Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: rCKMnY81FG7K/7n+go+CdFBRYxySyOOe+hjvMwqd+Fs=
Subject key identifier: 43:F9:17:55:71:4F:25:11:3D:EE:B1:07:51:74:CF:CE:9B:86:88:00
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 019D2B1773CD42A63D010844FC0E2BB6D899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 067D
Signing time: Thu 26 Mar 2026 17:00:50 +0000
Manifest this update: Thu 26 Mar 2026 17:00:50 +0000
Manifest next update: Fri 27 Mar 2026 17:00:50 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: iCyE22WZw/iWPNUZ3YyJTGQi+79ydMT+ztEtMXPH0aE=)
2: Iqa6GV4LdxiGIroWsllGP7YjyE4.roa (hash: Q0wZliLvPv9FNmdy4NB+Qu2Fy5dB0KdoE1fdtaOiLGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:73:cd:42:a6:3d:01:08:44:fc:0e:2b:b6:d8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Mar 26 17:00:50 2026 GMT
Not After : Mar 27 17:00:50 2026 GMT
Subject: CN=43f91755714f25113deeb1075174cfce9b868800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:9a:96:e9:2c:a6:cb:29:85:7a:c0:c3:54:
49:d4:a4:7c:2a:a8:13:ab:b9:c3:9f:8e:82:f0:f6:
2e:eb:a2:97:53:fa:21:af:a5:c0:4b:3e:73:51:4e:
1d:80:9f:0c:ca:a6:c1:d8:e1:93:c4:e9:af:d3:da:
4c:90:91:70:85:8d:6b:36:db:3f:a4:fc:89:16:f8:
ec:1b:7a:e5:aa:8e:c4:a1:80:b1:ab:cc:e6:b1:a5:
63:23:3f:38:8a:ff:c7:89:d9:58:06:93:e4:5c:d8:
5c:3b:fb:6f:b2:b3:c4:90:dd:68:b5:66:0f:59:0c:
3f:cf:5d:7d:d4:2c:c3:db:f6:93:50:96:2b:34:72:
83:ff:9b:ff:41:da:7b:32:5e:20:30:92:bb:52:b5:
6d:ce:12:83:a0:76:aa:da:3a:69:0f:3c:c4:1a:b1:
0f:83:55:14:4b:05:c6:f3:39:02:13:a7:8d:43:74:
3a:38:c1:f8:14:c3:ef:50:f0:c1:04:84:a3:f1:70:
b9:52:86:df:7e:68:d1:5a:98:0d:e0:30:0e:ad:0e:
86:12:1b:d0:9b:8c:bd:ea:6b:89:5a:01:6d:fb:0e:
5e:20:ac:40:e6:48:ff:35:9a:e1:39:c8:25:26:d3:
74:1d:8f:f0:13:1c:dc:2c:5e:97:2c:ba:65:27:a2:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:17:55:71:4F:25:11:3D:EE:B1:07:51:74:CF:CE:9B:86:88:00
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:99:5a:f7:6e:00:15:d6:2b:85:6c:b5:a1:b6:b2:91:df:39:
bc:bb:c3:02:60:9a:b1:37:88:1b:9e:3b:33:74:90:e1:30:e5:
65:74:ff:02:5c:bb:bb:b4:30:74:d7:8f:91:02:4b:d7:11:89:
74:d1:0b:6c:72:04:95:e5:26:fa:01:80:77:db:89:82:44:48:
c4:01:a5:04:d9:a7:ab:6b:ee:c1:00:69:d8:86:af:e8:d8:b3:
d7:5e:0f:89:67:34:b8:6e:42:7c:d8:e8:ac:c5:e8:bf:a1:7f:
6d:87:91:03:93:41:7d:c6:fa:db:ec:61:38:b7:7d:8e:ce:83:
e6:b0:54:30:8d:0b:89:0a:4a:b6:f0:c8:9e:21:c7:c3:86:0a:
c6:2b:4b:97:3d:c2:8b:2b:08:ce:27:c6:cd:4c:d0:1b:dd:6a:
bf:fa:b6:c5:82:c7:f8:5a:b7:91:3e:9d:fd:f4:82:08:4b:16:
95:d3:a8:33:da:54:fc:06:00:61:10:36:80:1c:73:d5:cd:dc:
26:62:a8:59:cb:67:37:a3:6e:29:b5:3f:48:52:9d:cd:91:c7:
32:c9:65:b3:51:f3:11:ef:23:61:2d:c7:45:b3:c2:48:9d:fd:
cc:07:8a:7a:f0:b0:e3:0a:a3:c6:6a:5e:c7:1a:7c:e9:71:8a:
d8:a6:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:13 2026 by rpki-client