Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: WaqYZXur7st1jynryNliLTRRRKKEvrETtOkstnjU1/E=
Subject key identifier: BD:2D:64:CD:8F:10:DB:AD:A4:F6:DF:62:B1:A0:07:FD:6D:E1:FB:90
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019D25F1FE80E5EC75265185DA18B73F3A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0C20
Signing time: Wed 25 Mar 2026 17:01:49 +0000
Manifest this update: Wed 25 Mar 2026 17:01:49 +0000
Manifest next update: Thu 26 Mar 2026 17:01:49 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: Ypu2vdleqjuBnegPExE7TSMQO7RNEsZbsz99FL3pMPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:fe:80:e5:ec:75:26:51:85:da:18:b7:3f:3a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Mar 25 17:01:49 2026 GMT
Not After : Mar 26 17:01:49 2026 GMT
Subject: CN=bd2d64cd8f10dbada4f6df62b1a007fd6de1fb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:4a:2d:95:e6:50:a3:37:5a:1a:a3:ff:5e:
6f:ca:1f:6f:52:d6:84:08:ce:c5:5a:3d:b2:4b:9a:
c8:99:f0:a8:fe:bf:99:00:63:71:fe:5d:d3:52:02:
eb:08:94:27:7e:10:0d:7f:ca:4a:d1:39:2e:71:31:
84:f5:30:de:67:0d:91:1c:88:d9:84:5f:92:3e:4d:
e8:b5:04:76:d4:ec:f0:00:ff:67:c8:6d:3e:ed:db:
d1:ea:70:0c:57:de:1f:60:a2:a9:b1:65:3d:16:aa:
5c:7e:71:6d:5e:94:d2:86:52:1b:92:27:3a:53:05:
a0:aa:3f:fc:7d:68:01:05:e5:43:f2:fb:77:cd:55:
03:28:ac:58:41:32:ca:db:39:63:ee:6e:5f:b5:fe:
ab:fb:4f:b4:2f:16:e3:97:b8:08:0f:98:ae:ae:1d:
1f:de:0a:06:74:7c:d7:3e:5e:0e:8e:6b:e8:94:3a:
1f:33:dd:72:c5:40:20:88:f1:78:d3:83:43:f1:9c:
1b:48:a0:e5:5a:99:00:05:17:e8:d7:eb:d6:60:a5:
d0:96:a1:d0:fd:a9:e8:0d:b7:be:ba:b0:30:4f:89:
db:14:56:01:36:4a:0b:72:fc:73:19:c1:9c:17:9c:
e7:0d:6e:84:d3:87:35:c2:bd:b3:5c:42:27:cd:01:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:64:CD:8F:10:DB:AD:A4:F6:DF:62:B1:A0:07:FD:6D:E1:FB:90
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0a:26:3f:8a:9d:92:6d:77:48:06:6f:db:e9:51:71:1d:37:
e4:19:37:0e:51:cf:3a:d7:44:d3:a6:7f:84:01:70:00:53:f2:
2c:e2:9b:74:79:a4:81:48:3f:99:60:02:88:4f:7a:42:cb:61:
ab:69:4d:b2:5d:4e:26:54:94:20:f6:80:8e:7d:bf:24:55:ee:
b0:9b:84:d8:c9:68:d3:d6:28:ed:72:44:d4:41:0a:b2:6f:22:
3b:a8:da:10:45:4a:b7:6e:0c:3b:8c:3b:08:3c:39:ac:c5:0f:
fb:df:b1:a2:b3:4f:64:71:85:ac:b7:b5:ea:1d:0c:0a:dc:d6:
2e:02:d2:38:7d:ae:f5:f9:c8:4b:a0:54:4e:21:d8:6d:c3:ff:
6c:cb:af:87:8c:bb:1c:d0:1c:a6:ad:8b:0e:38:85:46:b0:d4:
22:d6:6e:e8:f7:5d:9d:9c:b1:c3:ba:c9:e6:c3:aa:1f:b1:3e:
a1:97:da:02:0b:cc:7f:47:f7:ab:83:8d:10:30:d9:78:c9:49:
59:a7:70:19:03:11:16:f3:48:6e:60:9a:0b:ad:fb:ef:9b:b3:
27:9f:c6:dc:ea:0a:bf:41:eb:58:e3:9e:7b:05:58:7b:ce:31:
5f:e6:d1:33:d9:b9:72:e8:81:84:64:03:07:6d:85:7a:35:bf:
b0:4a:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:31 2026 by rpki-client