Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: XTKRMNTp09/2hL99LnDR1sUjAwOoFSk19JUgvAUOnxk=
Subject key identifier: 41:06:CA:71:2E:E9:E0:B7:2A:5A:F6:31:B7:06:8A:AF:A0:9E:0A:D1
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 019D382E18D3E07A5F6C6E853836A17ABB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 05CC
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: 3+Clj+GJNVE7F/mJa69v+frQ6/ylJSKn48TeyYCWnQw=)
2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:18:d3:e0:7a:5f:6c:6e:85:38:36:a1:7a:bb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=4106ca712ee9e0b72a5af631b7068aafa09e0ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:28:2f:22:61:a7:be:78:85:e3:48:ce:fd:
16:41:5f:e7:74:d8:6f:b5:b3:43:43:6e:12:f9:91:
d2:07:f6:fc:2b:66:c4:ad:8b:6c:51:f5:ad:67:bc:
4b:de:86:4a:e9:f7:ae:c4:4e:ec:65:c6:82:83:31:
3a:62:89:5e:3e:46:c4:6a:d5:61:b8:9d:37:e9:50:
77:ef:17:04:75:bb:ec:83:de:29:e4:66:35:f9:58:
4f:1a:14:b9:2e:bd:e1:b0:31:f5:14:58:5c:59:aa:
e0:cb:f7:35:e0:49:07:21:d3:b2:de:5a:79:ce:91:
5d:24:2f:89:e1:9c:4c:26:46:c5:34:24:3e:a6:35:
cb:76:5b:ca:9b:e6:e8:93:32:95:ee:c6:05:24:34:
3d:92:24:97:4f:c3:35:7f:1b:04:cf:94:fe:45:75:
27:2c:d3:17:38:63:39:ac:ab:45:7f:20:6d:21:82:
03:8b:9e:ab:d1:b6:6e:be:bf:7f:f3:af:a4:c6:b9:
b9:87:53:23:01:df:37:23:e4:5c:b8:22:d9:c6:4d:
a5:72:83:88:1a:e8:72:eb:e4:17:b4:3a:4e:d8:c7:
46:cb:59:f6:d5:d4:1b:18:ff:46:6c:a4:cc:71:a7:
f1:f4:f9:45:41:da:e5:86:f3:a5:f8:b7:dc:42:a9:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:06:CA:71:2E:E9:E0:B7:2A:5A:F6:31:B7:06:8A:AF:A0:9E:0A:D1
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f0:fb:c5:88:81:cc:be:ae:fb:47:e4:10:6f:73:17:51:63:
a0:37:8c:13:80:40:54:ea:56:4e:d3:dc:b3:f9:1b:f7:b6:ff:
7b:da:73:40:9f:be:94:a1:f0:6b:91:41:79:25:df:24:4e:57:
12:e9:9b:03:17:be:fb:67:4e:31:19:b7:b5:e5:40:70:88:86:
45:7a:fa:1c:b6:2a:82:4e:f5:87:51:5b:e1:2c:cf:b0:0d:43:
bb:28:28:1a:43:45:61:b2:a9:e1:65:b7:2a:e2:23:3c:9e:af:
48:63:62:3d:f3:72:75:b5:f4:f1:7c:3e:91:10:52:33:91:af:
45:34:0e:5f:67:9f:d2:d2:42:58:14:91:38:28:29:f0:e8:fc:
10:55:4c:7a:27:97:9c:37:c2:4b:8f:09:39:3d:e8:d1:65:2d:
d0:dd:86:25:30:b6:bf:25:67:2d:d4:bc:e1:d5:d1:47:b4:bc:
9b:e3:34:e9:e6:ed:51:ac:78:f4:7e:c5:1b:cf:40:41:ea:26:
41:24:c7:a6:38:99:95:b9:7d:6d:0e:fb:63:74:f5:9e:56:f9:
6b:f1:30:ec:c5:26:41:2d:4c:65:0c:43:5c:53:0d:71:c9:82:
8b:cd:f0:f0:5a:a1:4a:25:4b:7c:39:86:f7:93:b5:e4:42:6c:
ee:81:d2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:07 2026 by rpki-client