Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: JZimsJnTMBj1dnDdTehM/P92LIAKT0YwMf55NOEo7EY=
Subject key identifier: 61:59:32:33:AF:CB:C9:8E:30:EE:8C:F3:F9:E1:18:6B:78:38:36:D3
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 019D33084EA6CE23546B4D1EE8CC4ACB0757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 0BAD
Signing time: Sat 28 Mar 2026 06:01:15 +0000
Manifest this update: Sat 28 Mar 2026 06:01:15 +0000
Manifest next update: Sun 29 Mar 2026 06:01:15 +0000
Files and hashes: 1: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: KYzT+MEwN+BRyw+PQ8xxH5XmooZcJA3zu7sGK0EGo6A=)
2: X5cruhSfs-bcqraXt11JGdkkWoM.roa (hash: ZSQ2DG8b3yrrUNbqmElYxiRoLHUdomd9OU/pi5rywfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:4e:a6:ce:23:54:6b:4d:1e:e8:cc:4a:cb:07:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Mar 28 06:01:15 2026 GMT
Not After : Mar 29 06:01:15 2026 GMT
Subject: CN=61593233afcbc98e30ee8cf3f9e1186b783836d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:3c:35:a6:60:e4:01:0f:b7:7d:42:68:99:
08:21:30:f1:6b:8e:56:fc:77:5d:a3:a9:e0:72:99:
a5:82:6f:98:94:d9:c2:e8:a1:97:6b:9b:8e:a7:fa:
8d:dd:82:db:3a:f5:f0:82:e4:b7:d5:cb:87:65:e4:
58:39:6d:3b:53:9a:0b:61:72:61:27:d5:c9:4d:e5:
de:d5:cf:f1:c5:a9:91:93:8d:e1:3e:57:b8:59:46:
bd:5e:43:4e:e7:c1:3a:6e:44:87:94:84:38:0c:b5:
38:cf:d2:42:94:c6:e2:20:89:f7:0e:eb:40:c2:42:
23:6e:3c:9e:72:f7:65:85:b8:4c:bc:c3:d4:47:5a:
b6:0f:02:33:2b:cd:78:fb:14:96:32:d1:87:48:ae:
4c:41:53:06:a9:62:0e:b8:ee:24:a3:f5:9d:43:b8:
f9:72:9e:82:bc:2e:06:ee:c2:38:7f:1a:e5:08:8f:
0f:fd:ee:5c:54:2b:ea:a7:8c:89:c5:e0:4c:d9:b1:
93:78:b4:a4:9f:39:9c:0a:87:0c:09:59:f3:71:89:
13:e7:69:4d:ff:77:9f:f8:00:96:97:a1:c4:e1:a9:
ce:92:88:e4:c1:c1:bf:e3:e1:eb:5b:d2:0d:dd:f9:
27:e1:10:42:23:2a:35:8e:f3:de:f8:6e:66:30:86:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:32:33:AF:CB:C9:8E:30:EE:8C:F3:F9:E1:18:6B:78:38:36:D3
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:13:cd:62:ac:56:51:f6:53:98:b0:82:bd:0d:0b:e9:93:44:
85:df:af:62:57:18:53:ec:a6:ad:5d:63:e4:4e:d5:80:2b:c3:
d3:ac:d7:c3:9a:d8:2d:a1:31:45:9d:1c:64:57:5a:5c:86:0a:
ef:76:d9:1a:49:57:e4:1f:21:e5:8b:d0:a1:22:87:03:b5:01:
6b:13:53:3b:27:f4:5e:e0:2e:ef:c9:56:40:f9:b1:39:b4:b2:
31:5f:79:d1:c2:09:ae:91:d7:79:08:ae:70:b0:40:9d:15:c0:
a0:7a:3f:b4:99:a1:4c:e7:c1:64:6d:2c:21:8e:a6:8a:78:3e:
35:86:79:21:c5:35:9a:20:07:e2:ff:b5:68:bd:ad:77:dd:d2:
53:0f:77:fc:4d:9a:15:58:67:8b:c1:2f:fe:87:46:5a:16:9b:
45:69:64:36:d5:84:68:c4:fd:d6:32:55:21:13:5c:73:a2:cf:
7e:53:67:88:47:43:90:c7:f7:0e:82:63:9a:40:e2:94:34:08:
b9:1a:e6:4a:50:ca:b7:70:7f:08:5c:0c:80:0d:82:51:7f:84:
60:68:bd:de:be:23:4e:56:07:0d:1e:b3:df:ee:df:5a:cb:f8:
0e:c0:26:7e:51:36:e7:47:1a:72:4b:95:a8:c1:dd:1c:60:f7:
d3:9d:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:57 2026 by rpki-client