88:04:96:e7:8c:82:6d:
4b:49:60:f3:b1:b3:65:ed:2b:bd:c4:a9:69:76:c6:
c4:b4:dd:2e:e9:ad:4e:e8:19:9a:76:0c:48:99:e3:
dc:9c:23:94:76:80:94:0b:f4:ac:52:d2:a5:8c:91:
9e:76:c6:87:c1:4c:05:f2:a6:3e:1e:e5:b6:0e:f1:
dc:64:aa:d9:ad:d0:53:b0:54:a8:8c:f6:3b:a3:7e:
36:64:8c:af:0b:a3:dd:c1:5b:21:38:6f:00:6b:82:
c1:26:fe:3a:40:22:d4:10:3a:01:50:e5:24:50:22:
21:be:cb:42:38:70:94:12:bf:73:55:c1:5c:57:04:
39:f5:e6:56:1f:de:55:22:aa:42:be:65:c3:22:3d:
c1:fb:a5:88:86:e0:f5:3e:df:f0:18:40:62:e4:68:
7a:17:a6:83:22:6d:42:80:9b:85:76:b4:16:53:f8:
d8:2a:8f:74:c5:18:d2:9d:22:6a:e3:f9:76:c7:e0:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9F:A3:4C:CE:66:7E:0D:FA:AB:40:9B:D2:4C:D4:42:F2:6B:A2:B5
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:00:d2:6e:20:50:c7:99:b8:5e:c5:9a:4d:61:ab:12:7a:0e:
e1:4d:9e:76:7f:ae:cc:b2:ac:8e:3b:5d:69:9c:dd:da:d0:d7:
19:b6:70:7a:fb:d8:5c:d3:0d:92:7b:30:4a:4b:b4:1a:04:5a:
d5:d3:f1:ae:23:53:58:36:3b:77:92:58:e0:d3:5f:30:16:3f:
28:ed:55:3e:d6:75:2b:4c:7f:3a:b5:86:de:09:73:4d:bf:5f:
d2:47:3c:60:eb:f2:b9:f4:ef:1b:6f:b6:ea:39:5b:f5:ea:ab:
d6:11:8b:80:64:d5:ce:f9:58:03:31:5e:b1:1b:79:e4:d2:b3:
4e:d4:ae:b1:db:1a:ad:c1:22:01:eb:27:2c:3d:a8:b7:a8:c3:
f6:aa:e7:84:cf:e9:b4:8a:34:56:86:bc:62:90:58:ae:d1:20:
f1:59:4e:37:70:8a:1e:16:64:2b:b7:42:ee:b6:fc:ef:13:b3:
8c:c0:f6:c6:d6:89:d5:22:eb:d3:f8:e4:d9:ae:97:a5:78:a1:
73:e0:c4:8d:31:ee:57:a6:38:92:9e:27:c1:6e:9f:3f:fa:2f:
93:b7:1c:98:dc:ad:cd:1a:7d:78:17:bd:5e:d0:e9:9c:7e:97:
9b:f8:53:45:b7:01:44:89:d8:48:9b:5c:e2:78:a4:9f:a0:51:
59:c8:63:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:54 2026 by rpki-client