Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: Zyz/qyXvX+F9GjhyVS7oMs3Xma9DStV8RosgKVwucWE=
Subject key identifier: 8E:45:5E:53:70:94:7F:0D:09:45:71:4C:20:B3:F5:05:8E:CA:2F:3A
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019D39AF690C76ABCE6A0BC07EC2B4B9B48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:01:30 +0000
Manifest this update: Sun 29 Mar 2026 13:01:30 +0000
Manifest next update: Mon 30 Mar 2026 13:01:30 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: Oiga33mrmdOvwE7kbnGTJgKGMVLjnxO/oHaobh5fSuo=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:69:0c:76:ab:ce:6a:0b:c0:7e:c2:b4:b9:b4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Mar 29 13:01:30 2026 GMT
Not After : Mar 30 13:01:30 2026 GMT
Subject: CN=8e455e5370947f0d0945714c20b3f5058eca2f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:69:c8:27:97:2a:8b:73:74:07:da:fc:9e:
fd:6f:0b:ad:96:6a:6e:be:51:8f:dd:89:6e:31:ec:
b7:a0:79:fb:e4:e9:d8:46:4f:24:7b:7f:96:4d:11:
47:c8:a2:af:0b:6f:fe:a1:a6:3d:d1:be:d7:a0:17:
2e:21:6f:28:fa:cc:33:70:12:cf:39:3c:3c:ee:c8:
51:31:c5:56:6e:d7:7d:e9:6c:a8:53:5d:7b:a0:25:
17:6e:06:90:0b:1b:65:18:80:15:0b:5b:12:c0:b0:
c4:a9:4e:75:70:48:39:a8:e1:dd:af:a9:e2:a8:15:
a0:bf:94:d4:0c:a4:cc:8c:d0:13:49:c8:7c:25:d6:
11:6d:a3:ca:61:6f:cb:3c:38:9a:29:b9:23:f6:d6:
7e:2c:09:a7:94:f9:13:31:73:06:1b:c2:b9:bd:b3:
8f:57:f2:d5:7e:38:57:06:08:72:f7:a2:ec:c3:aa:
79:66:36:21:0e:a8:7f:af:84:f9:fc:6a:e0:4e:b7:
b4:97:db:a0:0f:63:0b:25:2b:47:8d:77:73:11:2e:
b1:e4:f0:0d:bc:28:8f:4f:66:fb:3a:fa:fd:be:72:
9d:4e:19:dc:ec:11:f1:fd:05:3b:85:98:34:30:04:
63:83:9e:df:62:c0:74:62:16:53:e9:8b:bd:3e:95:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:45:5E:53:70:94:7F:0D:09:45:71:4C:20:B3:F5:05:8E:CA:2F:3A
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:49:87:c6:fa:36:44:45:4c:02:43:be:68:c5:18:4f:c8:b4:
88:9a:58:d4:99:c3:d9:1e:fb:78:df:95:3c:c8:34:b4:9e:98:
94:57:d2:7c:78:28:2c:c5:fb:e5:4f:1d:47:b0:08:1d:01:86:
16:cc:b1:be:05:a7:97:60:0a:e2:23:b8:85:81:16:4b:fe:e0:
dd:79:3f:0a:5e:cc:5e:ae:df:fd:6e:f7:bd:18:10:93:31:e3:
50:c2:b7:33:d5:ac:62:a5:4a:7c:25:56:ad:7d:ad:d5:de:fe:
3f:c0:4a:fb:60:bd:8a:af:51:a4:6d:48:75:50:f6:26:ed:19:
ab:4a:08:99:a4:a8:48:c3:ae:41:22:ee:4a:ae:89:4a:b5:11:
3e:47:68:17:11:49:1e:bd:e0:e1:ef:5b:e6:e7:9f:2f:3f:1e:
b4:dd:23:6a:48:42:fe:59:e1:10:36:da:59:92:3c:d0:d9:d1:
97:7f:4c:52:d8:e1:f7:c6:c9:dd:b6:ff:3e:cd:be:23:61:0b:
f3:42:b0:82:b4:da:95:f5:6f:05:db:46:e2:70:b3:a7:08:7a:
47:98:88:46:2a:f7:41:e7:44:5e:20:20:ac:14:9d:4a:b5:7a:
2b:42:7a:54:c5:3f:35:26:30:fe:54:18:b8:9d:89:10:be:bc:
d6:f7:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:59 2026 by rpki-client