Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: gwEwBNvBhFw/lLbn85fDTcejEVWqsk6U+sDXRPZy/jA=
Subject key identifier: E4:BE:FF:F7:73:C8:B1:76:64:3A:4B:73:A8:EB:40:8E:01:A4:4C:03
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019D371B6B5D4A6F8A54B28A32B26FFC6025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 1075
Signing time: Sun 29 Mar 2026 01:00:36 +0000
Manifest this update: Sun 29 Mar 2026 01:00:36 +0000
Manifest next update: Mon 30 Mar 2026 01:00:36 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: vQwK2GYKR/RSXqCCZtqyhXEeTxGKg9EqSzPTMAJN2FU=)
3: RoT_BRy5K5T_EFywyXjf2sUOgfA.roa (hash: 3g9pqCZcoGTGtwQJjCoF4vdhAm5IX+/HPg+Sn5/5ZvI=)
4: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:6b:5d:4a:6f:8a:54:b2:8a:32:b2:6f:fc:60:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Mar 29 01:00:36 2026 GMT
Not After : Mar 30 01:00:36 2026 GMT
Subject: CN=e4befff773c8b176643a4b73a8eb408e01a44c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:2c:aa:7b:12:74:73:e4:c6:5b:7f:32:32:
56:7f:1b:bf:0d:36:1c:97:b8:8a:ce:69:da:c1:b7:
72:b1:8d:9c:15:8d:d4:5b:c6:94:0f:05:f2:47:06:
5d:ff:c4:4e:de:33:cd:fd:ae:99:ce:5e:25:0d:44:
09:5e:92:db:11:db:e7:cf:2c:ef:dd:cb:ec:db:28:
d7:38:4e:f1:cb:67:5e:48:0c:d7:bb:1c:c2:c1:7b:
0e:1a:0a:9e:87:32:cf:b2:ce:93:c5:14:6a:78:90:
b9:ce:f1:1c:d8:eb:e7:e5:33:c2:69:24:55:0c:de:
ed:f1:85:47:28:ba:04:b4:9f:06:79:03:97:b6:86:
77:56:18:39:34:f0:72:b6:5f:8f:a9:8d:21:62:82:
05:f3:50:99:23:ae:2a:e5:ee:78:e8:02:bc:20:88:
99:ba:57:e8:4f:04:a8:da:cc:56:b0:72:f7:eb:77:
31:21:e6:67:41:03:a8:2a:5e:c0:f6:77:4c:b9:3d:
f2:8e:01:12:95:69:6f:1f:34:8e:d2:fe:6d:af:e8:
6a:35:31:f1:af:fd:ee:e6:71:0c:0f:b7:58:52:11:
9c:fd:1d:b6:c5:b3:f3:ec:e3:ae:88:0e:08:4e:f8:
ec:16:29:a4:ae:c5:3c:23:0b:8d:b6:87:40:a5:ec:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BE:FF:F7:73:C8:B1:76:64:3A:4B:73:A8:EB:40:8E:01:A4:4C:03
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7e:75:83:0c:be:ff:6f:f1:2d:dc:b6:35:a3:6e:9c:60:8c:
83:d4:60:d0:09:48:b0:10:5c:81:2e:14:50:1f:6d:44:ec:b8:
6d:93:ce:c9:89:01:35:66:d9:a7:3d:4b:ca:87:cc:9d:c0:19:
8e:dc:b0:00:0e:19:f9:60:63:89:de:8c:ec:36:49:a6:b0:47:
8d:9f:2c:55:54:7d:3f:ad:0f:3f:1c:7d:04:b4:8f:3b:56:b2:
32:ba:e1:07:9d:49:58:79:6a:69:98:c5:1d:a9:a2:41:6d:0b:
80:60:8f:ee:49:14:8b:4b:5c:2f:7b:e0:4b:5e:28:bd:da:0e:
60:dc:06:45:7f:a9:9b:03:3a:93:e0:87:92:04:de:6e:95:6e:
05:5f:5a:80:85:36:d2:85:10:9a:95:f2:d7:54:6f:bb:05:52:
77:1e:45:49:13:07:86:46:43:d7:0a:69:c8:2c:de:1d:59:cc:
10:11:f5:56:52:fd:7b:1a:61:98:f9:31:17:d8:df:7e:3e:de:
8c:37:36:fd:9e:ea:a3:29:74:79:a7:cd:be:75:87:b9:da:88:
df:5f:71:d6:63:54:8b:8c:e9:3d:09:66:7d:11:7f:ea:0f:49:
b7:38:4b:c0:ff:79:5c:26:c1:85:59:8c:7e:4a:7d:0d:f3:a2:
b0:e3:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:32 2026 by rpki-client