Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: AK2Oq/rU9VI0BfyAjUGtiJ9EqNOI8gxWLO+C+HTId3k=
Subject key identifier: DC:D7:FF:3E:82:32:EB:28:72:9A:8F:21:52:C1:2F:16:32:E3:27:37
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 019D2583DEB77A9B92216CC9889DE69A47B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 046D
Signing time: Wed 25 Mar 2026 15:01:32 +0000
Manifest this update: Wed 25 Mar 2026 15:01:32 +0000
Manifest next update: Thu 26 Mar 2026 15:01:32 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: Nc0k2PXLLdX6WN/xhBcQViPmIc9kzBcyGnMIwycYc7s=)
2: PPCzo4aoB52WIulHl2b-W42AOQQ.roa (hash: v7GTmELXw/VVFQyWL5TMg5z0A0nUbHsal/nQ+BR/mNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:de:b7:7a:9b:92:21:6c:c9:88:9d:e6:9a:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Mar 25 15:01:32 2026 GMT
Not After : Mar 26 15:01:32 2026 GMT
Subject: CN=dcd7ff3e8232eb28729a8f2152c12f1632e32737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:91:ee:e2:27:04:46:c3:75:7f:94:c1:c8:
b1:69:81:c7:62:86:c7:5f:69:35:b6:4e:65:67:0d:
9f:74:e1:f5:22:f9:0a:22:f3:dd:5d:03:6d:07:ed:
00:a8:af:08:e9:eb:5a:c6:67:d8:40:31:77:49:fb:
d1:29:7b:b1:b2:ae:ce:c9:29:8c:5c:6c:a1:fa:b5:
47:6d:70:b0:8f:b0:3d:1f:31:07:2d:62:38:49:c5:
e5:69:3f:f8:38:49:a1:2f:a8:2f:aa:31:31:44:0e:
3c:24:c1:39:8a:a3:57:4e:74:b7:f1:0e:bb:3f:5f:
36:8c:1d:ab:c6:81:ac:48:7a:59:c8:61:af:8f:4a:
99:ae:16:5f:48:6a:4b:eb:15:e5:c6:45:34:76:45:
81:9b:40:92:cd:48:db:e3:42:79:31:e5:c2:9c:60:
28:c7:26:f9:15:bb:76:96:49:61:83:8e:40:e3:db:
45:19:8a:a9:c5:51:3b:06:3e:4f:33:78:3b:12:d0:
ce:dd:b3:86:0e:73:a4:78:55:a7:94:6c:df:5f:c5:
8a:75:a2:7b:04:b7:3b:6e:2d:52:f9:de:c7:15:c7:
0e:af:88:f2:25:b4:27:55:ad:2b:7d:ea:f8:a5:1a:
33:a7:46:d5:df:0d:16:be:b7:43:aa:5b:44:cc:a5:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:FF:3E:82:32:EB:28:72:9A:8F:21:52:C1:2F:16:32:E3:27:37
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6f:0b:a7:40:72:3d:a5:02:19:b1:80:e0:bf:a4:d6:f3:89:
39:4d:8e:4c:1c:5d:13:f1:1c:a5:34:f1:10:ba:88:28:bf:6a:
c6:87:dd:79:07:59:59:a6:40:48:e5:94:b0:e3:0d:fb:c4:9d:
40:47:3a:ca:63:8f:ca:16:03:ee:34:64:56:2e:03:ba:d4:41:
c0:fc:cd:4e:d5:75:eb:a9:af:36:68:f3:8a:58:be:5e:1a:91:
64:4f:ae:76:b1:82:97:9c:82:a2:8d:a8:1d:17:c5:80:63:48:
c2:24:f9:ad:5a:b6:97:5f:91:d2:aa:23:3e:48:1b:a5:be:17:
19:8a:de:e2:32:1d:1b:25:c0:a5:59:63:d7:28:61:ae:81:c9:
b4:27:0c:76:1c:5c:19:d4:6c:90:0e:c0:2b:5e:17:cd:38:06:
0a:7c:f1:61:fd:e5:37:f1:5c:46:50:9d:74:e8:ce:51:56:8a:
b3:76:57:1e:a5:ab:f3:02:5f:89:2e:7c:66:f8:b6:df:13:2e:
25:d9:ed:f8:ca:66:f6:4a:86:62:e5:bc:b9:70:96:c9:ed:e1:
81:6c:97:38:72:b4:9e:6a:53:13:c4:b1:e3:56:d2:f2:4c:a7:
cf:f9:c6:c2:cd:02:3b:cf:a2:97:4a:3c:b6:77:08:73:91:6e:
3a:e1:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:54 2026 by rpki-client