Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: JqIMWLmo+0iJSnrTo+/rQGvyrMQG2/hhU7rTzQSUCgg=
Subject key identifier: A3:4A:B3:82:F9:96:DB:FA:F7:9E:9A:D1:A6:5E:1B:42:2C:26:4A:71
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 019D2B179203C6BFD8E399AFD5CEECEBA837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0CFE
Signing time: Thu 26 Mar 2026 17:00:58 +0000
Manifest this update: Thu 26 Mar 2026 17:00:58 +0000
Manifest next update: Fri 27 Mar 2026 17:00:58 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: FO906vO+r3drrR9KswdcvUZ4sG+77s0ayRn5eqkialU=)
2: mdTsNfdOLmAj5Ib0bSI7RIV96g0.roa (hash: xAGPZrEW2fEUSd+UrPEI5hWaivVab8Rku87e+bOIo2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:92:03:c6:bf:d8:e3:99:af:d5:ce:ec:eb:a8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Mar 26 17:00:58 2026 GMT
Not After : Mar 27 17:00:58 2026 GMT
Subject: CN=a34ab382f996dbfaf79e9ad1a65e1b422c264a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:e0:af:8e:88:98:4a:8f:fa:ba:cc:10:ec:
c2:aa:b3:d4:5f:83:fc:11:a0:af:1e:7c:a9:cc:6a:
b9:9d:45:7f:28:1d:92:b9:e8:b3:b1:18:66:25:64:
14:39:ac:f7:3a:72:af:f7:b1:88:d2:3c:72:92:67:
49:bf:f8:21:7c:ee:ea:ea:c2:f6:7d:d6:8a:a0:db:
29:42:b3:59:a9:2e:6b:fc:52:0a:bb:96:cc:34:1f:
f5:f0:0e:5a:92:9b:de:90:02:ce:cf:44:94:b8:4d:
4f:ca:ee:61:00:b6:b2:c1:83:c3:e3:a8:14:d9:ce:
79:6f:60:34:5f:07:3f:61:25:67:25:97:4e:a6:09:
75:b3:84:f3:45:4b:ac:8f:17:e0:5d:4e:ae:23:ef:
03:8e:11:60:db:25:e8:b3:0d:37:3e:6b:24:ad:5b:
99:4d:38:d9:d4:d4:a4:be:9e:4f:b8:8d:9c:99:72:
4b:96:bf:d2:b8:61:4d:84:a2:d5:0f:d1:b8:a4:cb:
14:c4:1d:a3:25:02:77:1e:7e:df:6a:b5:42:a7:41:
38:43:26:1e:e8:85:de:07:ea:3a:36:ff:24:f2:a5:
b6:0a:29:80:2c:34:59:e9:76:56:91:1a:8a:4b:7e:
b6:c9:a4:cf:9b:3f:83:25:1f:6a:26:4a:83:5a:1d:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:B3:82:F9:96:DB:FA:F7:9E:9A:D1:A6:5E:1B:42:2C:26:4A:71
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:43:ce:9b:26:72:8a:db:28:8a:95:e2:eb:37:17:e6:3a:
d7:73:9b:0d:41:f9:92:0d:48:99:bc:82:67:bf:91:2f:e6:ee:
2a:93:9e:90:d1:24:d0:86:ca:93:4a:e8:92:1f:ca:af:cb:04:
1c:8e:e7:d9:f1:19:b5:fa:f5:2d:48:7d:36:8e:09:17:86:35:
9f:0b:a6:06:e8:63:51:2f:90:24:8c:ce:14:f3:ac:e9:69:e2:
e1:38:67:a9:f5:dc:e3:2b:e0:d5:a0:9b:9e:37:b4:19:70:74:
a2:6b:d5:b6:e0:52:2b:81:3e:69:ce:06:d0:9a:72:68:44:97:
6b:e1:58:0b:79:23:f0:61:0c:cb:59:f5:27:8d:d8:5b:ea:77:
08:af:63:62:5b:1b:32:e6:50:81:17:65:87:e0:07:95:f9:87:
d9:e8:83:0a:d9:ff:c3:f7:c8:d3:22:7f:bd:7d:55:d6:52:a1:
b6:5c:36:53:dd:d3:7f:8e:6a:37:cf:53:d1:74:fc:10:70:8b:
8a:b5:8d:55:d9:57:fb:d1:a5:96:9b:21:97:6f:06:c6:1f:5d:
18:a3:26:1b:de:30:6d:95:99:e3:12:d8:db:77:ce:dd:1a:b9:
ca:a0:b4:bb:cf:4b:18:2b:25:28:47:df:04:c8:aa:f6:b7:ad:
43:70:74:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:56:20 2026 by rpki-client