Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier: k4gU1IOif0EfuR12lvjxtsISPyQKY4cwZGSRfGatrLg=
Subject key identifier: 5C:6F:1E:B5:56:19:12:82:D3:1D:EF:83:6A:84:9E:9D:41:6F:99:0C
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial: 019D2A3C2216A69F5A160948A89538FC5179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number: 10E3
Signing time: Thu 26 Mar 2026 13:01:17 +0000
Manifest this update: Thu 26 Mar 2026 13:01:17 +0000
Manifest next update: Fri 27 Mar 2026 13:01:17 +0000
Files and hashes: 1: ea_FcR8oSzWDCeMxrNhO2E40pkI.roa (hash: 5Y4/kc8eZcdfX1i5OXOAX6HvK4BEfWtdSIjWkgc/rvI=)
2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: CAj/RUTT72HqKZdlMUE9/udRlLW+RyIc6Ks/cZ8AkgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:22:16:a6:9f:5a:16:09:48:a8:95:38:fc:51:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897378126f55d96519553daa48e02e3282121644
Validity
Not Before: Mar 26 13:01:17 2026 GMT
Not After : Mar 27 13:01:17 2026 GMT
Subject: CN=5c6f1eb556191282d31def836a849e9d416f990c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:04:6b:90:08:63:73:de:2d:9a:13:38:68:
6f:10:d0:b3:28:5b:5d:d4:a3:8a:8f:4d:74:fa:bc:
89:0e:ed:23:c1:7f:31:89:a1:d9:d3:64:81:a7:b7:
05:b3:f6:87:e9:6e:db:ed:2e:a4:18:4f:aa:c4:39:
9a:ec:37:7f:28:1e:59:88:3a:bf:0e:d8:6d:38:03:
b9:71:9e:27:46:dd:26:99:db:13:bd:f1:58:c3:c0:
1a:19:11:d2:c2:2f:1e:7a:1f:f8:bd:29:6b:23:15:
8b:c4:eb:78:cd:84:6b:d2:35:6b:46:a8:3d:4d:01:
b0:22:7e:95:ea:a2:73:eb:9b:a5:c9:15:88:c2:4d:
81:08:de:e8:5b:c8:2e:c6:d4:61:28:67:57:d8:8b:
79:53:c0:b4:22:0f:a9:b8:79:7d:74:fa:38:33:bc:
1f:f8:e8:9d:80:b6:a7:f1:56:7f:48:09:97:0c:6a:
bf:a7:0a:1a:01:02:63:a0:0d:af:7c:74:67:2b:95:
69:d0:66:02:24:dd:e6:e7:26:37:2f:ed:5b:71:a4:
96:ee:83:aa:26:40:b4:db:3e:0f:c6:5e:4b:e2:1a:
e1:8c:11:dd:1e:76:c7:9c:ec:8a:99:1c:4a:d7:ed:
e3:9e:b2:3c:bb:f7:20:25:38:c5:55:59:69:f8:37:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6F:1E:B5:56:19:12:82:D3:1D:EF:83:6A:84:9E:9D:41:6F:99:0C
X509v3 Authority Key Identifier:
keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:27:03:c9:8e:fa:75:7d:9a:72:be:5e:51:5e:86:54:69:a4:
2f:c0:f1:a2:ee:7b:40:03:52:50:09:af:26:3b:34:5b:e6:38:
c1:df:d3:87:f4:7f:75:52:df:3d:a8:4c:23:94:79:02:6e:b0:
1a:2d:2c:13:aa:3f:4e:22:e4:f9:b5:ae:1d:8a:38:22:2f:36:
ec:99:d9:26:28:94:41:28:4a:4b:85:4e:ff:14:88:b7:2a:d5:
f9:ac:a2:08:e6:ff:81:3e:34:e7:1f:7a:83:e2:02:60:39:27:
5a:30:29:4f:bc:1d:f4:53:70:fa:d8:c6:8b:79:e3:51:bb:09:
56:c8:57:cc:d7:be:29:7d:cf:30:15:62:84:19:50:0b:72:3f:
f4:6f:75:5b:61:20:eb:05:3c:54:0a:69:26:f9:e8:8c:c1:d7:
07:67:23:65:5e:f9:59:38:b2:48:8b:61:e8:05:ef:4d:3f:df:
49:5e:bb:96:f7:0a:fe:12:1c:07:39:68:83:01:4b:b1:00:a3:
ea:fc:bb:ef:e1:cb:5a:18:02:48:5c:c8:ad:fe:ab:72:da:94:
e2:41:aa:a0:69:40:54:cf:c8:04:7b:6a:ab:8d:13:f7:d5:4c:
4a:99:1b:3a:0f:2a:47:3a:f5:b7:bc:50:6f:c4:4d:cb:8d:aa:
46:04:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:22 2026 by rpki-client