Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: 6dy2H2ali4VuEL22TDmlctaXRV2lLYNogHmO1OeN8tY=
Subject key identifier: 39:32:5D:BC:36:72:6F:6A:4F:A2:81:A9:50:16:8E:F3:A6:95:95:87
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019D28BB8850D0B6388A2E935B648DD93F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: SUs56Ut42iEhYGeHWQf1F1fviu/GoYRNm9i7w2Tlv10=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:88:50:d0:b6:38:8a:2e:93:5b:64:8d:d9:3f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=39325dbc36726f6a4fa281a950168ef3a6959587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:27:dc:31:48:20:ff:4a:ec:11:c5:96:de:e4:
65:c1:b2:e8:d3:c6:47:5b:18:ae:9a:03:a4:04:dc:
6c:da:65:4e:ca:28:f8:80:4b:ec:75:49:5a:4b:ae:
24:26:6c:36:b9:29:19:40:61:c2:1a:51:35:58:ee:
e8:6d:36:d6:eb:d6:74:05:1c:96:b8:24:89:cc:e0:
d4:d0:85:8a:cd:99:9b:ac:95:e7:aa:3e:49:22:26:
77:85:6f:0f:a7:2c:e0:96:cf:79:24:59:5b:d2:b1:
c3:a6:3c:5f:63:62:6d:2c:6d:37:b0:ad:6f:85:ba:
59:4a:c7:f7:90:7f:16:71:2e:88:64:94:d0:36:76:
33:83:3e:52:0b:9e:99:e0:45:59:d2:ba:fd:54:e6:
88:16:31:e3:2a:72:b4:67:36:5a:0f:72:06:a1:18:
59:49:ce:8b:c4:a0:95:5e:f8:04:35:aa:d5:7f:2c:
ea:63:16:c9:fa:02:87:26:5b:f2:e1:af:b5:3d:5e:
92:43:14:62:4d:68:fe:17:d2:f8:3f:98:e7:ea:f9:
96:d7:65:0c:66:29:71:0a:98:d9:4d:d6:85:f9:17:
f4:53:0b:7a:08:a3:f6:01:a0:52:49:69:87:78:b9:
8e:2e:9f:2f:14:73:fc:8a:9a:3a:f2:73:2d:ef:d6:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:5D:BC:36:72:6F:6A:4F:A2:81:A9:50:16:8E:F3:A6:95:95:87
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d4:99:7d:31:7d:b6:38:0c:56:0e:37:ee:91:d3:fe:e3:a8:
bc:6b:ef:8a:3a:6f:48:ae:27:7d:29:29:ed:f6:15:6d:6c:f0:
e3:ac:d6:8d:3d:98:dd:06:aa:ff:0e:21:8f:70:d9:d9:7b:03:
21:33:4e:99:2c:ff:f9:d2:c9:30:e4:c0:e5:ab:be:dc:64:30:
b9:91:28:79:cc:0b:fd:5a:cd:3b:45:2c:c7:e8:4a:f1:f2:38:
13:d2:13:aa:c8:0b:22:66:68:f5:b7:f5:f0:3a:f2:80:b7:33:
ad:8e:1b:79:a9:f2:2a:94:81:59:22:e0:41:c8:ed:5e:5d:ef:
58:26:db:9f:81:f8:56:f7:1c:63:92:d5:55:ef:25:03:55:33:
01:69:cd:de:43:f9:2e:11:cb:ff:6e:85:ba:bc:0f:c6:fd:f9:
dd:f1:42:ff:f6:01:54:43:c7:7d:bd:d9:95:fb:7b:6f:5b:78:
7d:57:c1:40:1e:d5:83:9f:8e:a9:bf:1e:55:da:5a:9f:9f:23:
ff:da:35:4a:5a:6f:5c:fa:85:f2:be:21:3c:3f:bd:8c:fe:26:
52:c2:af:99:e9:c3:11:cb:eb:94:61:ed:62:53:24:1d:ad:7b:
37:89:8d:9a:da:a4:eb:cd:51:73:72:b6:4c:96:bd:de:36:0b:
a9:5b:17:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:01 2026 by rpki-client