Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: 6ul6T5X6fXdFpkyVDsHbkisIC4ab4aeGrjaIseGY4Lg=
Subject key identifier: 40:62:60:FB:AA:5E:60:F9:C8:4A:30:69:E2:8F:47:EF:22:DF:F5:04
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 019D26CD69E2E7696EC47D1C575A51237B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 0B4D
Signing time: Wed 25 Mar 2026 21:01:29 +0000
Manifest this update: Wed 25 Mar 2026 21:01:29 +0000
Manifest next update: Thu 26 Mar 2026 21:01:29 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: RDV8IlyFouNZ/oM1Pl+RYZMcLoQxbIt122mx3l03bm0=)
2: PiRgJdP5MCWuU1jNKZLwDVvXfxA.roa (hash: cpBd4dfM6upcsIz22a2feCu0xP3o+cF4Qb/mGhUm2S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:69:e2:e7:69:6e:c4:7d:1c:57:5a:51:23:7b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Mar 25 21:01:29 2026 GMT
Not After : Mar 26 21:01:29 2026 GMT
Subject: CN=406260fbaa5e60f9c84a3069e28f47ef22dff504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:75:7c:ea:ea:64:16:c1:43:15:49:e8:4f:
08:61:47:c8:51:72:84:4d:f9:64:71:3e:fe:17:f9:
98:8d:77:15:79:a8:2f:93:ac:c2:13:ed:8e:b8:86:
b2:0f:0a:1f:d3:d5:2c:cb:e8:5d:84:d7:17:52:90:
83:9e:26:8b:78:76:e7:f0:d7:8d:9b:30:8f:5c:e3:
6e:d9:2f:30:05:0a:f0:b7:f4:7a:d0:70:a2:cf:6b:
6f:52:91:fa:34:58:12:9d:ec:50:f2:b8:c2:2f:21:
90:66:7c:9b:96:1f:9a:a5:72:1e:99:77:8a:52:a2:
b9:2c:c8:73:95:1c:78:81:51:93:24:5d:a9:2a:62:
20:4c:a8:43:88:e7:ad:67:02:6f:01:87:51:b0:e1:
36:b3:22:36:5d:4a:2a:6b:97:ab:2a:3e:69:4f:ba:
ce:1c:23:1a:e7:07:18:11:ce:82:b0:53:3b:8b:e4:
5d:1a:f2:c7:21:26:51:f3:84:35:47:c4:42:f0:7e:
9f:cc:a1:bf:e7:34:23:e8:f6:5a:4f:69:ff:31:c7:
2a:d8:6d:64:17:0e:5b:28:af:ac:34:75:d2:62:9c:
4c:6f:6f:a2:d9:00:60:34:f0:9a:90:4d:1f:1a:71:
76:2a:56:da:ff:71:3b:cf:14:4a:67:1f:4d:b1:84:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:62:60:FB:AA:5E:60:F9:C8:4A:30:69:E2:8F:47:EF:22:DF:F5:04
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:41:f8:08:73:f6:41:ee:14:99:25:04:63:f1:52:64:54:79:
4c:2f:e6:95:52:94:67:5b:94:ac:d5:1b:a5:d6:10:a4:c0:86:
b9:c7:1e:79:60:3c:0a:ec:23:2e:f2:8b:44:b1:62:97:83:a5:
33:d0:af:22:7e:79:69:f5:9b:49:df:25:84:2b:00:6b:b0:8b:
08:88:5a:43:7a:85:9c:80:6d:c0:65:31:8f:bd:49:2f:34:d8:
d7:14:cd:0d:a7:60:c4:b3:2a:13:c5:9d:32:75:c1:a7:fd:b3:
c1:e1:75:8b:50:7e:a5:3b:9b:e0:6f:43:85:53:20:5e:5e:91:
67:51:b4:5d:0c:c1:eb:b7:b7:78:8b:56:96:d0:18:7d:68:d5:
8d:3a:a7:1c:4f:f2:b2:87:ee:1f:d2:dc:10:bb:06:8c:4d:1d:
4f:0c:6c:97:8b:79:79:8a:b2:64:36:3b:54:10:e2:9e:79:3d:
4e:6c:f2:9f:fe:c7:d1:74:2e:09:0e:8f:c3:54:81:1b:97:25:
db:a3:45:fa:db:94:ba:67:3b:5b:f1:3a:65:5b:a9:b5:1b:0b:
e7:48:c0:23:a1:99:1b:c1:6c:77:d5:0a:8a:a6:ae:7c:a6:f6:
dc:dd:e0:08:75:20:10:22:1b:64:31:d7:b0:c2:02:3e:75:63:
5d:7f:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:53 2026 by rpki-client