Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: qXogpfRqhxw0WiJlOMf/NOqC09g7wltcdbl1mrr5Qbk=
Subject key identifier: 32:10:F1:DA:08:66:5C:65:9F:F4:3F:D2:E5:B0:EC:19:BC:87:96:FE
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 019D25F205E15F0135D47CFE77C4C384D5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 0EEC
Signing time: Wed 25 Mar 2026 17:01:51 +0000
Manifest this update: Wed 25 Mar 2026 17:01:51 +0000
Manifest next update: Thu 26 Mar 2026 17:01:51 +0000
Files and hashes: 1: 1-kYVKomYqjL01cbaEPOlMsEWOVY.roa (hash: oUQ10g8uHJDmhHl7WNNwDwZSnYMcTHr2vmmz1SCpm+8=)
2: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: v/tQi81WxrJXLZkO0DXFcbSWGLx7/Gv0LOjxKMRBdlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:05:e1:5f:01:35:d4:7c:fe:77:c4:c3:84:d5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: Mar 25 17:01:51 2026 GMT
Not After : Mar 26 17:01:51 2026 GMT
Subject: CN=3210f1da08665c659ff43fd2e5b0ec19bc8796fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:63:e3:90:96:df:12:7b:59:83:80:61:4d:
a6:12:32:54:fc:30:6e:b8:5a:4d:a7:39:36:3b:36:
c7:26:11:b6:f7:62:a4:9f:67:6f:41:3a:23:ae:23:
38:fd:92:78:46:11:c4:f6:d7:e9:18:99:e8:1c:29:
7e:52:57:87:26:7c:21:88:a5:ab:f5:0d:ce:c5:57:
6e:d3:91:47:4f:bc:a1:af:b8:ba:27:4b:06:9c:5e:
97:0e:f0:f7:0d:3d:6e:6d:2c:86:36:39:5f:55:45:
06:ae:bc:52:ca:4f:d9:f8:ed:fe:53:0a:83:db:fc:
72:73:c9:c3:1b:5d:4f:b0:cc:19:b7:60:07:a0:ba:
20:ea:df:0a:a3:52:64:0c:ee:87:54:5b:c8:39:4e:
44:da:ce:3b:7e:d5:bf:ab:cc:b1:b0:f9:ca:c7:cb:
c0:35:a9:6d:36:e6:4b:42:2e:66:4d:3d:70:0e:2a:
82:b1:7d:17:9d:6c:21:68:f0:76:93:19:cd:2f:34:
ea:a3:9f:59:89:9f:3f:29:51:3e:8e:82:a5:46:1d:
4c:5f:f9:3a:e0:da:a4:80:03:76:c9:e2:ef:f1:8b:
68:51:d3:c0:f8:b0:d3:9c:9a:f5:d9:37:ba:9c:c7:
36:e3:42:13:69:6e:5e:8f:f9:96:d6:27:36:b1:8f:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:F1:DA:08:66:5C:65:9F:F4:3F:D2:E5:B0:EC:19:BC:87:96:FE
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:37:b8:6b:2a:43:4d:a4:72:c7:ed:71:f5:35:81:74:f3:e1:
b8:f2:1f:52:01:97:fc:8e:a2:68:9e:43:04:93:7f:d4:f4:d6:
bf:a3:fe:1d:be:bf:96:f6:2c:b8:8a:3a:04:fd:0d:c8:15:c9:
52:16:2b:cd:70:9f:1c:70:1b:b2:84:d2:09:4b:bc:7b:cc:d0:
69:a6:c2:03:97:5d:8d:6e:ba:8b:a2:60:cb:b0:32:32:3a:0f:
24:7f:54:be:cb:23:7e:14:f4:26:e0:07:74:62:41:a5:57:a7:
0d:ae:cb:8c:ce:3d:fd:ae:41:6c:52:e1:ac:77:0e:84:44:eb:
80:b4:59:02:af:76:23:eb:7e:ae:cf:a4:14:02:2c:99:9e:d8:
92:af:16:3e:ee:47:b6:52:f9:c3:b7:fd:1c:73:67:6c:1a:a6:
41:94:41:e1:08:01:29:4b:41:86:fa:c8:28:96:ca:c9:ed:52:
b0:bf:92:43:c0:a0:50:07:f0:29:9a:06:54:76:99:9b:0b:10:
fb:b2:fd:68:b1:9b:0a:d0:a3:1d:32:89:0e:be:b6:67:0e:bf:
55:03:44:d7:d1:09:05:6d:f5:c3:e1:01:f2:6a:a3:06:a6:83:
c0:6a:f8:e4:b3:78:a1:89:78:e5:ec:93:ef:a2:16:5c:bc:e0:
07:18:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:36 2026 by rpki-client