Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: PHbx/s3+hVv6oZ7tN0RuzzAhb8sBx/Nt+zjJI8FBBTg=
Subject key identifier: 02:FD:41:2F:4D:A2:33:46:8E:1A:F7:BF:7A:EA:0D:03:15:C9:81:A1
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 019D25F2086984AA1C6FBD6A806AEC68BCD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:51 +0000
Manifest this update: Wed 25 Mar 2026 17:01:51 +0000
Manifest next update: Thu 26 Mar 2026 17:01:51 +0000
Files and hashes: 1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: G7qZMGgz3lqTh8CHCqipX+yY+ydijkTPfx4JPiGAkqg=)
2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:08:69:84:aa:1c:6f:bd:6a:80:6a:ec:68:bc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Mar 25 17:01:51 2026 GMT
Not After : Mar 26 17:01:51 2026 GMT
Subject: CN=02fd412f4da233468e1af7bf7aea0d0315c981a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:ab:40:07:90:d0:0d:40:9d:0e:13:7c:cb:
ce:09:49:ae:0b:3a:70:cd:a7:01:f6:41:0e:46:19:
c7:08:43:bd:e3:cf:e7:ae:fc:89:31:76:69:13:21:
99:bd:b5:3e:19:e1:a8:2b:df:9b:0f:3f:3b:3b:ef:
e0:80:4b:a6:87:49:81:1f:b0:42:5a:5c:99:81:5d:
c6:21:ed:b6:7b:d7:45:c1:16:d0:10:b4:26:c1:d4:
01:fd:a7:b3:63:b2:b0:a2:31:32:1a:10:41:fc:91:
32:a8:fd:ac:cc:b9:36:95:bd:67:96:8b:56:4b:b4:
37:09:d5:c8:bf:28:56:95:e5:a0:4a:58:41:b2:ec:
1d:cd:90:50:a7:4b:4d:50:6a:20:05:e7:8c:a3:c5:
ae:27:9c:d5:63:d1:11:58:3a:2d:78:70:9e:bf:53:
4f:a9:7e:80:85:d0:5b:5f:bc:de:ef:2f:99:ed:da:
b4:81:39:9e:f9:ed:64:24:bb:4f:82:67:e0:95:a1:
62:6d:02:c4:20:d1:ff:d0:50:da:5f:e4:94:bf:a5:
7c:e8:cd:34:8a:e3:01:c4:c8:c5:4c:28:5d:52:ce:
a3:69:8b:19:97:07:4f:92:24:93:ed:a8:cc:99:71:
29:cd:ce:63:03:d9:15:a8:e3:f1:8e:c1:32:6b:99:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:41:2F:4D:A2:33:46:8E:1A:F7:BF:7A:EA:0D:03:15:C9:81:A1
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:86:d1:d0:c9:e2:8b:00:e9:b7:ce:2d:b6:08:b7:70:aa:
5b:bc:7a:6d:b0:1c:04:70:9b:84:3f:bc:42:b3:0a:6c:e2:3d:
4f:7a:4b:0a:12:40:59:b7:94:01:bc:68:f7:b4:d5:aa:0e:ad:
03:11:a1:56:49:6c:6f:56:bc:d8:b1:d3:f4:e9:8e:a6:a3:c2:
49:66:db:93:29:24:db:b5:14:ba:0f:e8:9a:6e:85:8e:ae:15:
ea:83:b8:d5:65:e0:24:69:fb:05:fd:74:38:40:d7:0b:38:28:
55:bb:f9:8a:96:b9:f2:cc:16:da:d0:22:b3:66:59:b7:49:ac:
00:60:5d:b4:5a:63:8a:d4:73:20:9f:49:06:ab:97:83:b2:33:
8f:3f:a3:00:7d:3b:c9:d0:df:46:a6:43:44:ea:f3:0f:78:40:
13:87:46:21:82:9b:17:00:eb:b1:85:95:2a:3d:93:d6:4f:42:
39:16:19:3a:09:68:50:61:c5:79:72:a3:09:ed:85:70:ca:e1:
30:a9:e3:45:97:fd:09:e2:90:7e:68:55:e7:53:bb:f8:04:06:
46:5b:ce:93:47:72:bc:2e:c8:9b:96:ed:f0:dd:fe:ac:50:59:
6d:9a:26:bd:4d:d2:85:a7:ea:17:83:77:37:27:3b:15:a4:71:
9c:03:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:38 2026 by rpki-client