Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: sW3db3D1vk4X+78jgu40AZePf5uxGijbUINo2ODNoXQ=
Subject key identifier: E5:FD:6E:F2:40:2F:8B:CB:6C:8D:4A:C2:0B:4F:71:87:AA:F2:28:F4
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019D27A8B3F27A442C59C14109958A4C787B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 03BF
Signing time: Thu 26 Mar 2026 01:01:00 +0000
Manifest this update: Thu 26 Mar 2026 01:01:00 +0000
Manifest next update: Fri 27 Mar 2026 01:01:00 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: mlPDtRbx+0TTmcfJs2XARXC/ByAzTqKGy1fPxMXz0Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b3:f2:7a:44:2c:59:c1:41:09:95:8a:4c:78:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Mar 26 01:01:00 2026 GMT
Not After : Mar 27 01:01:00 2026 GMT
Subject: CN=e5fd6ef2402f8bcb6c8d4ac20b4f7187aaf228f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:75:a4:87:6c:3d:6e:f3:0a:e9:1a:dd:a7:a0:
a9:58:57:60:f6:5d:2e:de:c2:b7:bc:eb:cd:72:4d:
42:68:2c:19:0f:3b:09:03:92:da:07:6c:87:38:28:
97:51:0f:53:ca:d5:5a:4b:4d:6e:5e:f5:1a:cb:64:
b0:8e:7f:81:61:b0:b0:f9:fc:6a:73:ca:38:5a:c2:
d0:bc:5b:37:ae:53:26:37:d3:53:46:30:3d:1a:72:
b3:9e:a9:58:e9:e4:d8:05:ef:69:4f:53:c1:1b:92:
a5:e3:44:af:e4:54:12:de:53:e9:54:c8:5c:ef:b4:
a2:fc:06:ae:8a:b1:83:7d:9d:11:93:e0:8c:c0:c7:
06:38:20:f5:1e:ba:25:05:c6:32:03:f7:21:3e:e1:
16:11:ea:0b:fe:ae:00:f3:11:7f:93:82:46:eb:ac:
f0:22:79:9f:5f:c3:c1:03:4c:dd:64:8a:c9:88:49:
29:7b:16:3d:6d:b1:99:09:80:92:f0:4f:42:e8:c8:
d1:d2:63:ac:5f:b2:dd:b2:fb:12:34:bb:21:49:da:
34:e9:34:09:33:b7:fa:cf:ab:bd:90:ec:6d:59:43:
21:5c:b8:53:fb:17:2f:f4:72:d2:33:54:9d:90:e7:
94:40:4f:5c:b2:28:51:71:54:61:86:60:99:29:34:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:6E:F2:40:2F:8B:CB:6C:8D:4A:C2:0B:4F:71:87:AA:F2:28:F4
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:85:87:26:89:16:81:d6:5c:fb:42:d5:a6:a0:bd:2a:1a:e6:
11:43:fc:5f:09:fa:4b:03:1e:74:8d:82:3e:0c:1e:53:ea:d0:
25:59:a6:ad:6c:69:75:f9:9f:51:cb:28:c3:6a:ff:48:d8:ed:
ea:8c:84:2e:de:a4:fa:e4:fb:ae:ef:b3:11:4d:90:69:a5:f1:
1e:c4:b8:00:a3:92:18:e4:51:25:e1:06:2d:6c:91:6a:80:7b:
50:1c:9d:4f:84:76:c8:a3:94:8c:e7:f6:11:91:0c:4a:15:d8:
4c:6c:18:97:8d:95:13:78:1a:cd:38:e6:b3:e5:79:78:4d:7f:
8d:93:1d:47:2e:ec:28:35:57:9e:d9:56:01:ce:5b:59:7e:e9:
b0:fa:e6:f2:99:36:2e:14:14:ae:14:f2:e4:e4:7c:de:0b:ae:
4f:a8:25:ac:b7:9b:8f:0e:9a:3d:d2:e3:2b:39:50:27:3e:be:
70:e3:63:bd:4a:d1:98:96:df:c9:29:7d:89:eb:45:ad:c7:bb:
5e:5b:6e:a9:d4:b0:64:b6:0e:a4:4f:b8:9d:86:46:58:ed:df:
84:69:ec:06:c9:7c:2e:8c:f7:35:fe:09:5c:a2:6e:60:93:6c:
5c:7d:bd:55:14:37:8f:9e:e4:5c:6a:30:c4:27:d6:f2:bd:36:
3f:b3:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:16 2026 by rpki-client