Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
File: IxNmmEaTAQHlodA48EtTTaCLonY.mft (raw, json)
Hash identifier: ESMkHjDynE2xGOAIjR5OycIHq2z/JE6jFiQxKfmuNmg=
Subject key identifier: BF:E5:33:27:77:13:33:BF:45:A6:A1:8B:56:C6:CF:6A:B2:69:2E:92
Authority key identifier: 23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
Certificate issuer: /CN=2313669846930101e5a1d038f04b534da08ba276
Certificate serial: 019D265EE238BEBEF26B2246254684560F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
Manifest number: 0255
Signing time: Wed 25 Mar 2026 19:00:45 +0000
Manifest this update: Wed 25 Mar 2026 19:00:45 +0000
Manifest next update: Thu 26 Mar 2026 19:00:45 +0000
Files and hashes: 1: IxNmmEaTAQHlodA48EtTTaCLonY.crl (hash: 4cTIW+Agan9t1SJqAsTqXISyV1SImm+4+AwRxc5UKv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e2:38:be:be:f2:6b:22:46:25:46:84:56:0f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2313669846930101e5a1d038f04b534da08ba276
Validity
Not Before: Mar 25 19:00:45 2026 GMT
Not After : Mar 26 19:00:45 2026 GMT
Subject: CN=bfe53327771333bf45a6a18b56c6cf6ab2692e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:2a:91:00:af:77:34:61:6e:14:23:ed:43:
95:39:ed:d6:7a:c0:75:84:e5:c6:50:92:68:b9:8a:
c2:d1:cf:c8:ea:5f:3b:f3:06:79:d5:b0:4d:f8:64:
ef:ab:a4:fc:9c:d0:16:41:44:a1:af:65:18:3d:04:
92:38:3d:7f:a4:6d:01:0e:a0:05:34:b2:1f:20:20:
91:52:53:4c:c9:2d:9a:8c:7b:2d:52:37:13:6e:77:
d8:0f:10:ff:c5:95:7a:87:01:81:ef:ad:e6:57:12:
66:43:eb:db:55:a7:5b:fd:21:57:ac:36:57:bb:29:
20:85:48:ea:c9:eb:b8:77:7e:2f:60:8b:1a:2f:64:
e4:04:ef:01:2b:18:d3:35:db:5a:c8:fa:d7:07:ee:
49:7a:ce:63:70:d6:67:f0:29:e2:94:d7:33:99:75:
f0:88:bc:7f:8b:b7:1c:67:e7:27:0c:4c:09:02:3b:
6e:5f:83:bb:4c:03:44:95:63:c9:17:d8:b2:30:a7:
60:4b:22:cc:a9:e6:7e:16:47:cc:51:5f:4b:fc:29:
78:86:b2:73:cc:62:66:bc:29:f4:47:bf:b2:02:a8:
cd:3c:89:3f:6d:59:f5:54:ab:04:13:c8:3c:2f:11:
29:6d:0d:b5:90:98:6a:45:c3:27:c0:e4:f4:35:c6:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:33:27:77:13:33:BF:45:A6:A1:8B:56:C6:CF:6A:B2:69:2E:92
X509v3 Authority Key Identifier:
keyid:23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1f:ae:2e:47:0d:a8:5b:ef:9e:4f:35:14:a8:02:8e:22:37:
9f:35:c0:8b:83:78:d9:85:2b:2f:68:8f:60:b8:75:03:36:36:
b6:99:b7:74:19:28:e1:49:c8:fd:6d:7f:90:ae:c9:41:1f:27:
40:15:a8:60:a9:db:3b:9a:51:c9:e4:db:a2:11:53:00:de:65:
83:29:04:42:bb:c9:62:e4:1d:ca:b4:1c:cb:bf:c6:09:13:b5:
d1:58:76:fd:19:3b:19:fa:08:28:11:68:88:04:e6:99:fd:4a:
8a:cd:ed:d1:07:da:b9:54:71:4e:1f:b1:4f:4c:50:e8:0a:93:
e8:f7:21:41:bf:19:c6:95:60:37:a5:83:a8:d6:19:c8:0c:09:
20:69:17:e3:a8:fc:8e:cb:75:87:a5:26:7a:8b:5f:f8:2c:31:
0a:a5:57:00:4f:3c:b7:ac:b2:eb:db:5b:20:de:bb:7b:17:50:
3c:bf:a3:32:e0:f9:4b:71:7f:e1:99:54:fd:ac:0f:fc:c9:66:
68:8e:7f:25:63:93:a6:c8:9b:b2:4d:73:e6:70:2e:fe:37:65:
cc:5b:00:88:c3:0e:e2:6a:76:cc:4c:78:74:dd:d8:14:79:88:
3c:00:d8:29:a3:12:ed:99:12:80:61:2a:e4:e2:07:a4:a9:3c:
0b:ae:47:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:04 2026 by rpki-client