Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: ZNcjO1bUh+97a8o3ocNi0/hSA8YR0DmLUkS1NV5awWg=
Subject key identifier: 7E:81:BD:35:34:F5:DE:EB:66:08:A9:03:B8:A9:68:EE:9A:F4:32:95
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 019D265EC9A315B31F8AFE593FEE6F12CEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 0494
Signing time: Wed 25 Mar 2026 19:00:39 +0000
Manifest this update: Wed 25 Mar 2026 19:00:39 +0000
Manifest next update: Thu 26 Mar 2026 19:00:39 +0000
Files and hashes: 1: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: Y7Q21yTuzqLMTxUJxJS3gCraPeQLSftYtvwcsZ2LTuY=)
2: x3cjJVpLnZG-uty2qSffRSOuoQE.roa (hash: Tj4Pb94uCkpkUlh6u2jzVddtm53J1LKyupR5P1TGR+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:c9:a3:15:b3:1f:8a:fe:59:3f:ee:6f:12:ce:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Mar 25 19:00:39 2026 GMT
Not After : Mar 26 19:00:39 2026 GMT
Subject: CN=7e81bd3534f5deeb6608a903b8a968ee9af43295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:95:e2:bf:07:43:5b:4f:f2:fc:1d:e7:9a:
f0:70:6f:2c:ef:cf:aa:af:b5:3d:5b:ba:92:25:76:
a3:2d:a9:34:95:d0:37:15:28:1b:60:dd:d2:6c:ad:
5b:b6:54:52:bd:e6:ed:77:9b:1f:8f:a3:ea:5d:20:
f7:b6:d6:40:bf:3f:b7:d6:76:2a:b9:fa:e5:b5:43:
6b:fc:45:91:03:df:02:78:04:61:12:86:41:c1:80:
42:4d:52:99:1e:a2:2d:56:2a:17:99:44:91:8d:97:
97:5b:10:6f:25:b4:4e:f0:82:48:ae:52:a8:a8:27:
ae:7f:ac:a9:a9:0f:4b:40:4a:35:ba:5b:22:ee:03:
5e:60:54:71:05:fd:2b:dc:08:c5:f4:8c:57:9d:6a:
7f:16:24:8d:71:73:ed:32:1d:a8:24:92:6b:82:b4:
ab:58:5c:f6:ed:69:b2:b4:3f:ee:ef:6c:3f:a0:62:
53:79:ab:0f:f7:d0:7b:ba:b8:8b:97:0a:76:8d:43:
0e:9f:04:2d:4a:15:44:13:d7:f0:43:ef:68:85:d2:
9f:9c:9d:cc:36:d6:0e:ad:ca:8a:2f:56:9f:23:40:
20:be:4e:bf:b6:e4:e3:58:73:45:bc:3e:c9:e3:b5:
3d:cd:46:cc:ce:db:f1:5c:c2:e0:2f:4f:bf:3c:5a:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:81:BD:35:34:F5:DE:EB:66:08:A9:03:B8:A9:68:EE:9A:F4:32:95
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6c:de:8c:8d:16:2d:25:2e:f3:f8:08:7f:73:24:18:c6:ff:
6f:f5:37:9d:28:02:24:58:f6:ca:1e:e6:61:19:4b:9e:77:10:
3c:f6:e5:6e:c3:fe:49:71:96:e2:f2:79:4c:8f:b7:a2:6c:3e:
ef:40:13:dd:d1:12:cb:97:8e:d6:d4:4c:a1:10:94:94:93:c0:
10:03:ce:7f:4a:00:8d:d7:ca:00:2a:67:e9:0f:ce:fb:08:a2:
82:c9:0d:65:8f:cf:89:81:95:d8:d0:c4:87:6e:d8:94:16:26:
52:bc:21:8e:45:3b:a4:8d:73:8b:43:79:60:b5:df:92:46:93:
50:9b:b7:41:30:12:85:1f:c2:5d:3b:46:6b:be:39:72:03:33:
00:37:cf:d1:e9:9a:30:e7:5a:73:56:b8:b1:be:e3:92:a3:a4:
6b:e5:4c:7c:f6:98:4a:01:da:35:9c:af:04:46:5d:a4:5c:89:
b8:e4:5e:17:3d:25:e1:70:3e:4b:1d:5c:f9:fd:4d:bf:65:01:
06:c7:ab:5d:6f:b8:96:6e:5a:9b:cd:2e:ba:f6:81:54:cb:b4:
27:91:f6:12:9c:c4:17:58:cc:22:f6:d8:75:05:3e:6d:47:d8:
20:24:83:8d:42:37:3c:03:4f:c4:0b:45:20:ef:1f:89:03:05:
c9:92:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:36 2026 by rpki-client