Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: TAa8fnoI6v+mCRQYVlfVSXRU3F35rJnQ9hvIjkJCXEM=
Subject key identifier: FB:73:16:94:61:41:5C:1D:4E:3A:27:C5:4E:29:6D:39:AF:12:9F:BC
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 019D284DD0C5793739F722B5BEC5B77BE67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 11B7
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: whln/XVHw2rr3RBRdiJ2vhIX57VVOf6qpcjDvM8KQgk=)
2: v2k0Z2ANI4HpUtzeG5E2tPsoW1g.roa (hash: tCUybVD79wplSeTPTl/iXVsu/t1DC6P3qKe+acUwYhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d0:c5:79:37:39:f7:22:b5:be:c5:b7:7b:e6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=fb73169461415c1d4e3a27c54e296d39af129fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:af:b6:2e:ea:5f:b3:0f:7c:7b:7a:5d:4d:
94:6d:61:34:b6:3f:f9:2b:ca:6a:16:6e:42:5d:34:
dd:30:cc:26:b5:13:03:d4:63:aa:30:1d:df:73:b1:
e1:5b:a8:d1:96:bd:91:75:6f:f4:50:09:34:a9:9e:
74:4c:66:e2:1a:b9:1f:d5:c2:8b:02:18:29:c2:c0:
2f:91:b5:f1:1b:57:b5:77:71:33:34:a6:8b:fe:3a:
57:96:ac:b2:00:15:97:05:33:b7:ea:6e:5d:c0:93:
29:41:21:db:1f:66:0a:69:5c:7d:dd:11:94:24:72:
14:25:0d:1e:3b:e2:d4:98:9f:de:07:5c:9f:aa:40:
90:06:b0:47:43:87:f5:ab:63:f9:b1:eb:f8:fe:e7:
80:7d:b8:1b:d2:12:cc:f5:87:88:8e:7b:30:67:f7:
e3:d3:f8:3d:b3:c0:19:f7:be:66:c0:ec:c0:e4:68:
eb:18:ef:38:a3:fd:fb:57:65:c6:12:40:13:7b:e2:
39:d2:a9:98:c1:d1:e1:6b:c9:d3:79:8d:c5:8e:40:
26:6c:67:91:27:d9:0d:d9:e6:de:6e:47:7c:63:83:
63:b3:3c:11:a0:19:4b:44:29:9e:ba:32:90:93:32:
5c:00:d1:92:ab:9c:31:56:db:0f:71:0b:b7:ed:57:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:73:16:94:61:41:5C:1D:4E:3A:27:C5:4E:29:6D:39:AF:12:9F:BC
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:e9:ae:d3:6b:6f:ea:5e:8a:c6:32:31:c6:50:65:74:25:
56:2c:c0:0a:56:94:12:46:17:02:9a:0b:97:af:fb:e5:63:fc:
31:be:7d:02:e5:0c:55:0a:fa:55:9a:df:f5:fa:bb:18:09:65:
5b:6a:5b:dd:3f:83:b2:98:43:a9:6b:44:6f:08:40:04:c2:0d:
ff:d7:65:f2:d4:77:94:69:20:ea:e2:fd:54:0e:e2:db:ba:cc:
19:68:39:c7:09:fb:9d:86:a8:8b:31:c2:8b:5b:83:5f:34:ff:
6e:27:0d:32:36:2e:73:98:2e:55:ea:0e:1f:1e:31:45:2f:36:
91:ac:eb:82:23:eb:17:09:15:d9:fa:70:38:28:2b:da:2d:ac:
af:50:57:78:2d:dc:17:30:87:96:79:0b:a2:0a:03:bd:e0:4b:
3f:36:1b:05:3f:cd:a3:da:f3:50:b8:49:df:99:5d:39:4e:43:
bf:f7:05:ad:c6:5a:a2:a0:28:ef:ea:18:5b:b7:01:cb:79:f7:
3c:86:af:41:c1:c7:5b:f0:9c:69:3a:56:12:8a:0f:34:78:ee:
0d:4b:55:b7:56:a4:44:a0:e2:b9:84:33:48:cc:4e:76:3a:77:
59:f1:ba:24:3d:62:b7:75:b6:f2:14:76:c4:86:02:91:e9:3d:
8f:fa:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:54 2026 by rpki-client