Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: IQVIGCAU2D+os4SZrWgbpvrcYC4D+Ia9OoXjpLk+t/E=
Subject key identifier: 38:74:61:27:05:C1:B1:D6:32:DC:A2:2F:DE:92:38:9A:75:7E:2F:D1
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019D2771F89BF04A06C4EFD1AF98F96EDC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 0FD8
Signing time: Thu 26 Mar 2026 00:01:13 +0000
Manifest this update: Thu 26 Mar 2026 00:01:13 +0000
Manifest next update: Fri 27 Mar 2026 00:01:13 +0000
Files and hashes: 1: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
2: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: vdLQEFN1Mu6iXZloOh/4Oh/l/8UkTZPVN79M0UBVcJ8=)
4: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
5: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
6: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
7: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f8:9b:f0:4a:06:c4:ef:d1:af:98:f9:6e:dc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Mar 26 00:01:13 2026 GMT
Not After : Mar 27 00:01:13 2026 GMT
Subject: CN=3874612705c1b1d632dca22fde92389a757e2fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:06:cb:af:2d:d7:34:18:bf:eb:2d:83:22:
2e:2d:28:c5:96:d0:52:88:94:2a:a6:d8:ff:6a:1b:
00:ef:4a:9b:0b:4b:8e:01:55:3f:ea:44:19:17:63:
71:48:7f:93:bd:27:02:c9:27:67:17:f5:24:5d:4a:
07:ef:fa:df:3d:5a:82:0b:8c:95:eb:bc:1f:80:94:
55:ef:d6:52:04:d8:ca:2f:f0:9d:42:d9:a7:6f:85:
f1:75:1b:15:b2:ab:cb:3e:f4:4f:a7:04:41:9d:25:
f4:fc:b1:2f:6a:9a:c9:a8:5c:d9:1f:17:cb:9c:5d:
4f:8a:a3:5d:f8:43:b7:d5:b9:66:4a:14:7b:7d:9a:
08:6d:1b:f0:c9:12:af:71:ad:2d:3b:bc:85:6c:58:
d1:10:9b:7a:e7:f0:77:f4:c0:a2:44:ee:30:03:ee:
97:ab:76:e4:09:1a:ee:43:de:c1:c8:a0:63:e0:0a:
e2:72:ea:65:ee:dc:51:c2:52:14:c0:43:62:9a:47:
77:8a:89:d5:9e:b6:58:aa:ef:4c:2a:1b:e0:5d:ed:
9d:ae:aa:ad:58:22:18:ca:21:d3:b9:3f:cf:ab:88:
d1:30:9a:5d:e0:00:9b:d5:c1:cc:eb:c1:90:7f:dc:
32:ef:3d:b1:a2:f1:4e:c6:19:94:1d:51:24:67:3d:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:74:61:27:05:C1:B1:D6:32:DC:A2:2F:DE:92:38:9A:75:7E:2F:D1
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1e:ff:9e:6c:75:ea:c5:69:ec:54:2f:52:07:5d:af:ab:af:
01:8f:09:16:4e:e7:45:bd:58:83:ff:eb:65:1d:0d:c3:ea:de:
c8:af:56:66:2c:e9:e9:f6:9d:7d:e9:20:9c:1c:21:bb:75:60:
6b:b6:38:1a:be:cd:42:35:b0:9d:66:2a:3b:bf:b5:63:7a:d7:
50:73:7e:bc:70:f2:e8:c0:16:98:b7:6d:1a:7f:a7:1b:27:d0:
c1:7f:21:79:be:b5:f0:a1:08:34:91:e8:f6:3d:8e:4e:3d:3b:
dd:27:16:24:9c:6b:f7:2e:b6:07:de:2d:7d:2d:52:d1:2c:43:
66:0c:23:8e:83:af:f4:cc:6e:52:30:04:e0:c6:3d:bf:f8:76:
4a:1b:e5:ed:fa:7b:fe:37:4a:0e:6a:ca:1a:28:d2:f6:6e:d0:
7b:9b:86:5f:9c:e8:bb:be:50:d4:ef:1e:13:27:61:24:45:56:
fa:fa:0c:17:ac:f9:36:58:68:7b:72:01:d3:7e:7f:f7:20:f1:
51:4c:51:ec:18:2d:0e:18:4f:cf:98:8e:94:15:bf:c9:b8:82:
32:ea:28:a7:14:47:77:cb:65:fa:59:7c:30:a8:b1:53:f8:5e:
49:d3:99:91:2e:b8:0e:a3:eb:c2:d3:c8:c8:d0:c5:80:d9:8c:
28:cc:af:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:59 2026 by rpki-client