Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier: 0kDl4NCKDuUdQ33iQMnHzsBoHjLnsgAorBf98JYssMI=
Subject key identifier: 7B:01:A5:0C:47:15:CB:C0:61:42:4B:0D:19:C0:DB:17:07:75:00:2F
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 019D386637A5066FCD153C5E6F7A3E3FFFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number: 12C5
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: dRuHtag2W48upoirGox3mzp5yls.roa (hash: pcW0qjbXLjHfD/4xJe2tmXXM1DU4kBxoW5dZ8O0Fexc=)
2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: cUdaSVb7jDUtKKvCAznpSfQd8EPjY1W3vZMwLv1dpB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:37:a5:06:6f:cd:15:3c:5e:6f:7a:3e:3f:ff:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=7b01a50c4715cbc061424b0d19c0db170775002f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:b7:ad:9d:05:68:19:76:05:d4:78:b3:e8:
86:b4:c9:03:73:e7:c1:d2:32:35:f3:6c:e4:50:f7:
c1:4a:ba:59:27:50:b7:5e:e9:80:71:87:f5:0d:6b:
11:41:e6:47:49:78:ba:a5:01:89:15:26:9d:7d:c2:
32:85:51:fe:00:29:14:4e:26:bd:81:34:63:bd:3e:
d9:32:72:aa:69:c5:96:13:1e:6b:63:41:c4:c6:4b:
2e:38:2f:3f:e9:a4:6b:43:9d:19:41:71:ac:74:e1:
92:15:ae:24:e8:69:88:a1:ff:1d:d9:df:20:2f:ef:
9e:90:0a:ab:38:26:e5:ef:51:5f:db:00:b9:4c:3d:
93:ff:f8:67:61:01:a3:ee:38:d9:83:73:e4:d2:b1:
7d:77:8e:d2:5f:4d:13:7a:12:a1:b7:2b:86:3c:10:
76:8c:63:6e:05:d7:7e:1f:c0:e2:c0:35:f5:09:b6:
0c:ac:0a:78:95:19:26:8b:e3:ac:ca:6c:0c:d4:70:
e1:3c:98:95:ff:fa:f5:9f:a7:5d:20:51:92:63:a7:
54:41:c8:e4:ca:03:95:c2:48:d6:41:26:30:5a:39:
49:01:d2:59:61:c5:c5:c5:dc:77:e5:77:ec:76:a8:
b1:71:82:d4:d7:dc:08:ae:0e:48:91:f3:67:1f:88:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:01:A5:0C:47:15:CB:C0:61:42:4B:0D:19:C0:DB:17:07:75:00:2F
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6c:48:13:8e:27:c6:c5:02:5e:07:b9:f8:18:4c:cb:2e:44:
fc:cf:8c:1d:3c:8d:58:f8:44:e5:58:d1:5c:e5:d1:f1:86:dc:
07:39:a5:95:68:c2:63:f7:85:6b:61:12:0b:75:b8:f2:85:d0:
f4:55:39:68:d2:b9:ab:8d:41:6c:12:b4:92:68:30:d4:ad:c1:
3a:6c:6d:81:d1:8c:48:0f:75:c7:de:06:8a:c9:72:91:8b:bf:
65:a2:06:9f:37:0c:f0:8c:dc:6f:c9:89:53:93:27:5b:64:2f:
24:bc:fe:c7:3b:f3:76:07:74:7f:47:88:c4:99:d9:92:ff:cb:
18:81:7a:ae:46:cf:2c:47:3e:7c:18:48:49:56:c9:59:49:90:
c0:a4:87:a6:f8:60:8e:b1:d4:1c:de:86:57:f5:9b:09:77:87:
c3:f2:3b:2d:9e:a9:db:87:de:3b:0d:23:dd:fa:ad:13:9f:af:
e0:ab:0e:41:24:a3:e8:7e:31:8e:21:d8:c9:cf:98:75:bd:e4:
f7:98:be:bd:33:81:9c:7d:9a:a9:cb:69:0f:14:79:9d:11:8b:
a2:10:c0:a3:0f:29:83:2c:fc:be:70:ef:da:cd:f0:29:cf:72:
7b:ca:30:2a:6f:0d:08:cc:57:11:f2:36:62:d0:e0:b4:5a:82:
75:2e:b0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:46 2026 by rpki-client