Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: eFltgupRbwbK9nWySO/lbPJL8oaO0YyK6CkeSZl9fjk=
Subject key identifier: A0:B9:13:98:8B:2D:A3:FF:A1:B7:40:B6:07:3C:76:E7:69:F0:F9:1E
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 019D27A8C801F28D630DE5329C5E6E6E0510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0FAE
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: 6g9Sdo-eJYElfuGgjU1PsahjZn8.roa (hash: Q4WRD5ukCrgnTo+xu8mbOedNwPrNG14LcRDJEgtOWxI=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: 1M9sY3O5lzUdW66ydm4fKYQq4BeORc1mXO5vUcnUupo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c8:01:f2:8d:63:0d:e5:32:9c:5e:6e:6e:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=a0b913988b2da3ffa1b740b6073c76e769f0f91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:42:c8:0b:ff:dd:ea:12:4e:83:98:40:c3:
67:00:83:48:95:48:ee:5d:a1:83:f8:ea:ec:e2:02:
90:c4:06:b1:fe:7e:13:09:0b:e6:8b:69:ac:bb:01:
ed:ae:85:ed:9b:75:cc:b2:54:fa:21:17:cf:2b:c4:
74:f8:b4:d7:2e:cf:63:06:e5:7f:12:14:af:52:21:
ed:58:b6:7f:39:d2:3a:81:89:9c:a2:74:3b:ee:68:
8c:bd:89:2e:68:e8:98:70:1b:81:ce:11:ce:c4:b1:
3e:d2:2a:39:58:53:59:ad:11:f0:f3:f6:ab:99:59:
15:bf:9a:c1:4d:24:5b:3b:d8:ad:f1:8d:00:79:d9:
5f:4f:60:9f:08:e9:fb:4e:3e:74:47:8f:d5:2b:67:
11:02:50:ee:e0:8b:da:bd:27:91:5c:69:c6:cc:6c:
00:f8:d2:39:cb:13:d0:d8:c8:2a:e4:34:86:0c:f8:
fc:29:f0:8a:78:d1:99:ff:c7:27:cc:5e:72:25:8d:
ab:52:ed:63:50:56:b3:82:05:49:ea:c1:02:f7:e9:
8a:82:ab:c8:24:a9:34:60:dc:c1:a9:70:0f:e0:a2:
3a:31:c6:3a:af:a5:8a:c1:e9:ff:fe:a3:a5:46:d4:
84:14:fe:ce:0f:44:88:62:49:29:e1:e6:c7:1b:24:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B9:13:98:8B:2D:A3:FF:A1:B7:40:B6:07:3C:76:E7:69:F0:F9:1E
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:19:eb:aa:41:54:76:29:28:07:e0:7b:00:64:3d:61:36:51:
bb:a8:7a:a0:38:cc:f4:42:44:5d:4a:31:0f:e6:83:e1:1e:ab:
65:8a:6a:75:89:a6:e6:c8:14:5d:e4:5b:a3:ef:0e:e3:e1:b1:
bb:29:b2:16:24:5c:9f:d2:5e:4a:74:5b:2a:39:3c:ca:3e:1c:
33:cb:00:e1:66:6d:47:c3:1b:21:20:64:95:ef:67:0d:d1:3f:
10:9e:f1:7d:e7:80:4f:d9:c0:01:9c:9b:78:ae:8b:5c:11:39:
9c:e8:12:cd:82:d0:b2:ee:fa:57:42:0d:c5:47:5a:70:5f:9e:
d0:69:fd:5f:3d:4f:5b:40:95:13:4b:a3:f2:05:0c:b9:7f:4a:
33:05:a8:54:78:31:e4:ac:ef:0f:88:61:2a:c3:29:64:d0:60:
3f:06:f5:27:4b:f7:61:62:04:09:e3:d5:5c:91:97:2c:b8:5c:
8d:d0:1d:86:c3:1d:56:7b:55:ea:dc:04:92:6a:17:f4:cd:a8:
97:cb:99:be:38:eb:04:e1:74:03:88:b5:2c:ec:a5:44:68:02:
97:bf:fe:9e:cf:f8:ee:40:31:dd:09:c1:9b:ff:b7:3d:b6:4f:
d0:d6:21:13:b2:e9:64:55:a3:98:6c:4b:b3:a5:de:50:7c:a0:
35:e0:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:53 2026 by rpki-client