Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: jXpCdx/eAL3PTO1FGLXbSIGEd5nUOPgc2jcXiiBxzdk=
Subject key identifier: 66:04:6C:B7:7E:B8:F6:51:6C:3A:D2:BF:B3:F1:6D:38:52:55:FE:44
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 019D2B4E60CE902DE4377A2EBDC1C0596DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 1645
Signing time: Thu 26 Mar 2026 18:00:50 +0000
Manifest this update: Thu 26 Mar 2026 18:00:50 +0000
Manifest next update: Fri 27 Mar 2026 18:00:50 +0000
Files and hashes: 1: 9s39xRIy0ovz43_NNnpZQL7J2kk.roa (hash: oPXpQgKbn2LA/+wlfEIifDrWhGCahORiCPFzylNJltg=)
2: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: jyZ1W6pBb5u/49ehFNKPrLHuF6bn5fPgig1Fk/An37E=)
3: XNqMimQmi16joRmSNKtij3MWcqw.roa (hash: W6R4J2CPCxTIFG92bOgpHJLgm5G3zw04PkJ9pMuWLS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:60:ce:90:2d:e4:37:7a:2e:bd:c1:c0:59:6d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Mar 26 18:00:50 2026 GMT
Not After : Mar 27 18:00:50 2026 GMT
Subject: CN=66046cb77eb8f6516c3ad2bfb3f16d385255fe44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:89:0a:38:86:b8:78:f5:f1:2f:fc:0b:8c:
d8:38:af:0e:0b:b6:4d:22:41:47:9d:1f:75:4f:74:
3b:f4:b8:58:7f:8f:e7:c5:f7:df:26:d9:ee:92:f9:
7f:1a:19:d3:7c:b1:7a:b3:84:c2:fb:f4:a4:af:11:
a8:73:43:60:59:70:3b:ff:12:95:14:1c:20:31:af:
47:2d:2e:ed:5f:3e:91:8e:13:9d:4e:60:6f:32:ce:
70:06:0e:94:83:80:85:76:0a:23:e2:1c:9e:aa:aa:
c0:ea:a2:81:de:97:7a:f5:f1:0c:c2:6b:5e:aa:07:
89:d0:0e:36:58:8b:28:ad:e4:ff:12:9c:71:cf:0e:
29:22:58:37:b8:28:e3:8b:96:f2:ae:64:10:a6:64:
24:48:a2:d4:9f:a9:74:b2:ac:f1:49:9e:23:61:73:
df:ac:86:cf:ba:ac:cb:15:54:33:fe:c5:13:76:31:
28:ef:45:9b:2e:2f:82:98:bc:31:fe:41:d0:1c:a2:
df:d9:bd:96:e4:56:57:ff:12:31:1b:21:5f:af:28:
5e:6d:c8:e8:02:46:ec:66:1a:da:d6:0c:d8:67:e3:
bc:71:28:90:50:11:13:8c:9c:9b:ec:5f:58:23:40:
c0:4e:c3:6d:98:b6:72:52:6d:33:cf:ff:50:8c:ce:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:04:6C:B7:7E:B8:F6:51:6C:3A:D2:BF:B3:F1:6D:38:52:55:FE:44
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3d:3e:77:52:60:ab:52:89:d9:16:dd:6e:bd:06:ee:fe:b8:
58:f4:38:df:ac:ce:16:53:68:c4:02:aa:97:aa:6c:f1:89:e7:
f4:df:3b:4c:a9:6a:67:ae:df:28:9a:a1:34:95:b9:0a:58:b1:
35:25:ed:c8:83:c4:10:a1:3b:b1:78:66:5d:9d:ef:14:a3:6f:
37:94:08:b3:f0:31:0f:66:96:ab:f8:3a:79:1b:e2:d6:bf:a5:
69:2b:25:39:3b:9c:7a:c3:b5:e4:c3:a2:8f:9c:e8:4b:06:df:
78:0f:52:74:48:1d:a9:12:9f:db:c5:e9:9e:e8:63:e4:4e:df:
25:9b:25:57:31:52:47:05:d4:05:09:6a:bd:de:e1:28:75:dc:
10:1b:75:31:f4:04:e7:ec:6f:5a:a0:2d:8a:db:b6:57:62:7d:
a6:3c:b5:70:23:f4:cf:6f:03:e9:6e:a8:43:fe:e2:06:6c:32:
c9:e6:ff:4a:3f:5d:c8:e3:e3:84:bc:5a:1b:69:91:ec:88:fa:
f4:ca:b1:59:7a:ce:f1:eb:e0:79:cb:51:8e:a8:dd:98:6c:aa:
af:e0:50:81:4b:11:2e:2c:cf:b8:cb:ea:bf:8e:f7:ab:6a:42:
95:40:4f:75:03:26:b9:51:60:e8:5d:ef:c1:21:6d:c0:30:ed:
44:02:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:59:34 2026 by rpki-client