Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: lUomDBmR6wCenaNTcmbyXb5WBRl7Aqi0sb/km9LaZGc=
Subject key identifier: 86:26:2C:19:B6:7E:FC:DD:2B:D3:95:6C:F0:F6:A1:9F:87:E9:CB:08
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 019D25F1E0C1301A7AA7F18827FCFF9FB379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 1432
Signing time: Wed 25 Mar 2026 17:01:41 +0000
Manifest this update: Wed 25 Mar 2026 17:01:41 +0000
Manifest next update: Thu 26 Mar 2026 17:01:41 +0000
Files and hashes: 1: 2dwCjqUUqCKWVJ6DvVzwdYlDvXQ.roa (hash: DPrgb6Kgdw0KIjv41bfjhUKWYAfrl79h2DWiUA8CcIQ=)
2: IMFLS8lmXO1X5kPh5brIEnkKfS4.roa (hash: w30MlBbSWaBo/k7+866HLmrY83fawU5Z9usPbYOh250=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: fwmuGCrBjYjNjwvwz/z8+SjBrpylTDGz0qW1RgZ7edQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e0:c1:30:1a:7a:a7:f1:88:27:fc:ff:9f:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Mar 25 17:01:41 2026 GMT
Not After : Mar 26 17:01:41 2026 GMT
Subject: CN=86262c19b67efcdd2bd3956cf0f6a19f87e9cb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:f4:eb:e7:54:47:42:34:1c:82:d9:fd:5e:
d6:94:0f:8d:87:20:1e:ca:ef:2f:73:78:7d:e1:74:
af:58:cb:a3:dc:1a:48:16:2c:5b:77:e7:3d:cf:da:
6f:09:57:16:ec:22:57:4c:b1:94:ac:3d:db:2b:52:
14:02:be:9a:0a:b7:19:43:b2:a1:a9:a0:e1:a7:4e:
f3:19:5b:75:30:34:82:54:d2:6e:fa:96:7b:f8:d4:
94:19:8c:c8:64:e7:20:e3:d1:46:ab:db:46:77:b2:
a3:3c:0a:1b:74:15:06:48:86:26:25:b9:c7:f7:fb:
70:5a:c1:35:59:a6:69:60:1c:4e:83:20:eb:e8:14:
20:6e:1b:f2:af:ca:c8:cc:af:69:33:61:8d:c8:66:
8d:a8:be:1f:a6:66:af:4d:55:26:6a:02:ba:6f:dc:
da:a7:0e:60:98:a8:bb:69:6f:b0:d3:b3:1c:55:13:
ef:3c:29:4f:a1:b7:9e:99:f0:be:ff:ed:9b:6c:21:
e3:7a:ae:3e:5f:4f:83:bf:47:f5:97:fe:03:da:b0:
2a:46:99:75:e5:21:7d:90:e2:e3:a9:36:30:5f:3a:
95:53:e1:a6:dd:6d:4d:5a:cc:00:5b:2c:05:25:31:
94:ca:c2:21:09:f5:e8:e9:46:e9:b4:7b:f6:ef:cf:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:26:2C:19:B6:7E:FC:DD:2B:D3:95:6C:F0:F6:A1:9F:87:E9:CB:08
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:49:1c:c9:cf:72:f3:f6:63:32:35:d3:13:f3:1c:08:a5:dc:
bc:75:5b:56:ff:ef:9c:df:8c:74:ee:c3:e5:60:02:f8:a7:49:
0b:a6:52:ba:bb:a4:81:5d:f5:5f:cb:fa:dc:05:ca:de:18:4f:
bf:37:ab:29:a5:0b:ef:a9:1f:fd:47:1a:31:54:18:10:f1:4c:
bd:08:1a:d4:78:9a:aa:93:b2:13:f3:a3:bb:35:bc:e6:11:68:
a2:f9:37:0c:2c:29:ea:90:1f:21:1d:e9:8e:66:fa:89:5f:a9:
71:56:01:46:aa:a2:27:b3:d2:bf:ee:82:0a:16:b4:4c:30:18:
a2:e5:fc:6d:44:9c:43:e9:91:10:19:5b:47:88:ac:e0:ef:29:
f8:9f:32:ab:64:be:33:02:44:97:60:43:59:95:e7:6c:f6:6e:
46:75:e5:93:ce:ba:46:b3:52:bb:dc:92:8f:66:9d:85:83:9f:
ce:92:e0:a1:4f:95:05:74:0e:b0:df:7a:a5:13:45:eb:fb:1f:
7a:4a:0c:31:12:6a:33:10:7a:fe:07:2d:68:e8:a1:17:29:ce:
dd:e5:7a:ae:d9:41:cb:ed:ff:19:cd:f0:45:4a:97:84:08:a3:
c2:05:85:28:43:f4:40:bf:e2:70:07:60:f2:ad:05:0d:47:d2:
7d:fa:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:02 2026 by rpki-client