Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: jn5fiTZ1O40s8qsNliQjI/qz2q+KnjMp1Jl82YJc85g=
Subject key identifier: 14:95:85:26:DD:0F:63:24:B7:B7:EB:0B:F1:64:D9:4A:E7:F7:29:20
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 019D2884CC30CEFFC74AA9FD5464C6671D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 11F3
Signing time: Thu 26 Mar 2026 05:01:24 +0000
Manifest this update: Thu 26 Mar 2026 05:01:24 +0000
Manifest next update: Fri 27 Mar 2026 05:01:24 +0000
Files and hashes: 1: 1-_xreJrOs3w9ZGU1IhIWpYpavKY.roa (hash: cDUbfiWVCS31IunzF5QHEKWOVDVj3fc59oC6ui5b0TI=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: IBDh/xb5aZsSJq1iVOqMKoZLJNjKuluFh+QNK1zDrg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cc:30:ce:ff:c7:4a:a9:fd:54:64:c6:67:1d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Mar 26 05:01:24 2026 GMT
Not After : Mar 27 05:01:24 2026 GMT
Subject: CN=14958526dd0f6324b7b7eb0bf164d94ae7f72920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:0f:02:94:87:9a:18:f5:5d:bd:4f:95:b4:
af:54:ce:d6:3b:a7:3c:22:55:60:76:a2:6b:7e:a4:
1c:f1:39:bf:32:03:26:0a:cd:8b:a0:6b:a8:f6:f0:
e8:3c:3c:ae:e9:bd:6f:b3:0c:ee:2a:ef:21:93:51:
b7:b9:f4:ca:70:bf:25:9e:b5:9f:2c:96:d0:a5:b6:
c9:d1:df:4c:df:6b:20:4a:d0:72:71:91:09:1e:32:
e4:c7:45:82:62:c6:28:e8:c3:9d:4a:ed:1a:23:10:
25:1b:d7:c0:e9:19:c7:9e:f6:e3:81:55:4a:75:d2:
41:9d:49:92:b0:a4:4c:3a:48:80:2c:96:95:c9:59:
e0:93:bf:dd:7d:86:d6:97:cc:09:e4:5b:4b:30:1b:
a5:25:0c:b3:bd:5c:5c:54:46:ad:18:5e:37:c1:9f:
69:d1:73:d9:15:30:e7:dc:58:c6:cf:b7:eb:e6:e0:
2d:97:27:27:2c:db:a6:ee:24:92:60:73:ad:06:eb:
71:cb:0b:5b:82:4d:e0:d3:8b:c8:8f:ea:ef:e5:75:
91:98:40:26:fc:96:b3:67:c0:7a:bb:22:4e:5a:48:
fb:4b:a9:42:31:26:43:3d:05:5f:37:91:3c:5e:f8:
8a:48:65:c8:d9:65:b5:00:a7:eb:0a:cc:8e:6b:a0:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:95:85:26:DD:0F:63:24:B7:B7:EB:0B:F1:64:D9:4A:E7:F7:29:20
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e2:fb:3a:24:6d:04:f0:b1:07:13:59:38:d2:ab:74:f0:53:
a3:6f:58:17:7c:64:36:13:f2:05:57:23:7a:40:b7:df:0f:66:
0f:d6:62:e1:42:86:b7:d7:ba:7e:a6:89:96:b0:bd:f2:6b:7b:
fc:ca:7c:fc:27:3d:48:b3:f3:93:9e:8d:04:c1:5e:b0:87:aa:
b3:7c:4a:20:49:6c:f4:bf:10:4a:ae:ac:0d:12:c5:78:f1:05:
f6:be:35:c4:c7:f0:fa:44:06:9b:41:93:af:2a:15:4d:5a:29:
b5:99:6f:99:d6:43:c2:fe:cb:a4:0b:cc:99:50:13:2e:81:a7:
00:d3:df:46:72:94:83:2e:f0:81:e8:34:8f:f5:f4:73:19:2e:
80:2b:62:d2:1c:a5:95:64:9f:aa:17:43:9d:6c:a6:6d:88:f5:
e8:d6:50:10:4e:2a:62:9c:06:b8:a7:a7:ed:15:d7:58:20:1e:
90:85:9b:35:f6:df:90:6a:89:49:83:41:6f:d0:52:71:15:f1:
ad:70:09:e7:72:f3:ae:5d:43:e9:cc:37:b3:4a:3b:46:01:fa:
e1:ba:4d:9a:0b:b8:83:0b:5e:3b:92:e9:3a:3f:3c:70:9c:67:
10:30:98:fe:3a:c3:57:cb:d6:72:21:18:80:9b:ff:5e:0d:31:
76:42:71:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:37 2026 by rpki-client