Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: FDkK3uM0/lz/BMQvnYXLlbFCN3VKploC4aCZW06FYl0=
Subject key identifier: 47:95:A9:C6:21:F8:16:35:8F:AA:9B:93:73:B6:4E:5F:74:5A:1B:08
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 019D25F10EB07D44B1CBD3B32750569FEFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:00:47 +0000
Manifest this update: Wed 25 Mar 2026 17:00:47 +0000
Manifest next update: Thu 26 Mar 2026 17:00:47 +0000
Files and hashes: 1: V2AzqvtsquO2cw9xiooW7SvirjM.roa (hash: h2OEkGsDBeZDRJkfmVD2RTlQU+2upNwxujp+DA8KQOg=)
2: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: k7PdLWjB4Xub7yAK7lt8kGhTtYSQPSYaj17KaJgaI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:0e:b0:7d:44:b1:cb:d3:b3:27:50:56:9f:ef:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Mar 25 17:00:47 2026 GMT
Not After : Mar 26 17:00:47 2026 GMT
Subject: CN=4795a9c621f816358faa9b9373b64e5f745a1b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:d0:84:e2:b0:41:c6:7c:1c:95:df:5a:13:
26:46:6d:9e:44:22:c3:4e:5a:4f:f8:b5:07:29:e8:
00:a6:a1:fb:ca:50:ea:72:d4:25:a8:08:5a:03:b1:
c3:85:c5:68:25:9f:8a:b8:ec:b5:c2:e3:18:06:96:
e5:28:8e:aa:d4:d7:b3:6d:44:2e:a4:73:8a:f4:8f:
f1:1d:43:e0:f2:83:60:81:20:a6:a9:9a:ad:50:3a:
f0:40:82:99:41:80:e6:ed:9e:38:ff:aa:fa:c3:6a:
24:3f:7d:42:3a:55:cf:25:ec:35:53:e5:b1:70:74:
6c:b1:55:d1:cc:db:e7:5b:1a:7f:ae:bb:64:af:86:
7b:06:07:5f:61:f5:a2:aa:c6:82:56:81:16:4d:d2:
c7:33:80:e4:9e:51:39:03:51:1c:35:f3:55:13:6c:
68:8f:7d:cb:1b:e3:0a:f3:42:46:10:81:6f:2b:26:
a2:5c:9c:f5:64:d9:a7:ac:7a:92:24:f6:05:07:c3:
e3:58:fc:33:2e:8d:f8:dc:d5:47:0a:82:d9:ec:b1:
91:19:a0:fe:1e:50:22:92:df:40:02:b2:4b:e0:a7:
11:a0:c0:a2:59:ef:53:04:b4:f8:75:b5:37:18:de:
69:86:57:3b:3d:30:21:e7:77:2b:0a:91:cd:d2:f4:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:95:A9:C6:21:F8:16:35:8F:AA:9B:93:73:B6:4E:5F:74:5A:1B:08
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7d:9b:e6:f3:c0:99:17:f2:1b:a7:69:16:e3:6b:f4:6f:bd:
27:09:28:c0:82:d0:de:60:c8:00:8e:82:22:05:14:06:e4:c2:
46:4b:50:c9:16:29:a7:2f:e4:66:de:fd:b3:0d:ca:fd:6a:a4:
42:06:8a:1e:5c:8b:ec:d8:a0:86:d5:f6:34:77:5b:7e:ad:8d:
97:71:b9:ba:57:5a:1d:73:ca:17:e7:66:fd:03:42:cd:85:bb:
f6:e9:77:12:4e:4d:aa:c1:96:21:22:72:77:cc:f5:b6:0d:2c:
41:a3:09:fa:cf:14:90:15:83:b6:9c:16:cb:31:8b:9b:d8:eb:
0c:ea:77:cf:1e:f6:33:9f:1f:1e:c4:81:db:91:d1:2e:87:0e:
0f:af:08:42:ee:ef:35:bd:12:af:e4:22:0f:d0:87:a8:65:ee:
59:aa:33:b0:31:73:91:02:45:3d:b7:89:fd:f1:2a:2c:79:f6:
b0:40:2c:69:e5:1c:f2:5c:84:41:3b:82:f2:68:86:4e:7b:39:
b5:02:55:a6:74:85:a2:f1:7b:1e:eb:8c:72:3e:40:1c:ac:2e:
4a:9e:9c:3a:a2:0a:00:0c:3c:d8:46:e0:46:bb:3c:23:d3:f9:
09:ec:fa:7a:e4:c8:6a:aa:34:31:89:0a:3d:bc:7c:6a:a2:db:
2a:18:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:44 2026 by rpki-client