Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: a/FGByUmLadZqdC5AQ1reV1lvV3r7yqiISHMsyGvq6o=
Subject key identifier: 18:26:96:71:D3:59:44:D7:50:24:CA:63:5E:FC:45:B1:92:04:99:E9
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 019D28847D2F6261BD384EF3899AEAF70D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0EBB
Signing time: Thu 26 Mar 2026 05:01:04 +0000
Manifest this update: Thu 26 Mar 2026 05:01:04 +0000
Manifest next update: Fri 27 Mar 2026 05:01:04 +0000
Files and hashes: 1: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: j6OhjqJhvpeHrLemb1BT0GLZNDPmZyXUYgcME8ih3+g=)
2: n-7CelT5dTV5HjJBN21chSkx44M.roa (hash: zVfMTjOFuWwD6PT0EwSu8KM83oLIoF+My9PpsYKXT+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7d:2f:62:61:bd:38:4e:f3:89:9a:ea:f7:0d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Mar 26 05:01:04 2026 GMT
Not After : Mar 27 05:01:04 2026 GMT
Subject: CN=18269671d35944d75024ca635efc45b1920499e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:66:c7:7c:80:ac:1b:5e:42:08:23:39:e7:
e0:9b:a7:a7:e1:0f:bb:3c:6c:ca:a4:ae:af:2a:58:
04:54:39:af:20:41:00:70:f7:87:43:31:0c:6c:b0:
96:46:63:21:6f:5c:36:c8:6c:e8:0b:2b:8d:1d:1a:
7a:41:93:72:aa:36:48:72:d9:34:0d:00:b3:19:b5:
47:18:1b:b1:11:36:75:14:c9:97:6c:a2:b5:a9:d5:
7d:34:6d:cb:f9:cb:1a:a1:35:83:45:4d:c2:9a:a2:
4f:c0:a9:20:a3:e3:94:4f:9e:52:ac:3f:65:03:76:
23:e0:84:42:42:68:06:0d:42:63:f2:1a:49:db:0c:
fe:9a:61:8d:04:b1:ef:79:d6:41:99:83:83:94:ea:
a3:e4:37:8a:28:80:e3:cc:3d:a4:84:10:6c:0b:dc:
b1:f3:1a:7d:22:31:00:68:84:fe:04:82:35:12:b1:
64:17:59:67:b0:d6:26:8b:1f:e2:bf:97:57:0c:98:
32:65:26:f9:f7:3e:29:35:d7:33:5d:f8:18:0a:1e:
52:35:0c:27:5c:05:e2:52:73:11:eb:64:9d:6d:ec:
1d:26:0a:cf:17:ca:b7:86:60:68:7d:93:7a:54:04:
88:60:f0:0b:ed:0f:a4:1e:a8:99:17:2e:18:4d:ca:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:96:71:D3:59:44:D7:50:24:CA:63:5E:FC:45:B1:92:04:99:E9
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:49:14:2e:d2:27:fe:8e:d4:ed:d0:09:99:f4:50:98:60:0f:
4d:97:09:dc:a2:f6:71:5b:d0:82:7c:5e:7f:79:e0:02:4c:f4:
7d:74:46:e5:9e:41:db:ef:34:9e:0c:66:65:de:1a:54:ce:97:
d2:13:0a:c4:7b:6c:20:6e:27:2e:c4:8d:35:b8:58:23:a2:0c:
fe:ad:a2:6b:b1:62:52:e3:47:0f:2f:35:7f:1b:ca:53:40:75:
6f:4a:d1:bb:8f:76:9c:90:ce:d5:87:fc:52:79:ec:35:90:da:
2f:38:9a:13:86:71:b3:87:11:71:22:a1:4b:b4:c9:16:03:1e:
3a:ae:09:f3:94:97:1a:7d:03:1c:8b:ee:b7:b0:bf:32:f1:b6:
42:47:c8:13:4d:9f:74:5c:57:94:3a:28:3f:d0:57:6a:55:45:
37:00:a5:9f:53:63:4a:d2:1e:6e:73:6a:65:06:84:89:c2:8d:
71:5b:63:b7:ee:c0:87:7b:db:c7:41:d7:a5:17:93:1f:b3:da:
43:7b:f1:d2:99:d4:8f:a7:bb:41:b3:89:ff:d3:b0:f2:5e:92:
e1:e5:3b:2c:c1:e8:24:97:30:7f:63:21:71:dd:5c:7e:f6:aa:
1c:e4:b3:a6:5b:2c:02:9a:e7:d5:ba:8e:20:05:1f:ff:08:ae:
59:5c:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:47 2026 by rpki-client