Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: +PR+UF8lXQmO+j+Rnsb3MiQQyMrYVPEBk7JhEQQdpm0=
Subject key identifier: 1C:48:12:A6:EF:D5:B4:83:89:A6:42:B3:C1:83:95:31:DF:6F:AE:A1
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 019D37C0DC08A39517A69C420AC8E3855CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 052A
Signing time: Sun 29 Mar 2026 04:01:19 +0000
Manifest this update: Sun 29 Mar 2026 04:01:19 +0000
Manifest next update: Mon 30 Mar 2026 04:01:19 +0000
Files and hashes: 1: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: qWUQNhKxZIdJR9uRpO1ZGKtAGgiGw7l+6728Xb32HkM=)
2: siRrAgt6VgHA0m1baM4YFf-i5gE.roa (hash: H+L66KQaqxYD6TNvSo89HsSzeFEI3jv0iuGT7ONN7vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:dc:08:a3:95:17:a6:9c:42:0a:c8:e3:85:5c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Mar 29 04:01:19 2026 GMT
Not After : Mar 30 04:01:19 2026 GMT
Subject: CN=1c4812a6efd5b48389a642b3c1839531df6faea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:79:ac:c9:fa:ac:f4:38:82:d5:c9:34:80:
55:40:29:47:06:01:0a:e1:a8:6d:3c:92:2a:3a:3c:
2d:5b:a5:72:b9:06:36:dc:78:a1:fe:92:e6:b7:d9:
b0:2b:7d:8f:a8:d5:0e:e4:6a:06:4b:d5:a6:6c:1a:
12:64:61:e4:84:7a:e7:80:b8:53:4d:89:3e:79:78:
f0:82:05:e7:86:03:34:44:b8:47:a8:21:59:9b:a3:
c2:28:a8:ea:35:3d:67:ed:b8:1a:74:fa:fd:58:e0:
62:c4:b6:31:45:53:cf:ea:8b:d5:2b:36:93:77:48:
2e:e0:99:00:82:ed:97:8e:a4:90:55:f7:53:07:da:
b5:87:95:99:fb:44:09:3e:c7:1b:51:73:11:f7:10:
b2:23:9f:0c:46:08:b5:6d:fe:ad:b7:fc:62:7a:94:
70:c6:6f:ab:35:72:d2:72:b9:8f:c6:58:fa:d3:da:
85:76:0e:c0:e8:c6:75:9e:20:6c:38:0e:b3:c1:06:
29:69:64:51:31:59:6e:01:c5:9b:97:b0:0b:29:69:
61:07:23:20:c3:30:af:fb:b8:7b:31:f0:29:93:c9:
ed:7d:ff:6c:25:ef:aa:81:a7:a9:13:84:3c:df:68:
11:ee:4e:41:0c:05:24:e0:e7:3e:d6:23:f9:f5:71:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:12:A6:EF:D5:B4:83:89:A6:42:B3:C1:83:95:31:DF:6F:AE:A1
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2a:0e:78:91:b1:23:2a:6c:cd:7b:b7:25:e8:e2:49:99:08:
6d:8b:dd:d6:0c:a3:17:7e:bb:22:b5:a8:e9:9d:01:ed:b6:92:
9d:37:8e:84:1e:5a:52:0f:d0:0d:23:32:1e:f7:f2:37:7a:76:
04:7f:eb:30:9f:1f:25:66:94:c9:6b:86:b8:80:70:7b:12:96:
70:9c:5a:65:4b:4e:46:3e:64:e2:8b:70:d7:af:16:ad:08:4a:
b4:11:7e:eb:49:53:97:03:08:29:06:7e:64:29:f0:4f:35:be:
b7:d1:2a:e1:63:86:8d:b6:91:20:03:6a:ca:a1:ad:41:01:68:
61:d9:44:bf:06:e8:f5:3b:b2:52:3d:2d:f3:1f:e3:71:e8:88:
5e:36:43:2d:5b:fb:dc:ad:35:9d:c9:46:22:c9:db:ba:a3:47:
84:76:f9:1c:4a:93:0c:0f:ab:00:34:3b:cc:d2:d5:57:78:a1:
bc:4c:c8:66:df:11:5a:e9:1c:62:13:56:37:a0:9f:50:e1:c9:
e7:3c:bb:70:73:f2:6d:2a:9e:b6:39:b7:c5:ec:11:c0:0d:db:
3b:65:2c:ff:4a:82:8a:c6:32:b8:9c:a8:2d:4b:2d:b5:12:af:
b4:8a:08:c0:a3:ae:03:b3:fe:88:15:c7:73:f0:be:f0:02:1f:
41:9f:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:16 2026 by rpki-client