Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: LNL6VGgwfDVonK+Zo4fX8kPnNMhBD3bzn5uIALpKlnA=
Subject key identifier: A0:9C:36:7E:8C:74:96:02:83:CF:9A:B1:D9:42:9E:C4:67:96:BB:36
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 019D284D7349DE29FB106E47005968119B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 0C18
Signing time: Thu 26 Mar 2026 04:00:57 +0000
Manifest this update: Thu 26 Mar 2026 04:00:57 +0000
Manifest next update: Fri 27 Mar 2026 04:00:57 +0000
Files and hashes: 1: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: QtyLk9A99nnbIFSpK4K3/U3g7ZDMyotqvVOClvacExo=)
2: xMgS7QD9_G9EOx5x98EDuY-9yGs.roa (hash: hMlsCv6vl96geP53LLF12LxkGDU69mGZggpEWqFm3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:73:49:de:29:fb:10:6e:47:00:59:68:11:9b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Mar 26 04:00:57 2026 GMT
Not After : Mar 27 04:00:57 2026 GMT
Subject: CN=a09c367e8c74960283cf9ab1d9429ec46796bb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:86:ac:b9:3e:a2:89:16:3f:69:f8:a3:75:
46:f1:b3:4a:62:0d:f4:00:0f:0b:8c:cf:72:37:b6:
d9:f7:45:8b:67:89:71:96:e9:bc:0d:b0:73:85:3f:
50:36:cb:d1:bd:87:4d:f8:ba:77:14:d2:1e:c0:a1:
17:82:96:e8:7a:24:e8:ed:21:72:21:09:1f:c2:cc:
ff:4b:ad:54:6f:6a:b3:4a:a2:e5:4f:b2:fc:21:24:
75:ec:ce:24:30:e2:85:80:cc:09:ff:25:b9:3c:fb:
aa:fd:c8:87:50:a7:a4:99:48:a7:80:09:9f:8a:51:
d2:48:4f:32:74:40:5a:6a:95:b0:2e:82:52:88:1a:
f1:b2:69:d6:e9:31:c1:b0:c7:85:a7:3c:66:ae:66:
2b:a7:48:04:4b:e9:e2:90:33:c6:d8:7d:22:0e:f9:
eb:7d:ef:ba:95:30:81:ee:95:f0:8a:19:49:7d:94:
cb:10:e6:df:af:8a:0a:92:d7:90:e1:88:9c:15:83:
1a:5f:3c:1b:53:52:65:8a:39:b4:86:d4:84:a8:60:
27:dd:16:fc:d3:1c:fc:b5:3b:b5:f0:b6:b1:42:01:
ad:15:db:b6:14:78:08:1b:99:2e:e9:90:49:73:39:
1d:9a:b0:c5:06:4e:de:6e:ff:e1:05:cf:c3:62:bd:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9C:36:7E:8C:74:96:02:83:CF:9A:B1:D9:42:9E:C4:67:96:BB:36
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d3:90:f1:4f:e7:c2:0e:50:b4:35:41:3e:e3:e2:b4:f7:57:
c4:ff:d6:1e:07:15:15:fa:25:d7:a4:ea:30:95:c3:e2:69:b8:
92:6e:ba:5b:c4:47:00:a7:a5:78:41:38:db:41:5c:a2:1a:ab:
a9:22:b7:79:9d:db:7e:0e:22:61:b4:61:c1:0f:51:d3:b6:61:
2a:fb:06:ee:5c:96:ab:02:86:f0:b3:6a:7c:ed:a7:1c:af:5b:
8b:7a:b4:57:3f:07:20:b6:b7:13:5d:29:6a:f4:61:83:46:1f:
58:c9:93:7c:bb:64:13:0c:c2:48:17:37:31:e1:bd:52:a1:ed:
68:b5:c5:5a:0b:df:5b:d2:44:0b:c8:5f:9b:4f:b9:8d:90:d6:
de:18:fe:fb:6c:80:6e:7f:0a:0a:fe:7a:e8:a8:8f:0b:f3:cc:
13:30:7e:ff:1a:dd:80:18:12:9d:47:91:fb:df:7e:bc:6d:e0:
44:95:ae:1b:65:7d:2a:82:a8:5f:b1:ea:f9:08:d6:a0:be:02:
dc:4f:54:8c:cd:6c:93:a4:18:13:be:83:09:63:e5:3b:05:8a:
07:cd:01:85:0d:f3:a6:53:4d:bf:30:8f:e1:f4:72:c9:1d:bb:
2b:49:84:75:04:f8:18:07:0f:01:1a:62:fa:b2:4f:8b:d0:14:
8f:43:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:18 2026 by rpki-client