Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: e+Ad+E4ZDTv7BdJ41wjl3d2cl9PNZ8r2yx2S/3fbGF4=
Subject key identifier: 0F:64:FC:AA:0B:C6:FF:23:9E:85:27:BD:76:BD:94:98:95:03:70:1E
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019CE1EBE9E8168ABFD525BE1AACA539A0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 1865
Signing time: Thu 12 Mar 2026 12:01:00 +0000
Manifest this update: Thu 12 Mar 2026 12:01:00 +0000
Manifest next update: Fri 13 Mar 2026 12:01:00 +0000
Files and hashes: 1: 0N9Uxg8fR7Nyrc_u_br799CvD3w.roa (hash: uOgfIOlH3kKqWEbcGQ4cdmk7+jvbyKuPe/nGe0W6i/Y=)
2: 1-Sx_jXGlBlQATOQ5K8nNNuSrK8M.roa (hash: J1Zq7teTeIcSMmJFWstQ0vbrU882ZzSFqMi7WzJyvRs=)
3: H5n8y-hjXK24thn7egOUXJVZq0U.roa (hash: 7e4HU9h3i7rv/jpYmlCXJPYTMbRgwEsVE53RAePC3yc=)
4: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: 38zAWjR9THCgONPHCwZc9KW8qdCRN8wnjWaeymZeJ+I=)
5: LdznHUG78Bp9I2Dc43gteEDaBDQ.roa (hash: +dMfTpGhmS4SyoMfOpUT8Rsq5hQCLovibVxni1srWPA=)
6: RNhe93FE6qEUnmI7KhC9QCPUKRE.roa (hash: +sF8WWUCiojfxzR+V4lEJDjHf4WmTy3H3whX2T288mI=)
7: ppWofpQW50E3NHiSmyWgHR4ILv8.roa (hash: jJuUGZv8Uf/IpTklcwXKZKYqGPYZrZ2MeGb3oJWtKa4=)
8: rpJcxi0ezsz1auru1a5EKwFCe6U.roa (hash: xVRYtB7vqri8W1Qa+Q3R/0ZiBHYX/xC5bFNeI81rOlw=)
9: sPNr1HqSOW9gPQD2njRcNYsq_nU.roa (hash: Rxx1CbY9JZ6FmKclFr3hxanK7IPpIKnWMWk/29TEk0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:eb:e9:e8:16:8a:bf:d5:25:be:1a:ac:a5:39:a0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Mar 12 12:01:00 2026 GMT
Not After : Mar 13 12:01:00 2026 GMT
Subject: CN=0f64fcaa0bc6ff239e8527bd76bd94989503701e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:05:49:c4:9e:36:42:f8:39:ca:9f:60:f6:
55:27:ca:28:2b:5f:ca:77:95:42:6c:96:f9:8b:5f:
4c:b0:d4:ac:13:0b:84:33:0a:2c:fd:33:0b:2a:ab:
e9:07:07:b9:7f:44:b4:85:10:6e:f6:5e:ab:ed:20:
13:8a:b1:8e:02:eb:fa:b2:7d:73:bb:49:ee:21:18:
78:37:20:8f:f9:e1:5b:82:66:97:f5:57:d1:5b:4a:
0c:b8:1f:bf:ea:0f:12:c9:85:e7:42:22:de:53:fb:
02:2f:10:44:b5:e5:f5:a7:78:c1:b5:10:11:95:b3:
63:27:a3:fe:a8:1b:c3:58:0b:09:79:f4:45:cd:94:
13:59:8d:8c:18:50:f3:5f:1b:08:6d:75:22:3e:88:
03:8b:1a:26:38:af:97:61:08:de:d3:c6:a0:88:2a:
f0:27:65:5c:76:a8:50:71:b1:44:31:c3:91:76:b8:
4a:74:cb:b5:8e:cd:a7:4d:fc:3d:0e:c5:a9:29:7d:
6d:ef:fc:32:bd:35:d3:d4:43:a1:6a:57:d8:75:43:
29:f5:0c:2d:05:24:59:7e:09:d1:17:5b:18:2a:67:
ad:2e:08:4d:26:22:bd:ed:e0:77:ba:cd:09:9a:5a:
86:b1:c3:60:dc:f8:db:cf:8d:f9:1f:16:8b:9f:6d:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:64:FC:AA:0B:C6:FF:23:9E:85:27:BD:76:BD:94:98:95:03:70:1E
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:48:4f:be:aa:4e:78:e3:8d:29:59:ce:b4:a6:44:5a:6a:17:
b3:4d:91:60:67:c5:6c:f1:16:ed:94:dd:e0:64:dd:1e:5e:ab:
1c:f9:25:7d:70:7b:c1:c9:a6:30:06:fa:a4:64:9b:49:d7:6e:
ea:15:db:2a:6a:d1:5f:f4:f5:05:f7:25:1b:9e:8d:95:4f:f4:
cd:c5:6c:41:e5:79:ed:14:5e:7d:93:f3:18:1e:fa:fa:3a:5f:
af:c6:7c:e2:2f:4f:7e:15:c7:c6:a4:2b:65:71:fe:c7:d8:3c:
55:e3:0c:0b:53:08:48:2f:e3:d5:13:6a:b3:8b:5a:d9:91:e5:
0d:e1:51:56:7f:86:41:1f:22:7e:f1:03:c0:08:e7:86:24:13:
94:a0:85:1d:ad:d4:db:6d:3a:f2:5a:35:c1:74:3d:92:9b:27:
2c:86:9f:1b:9c:82:cf:af:2f:f4:b8:9a:25:cb:3f:4a:ec:d1:
a9:27:5d:dc:0c:88:61:24:08:14:4e:ce:65:bb:b3:94:4d:6b:
b0:7f:0e:d0:e7:f5:4b:9d:38:d8:9c:59:da:36:55:db:4e:18:
b5:b4:ea:51:18:22:66:6e:37:3b:bf:5d:f1:54:ca:a4:07:bd:
3f:d9:d8:bd:23:c9:2c:4f:cc:f1:c8:97:a6:bf:f2:af:ac:46:
60:cd:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:11:40 2026 by rpki-client