Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: EQs+zw9IwqCvKLDsyukIbGIKsC+BNWDogGXWM6R2A9I=
Subject key identifier: E2:C8:A8:FC:46:9B:95:EC:4E:0C:A3:3B:AC:E8:61:DE:89:F8:A5:FA
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 019D29CDC795515C4680E9CF77725E553152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:00:44 +0000
Manifest this update: Thu 26 Mar 2026 11:00:44 +0000
Manifest next update: Fri 27 Mar 2026 11:00:44 +0000
Files and hashes: 1: 1-t_zhWLilE6KvhfiWmcU3qakEiY.roa (hash: 0Yp7FcFsKOjytovm/Gd90cW5FsF6AebKXtz8XB/GJT0=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: 3rgfrIN+SKenENRdV7fZyWXFy5ZJ754CDz1QjaUpO1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c7:95:51:5c:46:80:e9:cf:77:72:5e:55:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Mar 26 11:00:44 2026 GMT
Not After : Mar 27 11:00:44 2026 GMT
Subject: CN=e2c8a8fc469b95ec4e0ca33bace861de89f8a5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:f8:b2:b0:a1:e5:0e:40:a8:7b:69:bb:b8:
c3:38:50:e3:1b:6e:2f:a0:df:53:53:ca:2a:ac:cf:
89:e9:0c:29:d3:93:03:70:ba:b1:c4:2f:59:72:05:
81:ff:95:ba:51:c8:2e:df:87:5a:2c:54:ba:2e:0b:
a3:95:ad:cf:aa:3f:f6:45:b7:c3:ce:27:bc:91:ad:
dd:0c:27:e3:b2:be:2a:0c:85:c3:83:ff:0a:9c:39:
05:da:b5:bf:a7:83:d5:ac:76:9c:05:18:a4:88:f0:
7d:82:6d:9d:6a:3e:ef:a1:5f:1f:83:98:e6:2e:cf:
fa:38:1e:a4:81:22:bb:d0:a9:8c:53:91:f0:32:07:
b2:c5:38:02:11:8d:a2:6f:9b:d9:de:ef:c6:6c:df:
38:c8:b5:2b:ed:4f:4b:64:84:b5:32:9f:78:21:f1:
57:02:d2:2f:84:1f:f4:2d:11:d1:8e:06:2e:0f:49:
e3:31:3f:d9:ca:2f:d4:77:ee:ad:cc:0c:db:47:3c:
e8:ff:b6:26:cb:87:25:6f:cb:b6:6d:5a:74:df:32:
73:2d:7c:45:22:7c:60:e7:fd:ab:78:7b:0a:b5:4b:
80:76:77:1e:bf:d9:fa:2f:e9:29:ca:e9:34:5d:74:
fd:90:1a:ca:ed:4a:e4:05:f9:68:06:b6:71:cd:50:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C8:A8:FC:46:9B:95:EC:4E:0C:A3:3B:AC:E8:61:DE:89:F8:A5:FA
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:81:ee:1c:d5:e4:99:3f:73:45:b2:01:1c:81:9f:c8:ff:a9:
e1:4a:36:8f:6e:ff:f4:62:ce:58:b0:5d:c2:83:80:0b:4e:6f:
cb:61:e0:e0:f0:7e:80:2f:15:85:9b:7c:e7:0e:7f:8f:30:ff:
90:13:3e:14:2a:58:94:6d:b4:a4:0a:bf:bf:9f:c9:cb:87:25:
11:73:f3:47:be:38:aa:e1:29:33:08:8e:57:e1:c9:ed:f3:51:
54:18:95:b0:bf:fe:d7:9e:69:2a:89:9d:fc:9f:49:b1:95:45:
d0:06:34:02:45:c7:8e:81:1a:d6:11:e2:cc:cb:fe:b1:a8:33:
3e:19:67:dc:7b:b5:56:b2:c6:90:56:cf:b8:a4:a3:5b:0b:ad:
8e:5c:14:cc:2c:1e:2a:65:ce:59:c7:8c:4b:49:85:f0:ee:c2:
cb:a7:9f:d9:2e:40:32:ae:34:c9:98:5c:50:25:22:84:c9:9a:
ed:18:8f:9c:53:cc:42:4a:e1:e1:ad:ce:5d:5a:dd:34:1c:b5:
12:01:51:e1:d7:48:f9:93:04:d6:17:65:b1:90:93:f2:c1:81:
d0:53:22:46:fa:b5:48:f5:c0:d9:99:ea:65:c1:01:47:86:fb:
15:90:55:58:ee:33:a7:85:50:76:fd:bb:5b:ee:f2:dc:e3:c8:
bf:2d:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:57 2026 by rpki-client