Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: cJ7cxrU4q4D+eRiWjUQx2hkTwYGZrfvdj3deu59YASQ=
Subject key identifier: 1A:08:09:FE:23:AA:3B:D4:24:36:C5:54:D3:0C:A9:31:69:07:F6:D6
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 019D2A72B30D81EDD66AFED2EE941A41E265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 14:00:53 +0000
Manifest this update: Thu 26 Mar 2026 14:00:53 +0000
Manifest next update: Fri 27 Mar 2026 14:00:53 +0000
Files and hashes: 1: 2TejQ9qdrUejplvg2pRdV5ySwCU.roa (hash: z2B5UlkMWFYxdzwShhvSwDpIukaDaNgAut2hvjv+b1A=)
2: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: /9oJt52Ii5lVXBM7N8s51u5reJXrnXN7sHDphD7j8EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b3:0d:81:ed:d6:6a:fe:d2:ee:94:1a:41:e2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Mar 26 14:00:53 2026 GMT
Not After : Mar 27 14:00:53 2026 GMT
Subject: CN=1a0809fe23aa3bd42436c554d30ca9316907f6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:68:a7:95:72:c1:6f:98:dc:c8:e1:5b:50:68:
a9:a0:f1:0e:05:ad:8f:c8:52:7c:ea:85:a5:f4:dd:
71:9b:20:61:ca:72:8a:62:fa:17:56:5f:31:46:1e:
db:43:51:5b:cd:7d:17:88:6d:18:fd:5b:53:2a:1f:
8a:8d:4a:cd:a7:7e:0e:b7:75:5f:f1:2a:5e:94:c2:
e7:eb:37:0c:c6:24:8f:07:fa:18:42:0d:79:52:ca:
28:44:46:f4:db:fa:87:36:be:56:79:06:94:2d:28:
8c:4b:df:d6:83:3f:42:59:23:a4:e4:5e:f6:8e:fc:
b3:f7:dd:e5:a8:8b:b4:90:d2:96:dc:11:e0:5c:80:
a5:03:d0:36:9e:a0:41:88:08:a6:52:69:be:7a:75:
25:62:3b:86:c6:eb:57:be:72:40:d0:27:e3:0b:05:
08:45:c2:64:f0:f6:76:cf:a9:7a:cd:d5:9b:20:0e:
a6:8f:cf:08:b7:b3:53:d5:01:b4:2e:79:51:ef:cc:
1b:52:5d:9a:51:5f:e8:11:44:bb:be:ff:87:2c:c2:
11:df:5f:e1:81:b4:ab:1b:de:e0:c3:d1:26:e2:e6:
ae:d7:b9:74:9d:c2:e5:4e:1e:9c:5d:9d:67:dc:e4:
e7:48:ae:89:7d:da:06:eb:d5:51:1d:9a:04:be:f8:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:09:FE:23:AA:3B:D4:24:36:C5:54:D3:0C:A9:31:69:07:F6:D6
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b4:f7:6e:07:fd:0e:9f:bb:8a:06:c9:3a:8b:35:f3:d1:1b:
26:33:6a:ed:d4:a6:2e:b6:8d:d8:f8:c9:cc:9f:7c:a7:b0:ef:
21:f2:d8:35:6f:f4:47:aa:e2:96:ed:f6:54:4d:bf:5a:cc:4f:
b2:6c:80:96:94:f9:e8:28:36:96:2b:e1:69:ad:6d:ee:d0:05:
7c:a7:17:07:98:47:3b:ed:b5:4a:46:5e:c7:5c:31:82:76:c8:
dd:7e:37:9c:c1:6b:f3:64:1e:74:93:b8:52:1b:09:2d:a8:40:
20:17:7d:ed:b0:60:ee:7c:eb:22:45:13:ec:25:bf:b9:96:b6:
ee:dd:ba:82:8f:21:83:bd:2c:4d:5a:0b:9e:b6:c2:05:72:da:
45:e2:6b:72:89:0d:a7:41:08:32:04:16:95:21:f4:68:a8:d9:
60:cc:41:d5:e7:4a:ca:8b:e6:95:e6:7e:f5:99:e2:ab:c1:0a:
f5:1e:da:60:02:76:7d:74:b1:3f:c3:45:9e:86:72:16:65:d8:
42:3a:5e:fa:fa:36:d3:54:cf:60:cd:6e:a2:80:10:7f:4b:aa:
83:6c:ff:b4:09:d8:67:4c:92:ea:1c:75:22:b9:15:95:71:a5:
c1:dd:da:17:0b:26:27:41:0f:c5:fd:39:9e:34:2a:c3:a1:d6:
c3:c2:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:34 2026 by rpki-client