Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: pcuP2SXWiBs17o4ecxkg1VmUjAavlahenJ8KUZWhYY4=
Subject key identifier: BB:E2:56:26:DD:18:AA:A8:FF:53:AF:C5:51:47:5E:2D:9D:83:03:6D
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 019D265F266A9C2F8E70F08F0F54126D4394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: LeacyVsv1RcXFogC-zGtNs0rOAM.roa (hash: j3qojoQtMWggtkDzJQQqZamlkQYEGNHbKlwdO2tUD/I=)
2: c3WNo_4_81YtKAlp0VRoL7cFPtg.roa (hash: TP+B2IitpNpDU5H0sLBuUI5Oz9mFfqDfIHOQCcHsUyc=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: kqb0gM2if/vIXsC6sDQshs7sUQ4Mq87Bmcuy1qpvXik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:26:6a:9c:2f:8e:70:f0:8f:0f:54:12:6d:43:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=bbe25626dd18aaa8ff53afc551475e2d9d83036d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:fc:2a:80:d9:1d:86:00:22:85:6d:9a:cb:
14:20:65:3e:3c:40:fc:e3:4e:52:7e:6c:aa:c7:cd:
b2:06:28:2f:8b:ea:ea:b7:fa:36:42:8d:2b:e7:6d:
ba:c3:64:f9:a8:4f:3b:16:f9:3e:7b:f6:a1:63:e5:
ed:22:c8:ff:d0:ba:b7:0f:51:99:af:c7:f3:0f:1b:
75:dc:63:a0:f5:1d:34:63:94:19:8f:ff:e7:02:6f:
e2:d6:bb:2e:37:59:e4:ad:d3:eb:65:0d:34:ca:ae:
10:b0:4e:31:16:d6:9a:dd:0c:f8:63:b8:7d:ca:55:
8f:88:35:b3:7c:70:b1:4a:5d:4d:15:a1:b2:e1:d7:
4d:9e:f1:99:74:f6:a3:8c:05:71:4e:f6:a0:09:10:
62:c0:90:51:3f:85:cf:37:c8:1f:f5:66:f4:8e:67:
5f:58:ea:24:36:bf:d4:ec:06:c0:18:bc:ca:08:80:
e2:98:17:b4:28:ce:5c:4a:0a:82:d6:cb:41:6f:2f:
27:4c:b5:99:d1:fa:28:44:05:5c:f3:6a:d1:31:fe:
4e:92:a5:07:c3:5e:3f:fa:6e:e6:c0:30:69:68:95:
d7:bd:ac:de:8b:c1:25:12:b3:1a:e2:82:b1:23:8d:
bf:ee:94:b0:c2:aa:02:3b:7f:49:02:95:85:8f:e6:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E2:56:26:DD:18:AA:A8:FF:53:AF:C5:51:47:5E:2D:9D:83:03:6D
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ea:ca:ca:57:39:27:14:1a:ec:c7:5b:93:b9:67:c7:db:4e:
7b:e7:ef:4f:77:46:a2:cd:be:b8:69:35:49:65:a0:52:6d:6b:
6b:4a:a1:b7:0f:ef:fa:12:30:e3:d6:5f:4a:52:ac:fb:c1:ed:
66:3e:95:2c:c5:85:2d:4c:af:2f:a1:2b:5d:79:65:4a:23:4b:
ca:fd:7d:d3:85:3f:b8:38:70:2b:b0:ee:7f:f8:c9:36:a4:11:
96:ae:1e:03:03:cf:3b:11:94:9a:3d:90:bb:c9:b6:f7:b2:87:
4d:87:9c:22:08:e6:3a:29:96:45:08:a8:14:87:dd:a2:bf:e2:
a0:73:a5:82:b0:29:90:a8:b1:e3:d5:10:89:de:00:df:d6:53:
bb:de:15:d9:84:70:94:7a:b8:e6:07:d9:aa:ea:0d:1b:5a:59:
3f:a1:71:03:89:01:70:f7:9f:6d:a0:22:4d:de:da:0e:76:09:
24:ec:55:88:6a:00:d4:39:5c:93:45:6b:26:60:51:59:51:96:
1a:81:f3:ba:9f:5c:d1:5c:f8:ac:0c:96:f5:02:f6:13:7f:51:
80:be:2b:20:9b:7a:27:99:df:6b:14:07:1a:12:94:f0:40:f7:
e6:d8:b6:11:da:da:d7:6f:4e:c3:8b:03:69:22:b4:59:cd:24:
05:13:1c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:50 2026 by rpki-client