Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: e0xrwLrgeIZ4WlniS7HzjdUK38pvt5iFZ4haaZGoYOk=
Subject key identifier: 5A:B3:89:A8:D5:AA:15:48:AC:47:8C:CA:6B:48:74:68:46:BD:71:D2
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 019D389C29E7C19293FF903EB078896DE3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: ovMdLpLiHbzXCQ7WWe1IzLge8Is0Tb+AGkIv3q6wlgo=)
2: tQHKW_5yxjpKOHe3d-ZP6p2sC64.roa (hash: 3+Hu+PFHtyBzCp4FY8HXvj0Pcdpyb0FAw5+YbzrL8sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:29:e7:c1:92:93:ff:90:3e:b0:78:89:6d:e3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=5ab389a8d5aa1548ac478cca6b48746846bd71d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:83:d6:45:35:5c:b9:d5:02:97:6e:f1:4e:
58:10:8a:2a:b1:dd:a8:11:32:d6:c2:5f:1d:ec:35:
6e:e8:61:3d:1d:0f:bc:8e:c3:e0:74:97:cb:75:3a:
b9:73:01:33:cc:a8:d9:63:af:c7:1b:c6:ab:82:bb:
e4:6f:e0:59:bf:5a:24:b6:74:66:69:17:a2:f8:97:
83:f2:ac:d4:36:75:2c:86:d5:bd:03:21:fe:6f:08:
96:30:66:e5:f8:2f:56:d6:9f:2c:71:b8:d7:14:d4:
60:33:c4:21:6d:dd:e6:46:dd:79:35:d1:ea:93:a9:
53:10:2c:5c:1e:40:3a:17:60:95:f9:a9:29:19:56:
8a:72:b5:4e:d6:64:d5:2c:d6:76:a2:cf:c4:52:10:
03:e9:c0:7d:9e:d7:ed:90:f2:c8:22:ae:0f:b9:d5:
89:cb:b0:11:09:ea:6d:a1:f1:27:aa:1d:58:95:c6:
7e:3e:c1:75:b8:f5:bb:47:4e:21:62:a4:af:12:d4:
b8:f3:61:04:8d:32:15:2e:a2:5c:1b:90:27:aa:16:
b4:84:40:ac:c7:09:4a:f5:e6:5d:39:e0:fd:f2:89:
e7:73:37:c1:26:a6:66:e3:7a:4a:23:11:f7:4e:1e:
2a:50:8c:e0:36:51:06:ff:73:e7:b8:3c:d9:73:4c:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B3:89:A8:D5:AA:15:48:AC:47:8C:CA:6B:48:74:68:46:BD:71:D2
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f8:36:97:c6:3a:ee:4e:d0:7f:b8:5e:91:7c:95:8f:f1:d3:
92:d5:44:76:5a:03:05:91:fd:87:c1:9a:07:08:98:a4:25:c1:
2b:0a:57:66:53:70:93:94:25:23:39:36:e8:2f:08:e4:f0:4f:
5a:01:e6:e1:c0:ad:18:4f:bb:41:79:ac:43:ba:37:d2:83:da:
c2:cb:da:5d:bb:ed:ce:fe:fa:11:92:cc:62:5e:e2:3a:57:36:
fb:39:54:1b:ec:91:6e:be:92:53:b5:fd:6f:c3:44:dd:3b:11:
bd:7c:87:a0:8b:f0:ec:50:9f:15:9c:a8:e0:91:a2:e7:f5:b2:
a5:9f:91:7c:75:38:9f:95:53:17:6b:6e:93:13:aa:56:c1:c5:
bf:9c:96:15:6e:e6:d4:eb:98:c1:d5:c4:11:8d:c5:58:eb:95:
9c:90:55:1c:86:e4:4a:03:dc:52:d8:a8:18:07:30:c3:f5:12:
49:e4:1f:0e:bc:fb:f3:15:15:df:29:d4:8c:fb:c9:66:94:f4:
bd:d0:a6:bc:d4:73:94:1a:23:04:ca:e6:a3:d1:f9:7e:51:53:
07:12:f5:dd:d9:39:aa:b7:01:60:11:66:5e:81:87:df:89:c5:
8e:90:d2:f0:d5:6d:2a:a4:e1:e8:4b:03:61:63:a2:df:03:c8:
74:08:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:13 2026 by rpki-client