Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: 6WloS4ymkYTM+qldKOptuMnQT7JBlPrhL7Z/TBCtnWw=
Subject key identifier: 31:DD:94:21:FE:4C:80:82:7A:07:47:F5:69:4B:45:5C:50:EB:D1:18
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 019D29CE4A4A94E255D1A9286378C89CA328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:01:18 +0000
Manifest this update: Thu 26 Mar 2026 11:01:18 +0000
Manifest next update: Fri 27 Mar 2026 11:01:18 +0000
Files and hashes: 1: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: sqzX7K+XixT1C/kA/Nt7Ito5KmMwbxuSbr6s0GrZvok=)
2: o1g1zzHTc7aldgN6ad41PbDOjB0.roa (hash: QQnybFplu1wEOqxD5tKldN28I8hCKl9A3kHEsDPVLd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:4a:4a:94:e2:55:d1:a9:28:63:78:c8:9c:a3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Mar 26 11:01:18 2026 GMT
Not After : Mar 27 11:01:18 2026 GMT
Subject: CN=31dd9421fe4c80827a0747f5694b455c50ebd118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:8f:7b:77:be:e8:93:df:7b:28:26:b5:04:
d3:5a:29:af:f8:a2:e1:8b:7a:db:e4:a0:89:e1:0a:
8c:db:60:7b:40:cb:5f:42:fc:ed:82:c0:a3:7a:e0:
1b:b9:93:bd:a6:e6:f3:32:80:6c:87:9f:a7:67:bb:
88:40:b4:f6:ff:e6:d3:49:6f:a9:0b:96:41:bf:ac:
d0:30:14:3b:b7:de:87:dd:f5:ee:1e:0d:05:29:6e:
a3:b0:78:9b:c3:a7:0b:65:b2:e2:4f:71:5b:50:f4:
43:a0:f1:09:0d:b9:6c:68:74:51:0b:e3:de:62:22:
e1:89:6d:39:ea:9c:94:8e:b4:c4:15:bd:f6:f0:22:
86:70:7f:c4:0d:9f:49:6d:63:05:09:86:26:61:d7:
23:79:cc:e9:d7:96:86:66:24:40:cc:8c:5e:7d:a5:
aa:53:16:a0:44:21:f9:4b:5b:a6:f0:1a:e4:80:d9:
91:66:ec:e3:e0:8d:f9:f5:e8:74:66:33:5f:02:6a:
65:67:01:bd:69:18:3e:09:81:35:d4:fa:8a:91:1c:
64:e2:b0:38:a6:5d:ed:42:a0:7e:28:da:84:0c:f4:
7f:79:14:e2:d1:50:d9:5a:09:05:79:42:3e:90:a2:
ce:94:3f:ad:c2:b3:61:0d:71:9b:7e:e9:3f:9f:92:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DD:94:21:FE:4C:80:82:7A:07:47:F5:69:4B:45:5C:50:EB:D1:18
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b6:20:6e:0a:e1:f1:fe:af:98:b2:7d:b1:ff:f3:18:59:f6:
0c:de:0c:34:66:42:76:a5:11:8a:a7:fb:0d:47:ef:82:f8:ad:
50:7b:db:d9:af:5a:81:2d:2a:d1:cc:52:14:79:f5:2c:82:ad:
ac:2d:ad:bc:b0:8b:3d:da:e1:06:9f:4f:c0:e3:14:12:cf:3c:
52:7a:50:33:68:af:b1:05:df:0b:da:78:2a:bb:b6:01:af:18:
88:78:12:8f:c6:22:02:a1:d8:7d:41:ba:82:28:28:71:b3:f5:
f7:db:ca:70:d9:42:5f:80:ca:87:3a:77:45:b6:c1:4a:82:e5:
00:a2:77:74:01:c0:ee:fd:cf:88:6a:06:ea:40:1b:ac:c9:5d:
43:31:de:b3:69:e9:d5:3c:cc:1a:fe:25:a8:85:85:78:eb:b9:
ef:a5:79:66:ed:a7:f5:34:9f:5a:59:d4:d7:69:ef:65:b2:3a:
10:32:5b:3e:eb:ff:8a:04:cf:a7:33:4f:37:76:ce:00:f4:67:
e0:bb:2b:75:bc:a9:fd:a3:a1:51:9d:2c:6e:c2:1e:02:e0:57:
30:83:99:50:69:ca:7e:62:e6:84:47:58:f8:61:57:26:6b:53:
29:6a:1a:c9:3c:a2:13:0b:10:03:2d:59:81:e8:7f:fe:f7:59:
df:3c:03:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:12:09 2026 by rpki-client