Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: 24afE8afirg9zhXZsvOmGULqqhuN/QOjOGNjj4vCSN8=
Subject key identifier: 30:1E:F5:13:86:73:4D:A4:B3:5D:51:37:41:85:0C:E4:58:B4:45:BD
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 019D28F2910B8472017385E780643C18BC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:01:18 +0000
Manifest this update: Thu 26 Mar 2026 07:01:18 +0000
Manifest next update: Fri 27 Mar 2026 07:01:18 +0000
Files and hashes: 1: cAmtJXGnG8QQQB9duiFpy_AlVMA.roa (hash: cKqublREqa6cRbwA1qkBVAFhLjbHKxlFRKgMl8ubUgg=)
2: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: lYlyTEx0IwQBW3ADMncR31WWLUrhq3spId3CVMDq9lU=)
3: pbc8FOs2r0cKcmP0E7zfMwoAuYY.roa (hash: ct93H+RGleD4usNSOMWfcCTKS9VgX/zLNOdAP8LEHt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:91:0b:84:72:01:73:85:e7:80:64:3c:18:bc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Mar 26 07:01:18 2026 GMT
Not After : Mar 27 07:01:18 2026 GMT
Subject: CN=301ef51386734da4b35d513741850ce458b445bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:21:01:ef:1b:80:ef:6c:86:e1:40:f2:ca:
e7:05:7b:09:ff:5b:c2:47:de:94:0d:1e:5c:d4:8a:
6c:18:00:b6:7b:ce:d5:9c:52:23:6e:ba:c5:e3:64:
73:60:e8:e3:f3:27:02:4f:0f:1a:e6:81:9a:85:d5:
c5:cc:66:33:86:c0:ce:d9:86:7d:6d:5e:5f:20:7a:
a6:7c:f7:2e:14:b0:f6:26:38:6f:c8:b4:be:b5:c4:
fa:86:57:69:37:bc:ed:1c:54:bc:01:99:66:83:16:
1e:e2:ee:6d:02:7b:db:e6:84:b8:b7:eb:06:11:44:
ff:4f:3c:f5:e3:7a:0a:6a:49:d4:47:2f:f3:65:40:
3c:0b:32:f2:d5:c2:8f:29:ee:03:71:79:fd:25:0a:
cf:6a:72:89:64:8c:a6:2f:b1:8f:20:03:48:9e:a8:
38:3d:8c:ff:ee:05:f6:de:ac:52:30:ae:95:0c:b1:
0f:51:63:5f:bb:d6:34:8b:46:14:8f:42:ae:34:8b:
fe:2b:0c:e9:ca:43:ba:5d:b1:c6:d4:06:59:f9:39:
1d:1c:ee:c8:09:c1:21:11:26:1f:ab:81:66:87:7b:
92:6b:86:ff:4d:77:37:b8:02:85:fe:c6:b3:4d:ea:
41:3e:d7:8b:e7:91:34:65:7e:dc:f9:8e:5e:5f:4b:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:F5:13:86:73:4D:A4:B3:5D:51:37:41:85:0C:E4:58:B4:45:BD
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:85:5f:2b:f5:26:6c:fe:df:bc:54:dc:ce:a1:a3:5f:4b:bf:
8c:2b:57:43:6a:3a:7c:5e:13:a5:f2:e5:f0:5a:d0:00:d3:9c:
ba:97:c4:08:af:8f:78:5a:e3:1e:de:a8:4e:f2:6d:2b:13:15:
cd:a4:56:4e:52:1a:39:db:61:a8:4d:c5:0f:6f:da:fc:43:62:
58:58:5a:f9:97:45:57:92:f4:73:73:62:f9:5e:80:f9:c1:ff:
c8:d5:c0:f1:b7:d8:78:64:76:07:d6:3f:79:e0:36:e4:ba:21:
1e:c1:e2:11:6e:89:1e:86:db:37:04:a9:dc:ee:37:7f:fc:c7:
45:e8:2b:d8:94:e5:6a:fb:36:39:5f:ea:b3:06:e8:d3:46:ae:
26:67:c2:75:ae:51:91:d4:b1:da:38:1a:6a:37:05:a9:59:bc:
25:69:5c:2c:b3:2e:a2:51:be:f7:49:de:8c:ec:ca:75:24:b5:
65:d0:c9:ec:ff:16:2f:ac:2f:cc:4f:58:39:e1:cb:37:08:3d:
22:d4:0c:5a:6c:7b:a7:0e:97:b8:53:38:5e:ea:a9:a3:74:96:
81:89:19:93:1c:a3:76:8b:67:65:47:70:21:fd:9d:c5:2b:61:
23:3e:5c:2c:fc:9a:97:34:19:90:2a:84:c9:36:aa:6a:6a:21:
d7:53:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:44 2026 by rpki-client