Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.mft
File: IGLJwSwIp5WYErNNMX13grPYLwU.mft (raw, json)
Hash identifier: FarXunzFng0Mrl2AA6Qvc+n289ASVv+wJIDbEeNV/UM=
Subject key identifier: 67:D6:E2:E9:B6:43:9C:5F:D5:27:AA:86:B9:23:1C:E3:DC:DB:A9:3D
Authority key identifier: 20:62:C9:C1:2C:08:A7:95:98:12:B3:4D:31:7D:77:82:B3:D8:2F:05
Certificate issuer: /CN=2062c9c12c08a7959812b34d317d7782b3d82f05
Certificate serial: 019D333E9D3E2CC5EC2EE598FB3399B8238E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGLJwSwIp5WYErNNMX13grPYLwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.mft
Manifest number: 64
Signing time: Sat 28 Mar 2026 07:00:34 +0000
Manifest this update: Sat 28 Mar 2026 07:00:34 +0000
Manifest next update: Sun 29 Mar 2026 07:00:34 +0000
Files and hashes: 1: IGLJwSwIp5WYErNNMX13grPYLwU.crl (hash: UlFIAYkD8Kbble/Pa74855HiYoXXedsVALKmFtZyDCk=)
2: zzlsF4Xp-2g3kdOzD_AQotPWeq0.roa (hash: 6twY1FP2v5Tf8Xd5vkvELq4q/kv6AMQbmenIZQFKoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGLJwSwIp5WYErNNMX13grPYLwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:9d:3e:2c:c5:ec:2e:e5:98:fb:33:99:b8:23:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2062c9c12c08a7959812b34d317d7782b3d82f05
Validity
Not Before: Mar 28 07:00:34 2026 GMT
Not After : Mar 29 07:00:34 2026 GMT
Subject: CN=67d6e2e9b6439c5fd527aa86b9231ce3dcdba93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:53:07:0c:3d:83:8d:e2:e2:89:05:67:fb:
88:6f:55:23:3f:25:bf:b2:fc:31:6e:dd:d2:93:8d:
60:db:d2:fd:e7:fb:cd:90:87:db:96:6a:f6:6b:ce:
82:43:b6:c6:22:3f:ed:e4:a2:b9:d6:50:8d:46:1c:
d1:75:0c:29:59:17:ab:52:a6:78:87:01:4f:9b:b5:
5d:1a:4f:99:0a:3f:4b:36:7a:6e:b1:10:1b:07:00:
31:03:6e:33:48:70:f7:1b:4b:e9:cf:f6:87:f2:ce:
93:c0:d1:e2:ea:bf:c8:5f:53:7d:0b:de:e2:da:18:
c8:51:9d:ea:2b:cb:0e:d2:ef:56:9d:01:40:67:56:
35:3d:f7:44:c7:44:d2:1f:56:44:f3:ee:1a:75:9a:
e1:7c:4f:cf:c0:0d:39:2b:18:af:0d:e2:70:05:4b:
2b:9b:10:3d:d3:7c:30:5b:45:f5:98:30:77:0d:3f:
37:b4:8e:a1:bb:ee:0f:88:3c:ac:68:c0:fa:5b:c4:
47:1f:33:88:16:cb:e7:b0:a9:c2:6c:cc:e5:97:d6:
3d:7e:88:d2:bf:61:05:b0:14:6d:e7:96:dd:e3:6d:
99:99:1a:67:ea:1c:6d:5c:bf:63:73:f6:c3:34:7d:
fb:eb:35:1e:6f:6e:d6:d7:32:d4:65:ed:aa:55:1f:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:E2:E9:B6:43:9C:5F:D5:27:AA:86:B9:23:1C:E3:DC:DB:A9:3D
X509v3 Authority Key Identifier:
keyid:20:62:C9:C1:2C:08:A7:95:98:12:B3:4D:31:7D:77:82:B3:D8:2F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGLJwSwIp5WYErNNMX13grPYLwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fb:89:09:18:d4:e1:e6:30:02:90:94:8d:75:e8:02:9e:14:
a8:e6:f1:f5:96:ad:01:fe:bf:df:92:6f:30:cd:ab:86:e3:11:
2e:94:69:06:29:8f:f6:a4:fe:fd:9d:f6:96:da:89:8f:c8:37:
5e:ea:c3:60:73:d1:3e:7f:e7:d5:73:85:74:bb:ef:ba:9c:56:
fd:06:fb:08:46:9a:79:bf:2e:d3:64:ca:0b:dc:35:24:e0:c1:
f8:fa:5c:e1:82:16:93:a0:6a:4a:37:25:16:1b:89:0e:f8:0a:
ab:50:21:43:56:be:cb:a5:01:56:de:4d:14:fa:4e:5a:3b:b5:
08:c1:94:52:52:4a:7a:ec:7a:e9:27:06:d6:85:60:2e:f0:ed:
90:af:a6:b3:ea:64:9b:d6:f4:01:3b:3f:55:fc:68:7c:12:21:
66:be:f8:86:3d:1d:af:76:eb:64:3f:ca:b8:f3:c1:42:20:27:
7e:8d:15:d2:7b:9b:c5:8b:a1:85:05:91:46:ad:a7:76:ed:30:
6a:cb:d8:eb:36:2d:97:5c:df:ec:d4:10:ed:65:47:a7:7d:89:
17:e4:2f:68:64:2f:a0:5e:61:e0:bd:aa:63:4a:c4:d4:d9:bf:
ee:f3:70:62:23:57:9e:35:ba:94:a4:b7:f1:b2:14:4f:93:d4:
52:3b:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:38 2026 by rpki-client