Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: r9WjlOC2xQdnwLJkDZ0YXYhUFv0tHVvFOq+XR/bKG8w=
Subject key identifier: 5C:53:7E:C8:06:B3:FD:EC:79:2C:FA:D8:6E:FB:FB:D9:95:F3:3C:9D
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019D29614701A155C4540C14E4A2040BD3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 0FD9
Signing time: Thu 26 Mar 2026 09:02:14 +0000
Manifest this update: Thu 26 Mar 2026 09:02:14 +0000
Manifest next update: Fri 27 Mar 2026 09:02:14 +0000
Files and hashes: 1: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
2: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: MJg3kSg78atb+IDGGqKNKSnTq4POO51hHxc5tYEurs0=)
4: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
5: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
6: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
7: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:47:01:a1:55:c4:54:0c:14:e4:a2:04:0b:d3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Mar 26 09:02:14 2026 GMT
Not After : Mar 27 09:02:14 2026 GMT
Subject: CN=5c537ec806b3fdec792cfad86efbfbd995f33c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:cf:36:9a:44:b2:25:ed:97:f9:3a:09:20:
de:2d:3c:c5:3f:54:32:89:3c:63:dd:9b:16:fa:a8:
22:6e:41:fb:d8:86:9d:a7:26:9b:a2:18:1f:ef:bc:
a5:a4:2e:f3:c7:fe:3a:a4:03:6b:47:b8:ad:c5:dc:
86:5b:1e:01:26:2c:51:a4:bb:ab:92:cd:9b:cd:8b:
24:48:8f:a4:ea:f5:be:bb:16:40:be:64:00:32:2f:
c1:0b:93:3d:08:91:91:a5:f3:f4:96:22:f1:20:8b:
de:d7:1a:4a:04:cf:f2:33:2f:3f:f3:2f:52:b8:e5:
db:50:f6:2f:48:1d:54:1c:66:b1:de:62:73:d4:6a:
4a:76:e6:96:92:4c:7c:b2:bf:bb:a1:d7:f5:50:69:
db:fa:39:97:e4:45:fc:d3:95:d8:cb:27:ab:e9:1b:
a1:2f:df:fd:f8:be:ef:93:28:e6:b9:3d:1f:60:02:
93:d2:81:dc:1e:2a:f1:75:08:cb:41:24:31:56:ef:
13:46:16:ed:e3:eb:97:e4:32:a6:b2:67:3f:d1:95:
8d:3d:f5:bd:0c:8d:6d:ed:c7:ad:d4:b9:83:cf:05:
6e:2d:64:3d:8d:55:71:21:96:33:ef:de:80:c7:39:
d7:8b:50:6b:56:57:3c:ad:ee:51:14:4a:12:2b:66:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:7E:C8:06:B3:FD:EC:79:2C:FA:D8:6E:FB:FB:D9:95:F3:3C:9D
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dd:f8:18:b2:30:6b:ed:91:d4:e6:47:cb:bb:d7:a8:b9:f8:
46:bc:78:61:f0:9f:13:d4:39:41:f5:dc:90:5d:2a:fb:e5:48:
33:a3:71:33:54:a4:ae:e3:94:29:c4:52:b9:90:70:55:db:91:
6a:3b:aa:01:45:07:72:9d:66:dd:56:78:ee:8f:ed:6f:c7:bd:
93:1d:45:2a:e0:4e:f5:65:67:62:77:72:05:30:b3:76:6b:cb:
0b:1f:b6:fb:fe:28:8e:da:ee:f7:59:ef:7a:31:f8:dd:ec:8a:
9b:fd:de:fe:ef:d2:fa:0d:31:b4:b2:da:ae:9f:6b:37:bb:5d:
a5:14:e0:73:2b:ff:d9:83:7c:30:27:65:f9:b3:c4:67:47:1f:
d3:53:d9:15:89:8c:61:6d:32:dd:a1:b0:40:75:b0:f3:06:22:
ec:92:a4:cb:3f:c5:d8:58:49:8b:8f:11:b2:aa:d2:78:85:80:
c6:e3:bc:b2:4d:f8:e1:6d:ff:03:38:24:a8:27:45:c5:0a:23:
03:b4:0c:c5:1a:af:5c:7a:80:b5:f9:4b:fc:73:d3:4d:ec:2f:
b1:89:d5:f5:f4:38:50:97:67:ba:8f:d4:a5:a0:47:d3:b3:a5:
ab:bc:6c:6f:93:83:df:2f:ee:c8:d9:b3:8f:a7:38:78:0f:58:
e2:87:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:47 2026 by rpki-client