Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: 9EuHTc56aTECRIVVipd3wuoZyFihjEQBeF1tgFqCGj8=
Subject key identifier: 5D:19:5C:34:6A:DB:AA:D8:CA:FE:83:B5:13:C9:2D:2B:FE:63:11:7E
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019D284D6545B3911EE9CB51AF4F59C8E3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 175C
Signing time: Thu 26 Mar 2026 04:00:53 +0000
Manifest this update: Thu 26 Mar 2026 04:00:53 +0000
Manifest next update: Fri 27 Mar 2026 04:00:53 +0000
Files and hashes: 1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: OLyeIdJVuRxqg05dXNViSzov+7gzftdjnvwMWo4jLOw=)
2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:65:45:b3:91:1e:e9:cb:51:af:4f:59:c8:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Mar 26 04:00:53 2026 GMT
Not After : Mar 27 04:00:53 2026 GMT
Subject: CN=5d195c346adbaad8cafe83b513c92d2bfe63117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:83:7d:e0:33:4d:71:4d:60:89:be:3e:93:a4:
8c:01:96:d2:fd:a9:f5:b0:c8:70:c1:e0:11:ef:65:
33:57:67:df:d7:48:26:0e:02:e5:0b:62:c3:9b:74:
11:42:7a:4c:9b:72:03:70:4c:d8:b2:a8:83:93:9f:
8f:95:7a:7f:10:23:32:21:f9:cc:fb:03:31:e5:f8:
b4:d9:14:0f:62:a5:77:ca:79:1a:6f:a3:35:7a:21:
40:a1:e6:25:15:e3:16:1e:ff:45:26:fe:20:15:c6:
10:e8:00:1a:a1:c5:a7:ad:70:b8:40:d6:52:df:bf:
76:5e:b4:cb:ae:49:f2:6a:47:ec:60:86:44:3f:a6:
e7:3c:af:13:e8:52:f8:bb:03:c0:32:d4:fe:be:f4:
72:16:bf:c4:9f:43:24:23:37:d4:a9:23:4a:ae:d0:
d3:a4:e0:01:40:86:ce:ea:e8:a1:e7:76:0c:6a:a0:
49:0f:5c:fd:e3:00:39:e0:64:59:da:6f:2a:ea:41:
c6:85:1f:07:77:77:b2:22:4a:23:c9:c9:2b:fa:6f:
1f:da:af:6d:b5:14:d9:9a:e7:36:b0:e5:00:65:4a:
82:44:60:54:73:0b:82:63:5e:55:0a:fa:1f:a1:4a:
50:d0:23:33:ef:cb:47:a4:28:ab:6e:ff:ab:85:49:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:19:5C:34:6A:DB:AA:D8:CA:FE:83:B5:13:C9:2D:2B:FE:63:11:7E
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a6:b0:b8:55:8e:78:53:07:78:af:03:9a:9e:36:41:6c:5f:
21:60:e4:87:b9:f5:de:ec:2a:05:2f:1e:56:8e:cb:c4:b7:f2:
40:b6:a9:96:43:a8:d2:47:a2:47:4d:e4:5c:ab:ff:f5:5a:c5:
e3:dc:ba:c3:0d:7e:b1:3b:0a:82:b8:57:08:c8:b6:a5:23:42:
9b:3b:bc:53:0c:ca:8c:13:33:72:4c:5e:4c:4e:ef:68:ae:fc:
33:0e:de:53:d5:d3:c3:6b:56:f5:f7:af:96:08:d3:45:02:5d:
18:32:b8:80:f1:93:b9:c5:cb:b2:c5:c0:70:57:70:03:81:e7:
89:42:61:3c:c1:ab:a3:b8:50:04:92:38:6b:54:c0:ab:33:20:
61:0d:3e:74:25:d9:d5:1e:0f:32:7e:e9:70:ef:b4:67:43:14:
9b:24:18:63:e1:8d:4c:93:bc:fa:f8:82:15:72:36:e3:8a:b3:
cb:88:06:13:fe:c0:89:b1:23:6d:ef:72:b5:a8:b2:2f:93:3a:
37:03:d4:87:e6:81:85:28:5a:a4:c6:05:3e:90:22:b6:05:3e:
5e:80:26:c7:31:3a:65:31:e2:b7:20:bc:34:b2:54:b8:89:1d:
b2:a3:61:dd:e5:39:da:df:11:ea:6f:1d:b4:7b:a9:b2:ea:ff:
64:76:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:18 2026 by rpki-client