Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: 6fDY7rdHstqEYVmux1dtolVTR2kG+4tK0SG3TDRJ2SE=
Subject key identifier: 13:C9:27:0F:FE:2A:31:70:47:0E:6B:7D:A9:83:EC:36:E5:D7:74:19
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019CB2EDB2B09B7FFB5045D47327C6B63AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1851
Signing time: Tue 03 Mar 2026 09:00:48 +0000
Manifest this update: Tue 03 Mar 2026 09:00:48 +0000
Manifest next update: Wed 04 Mar 2026 09:00:48 +0000
Files and hashes: 1: 5qofx5kn-ofCIj9o3NGivX2oyoc.roa (hash: 7NfNoXJjBTrvr3E7539ztDCcU2EbYZAvEuO82OgvQXg=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: m0nzMESCkFi+4iTv5a40STyLl/4cZgaR7865RqUKtmM=)
3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:ed:b2:b0:9b:7f:fb:50:45:d4:73:27:c6:b6:3a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Mar 3 09:00:48 2026 GMT
Not After : Mar 4 09:00:48 2026 GMT
Subject: CN=13c9270ffe2a3170470e6b7da983ec36e5d77419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:b6:3e:1c:d4:02:05:ad:29:b4:c0:cd:ce:
9f:41:57:95:e3:19:0a:59:56:98:f9:a0:7d:00:96:
c8:28:d0:70:1c:7c:10:10:b2:9a:74:5d:85:9b:04:
41:90:1a:31:4e:80:6f:b9:a1:9b:f1:1f:fe:0d:d1:
b1:e4:75:07:d5:f3:89:45:91:e9:68:71:1c:90:84:
7d:32:c0:da:86:8d:b7:d7:ba:e8:4e:48:a5:68:31:
fd:01:38:5c:18:97:bc:1b:e5:5c:ac:b6:91:c7:04:
d9:63:24:fb:e5:bb:68:14:38:45:60:7f:eb:c7:c3:
16:5b:28:f6:a3:96:6f:33:6b:5a:20:d3:f3:8f:91:
20:52:8b:7f:43:c9:f1:67:65:63:41:29:d5:0b:dd:
61:d9:6c:98:f1:64:f1:ab:8f:03:f0:4d:32:ba:50:
eb:e5:05:5a:ae:0f:b2:53:67:89:ac:7f:f4:fc:0b:
e8:de:8f:d7:05:eb:05:3f:68:91:81:b5:c9:53:50:
e9:f9:b0:1a:33:56:42:3d:2c:0a:77:8a:25:3f:26:
06:7e:23:b2:9b:c6:d5:8b:0e:2d:f5:ba:ad:a3:fa:
c6:bc:f9:fb:44:ce:01:4b:5b:87:64:75:ab:00:0c:
55:20:ab:e9:f9:d8:66:64:ed:54:22:e0:b0:c0:98:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:27:0F:FE:2A:31:70:47:0E:6B:7D:A9:83:EC:36:E5:D7:74:19
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e2:a8:47:d4:7b:3d:eb:31:8a:c9:be:2c:1c:ed:47:a0:76:
fe:0d:3c:0c:aa:6a:7f:da:8a:80:5c:69:07:c4:11:df:55:96:
fc:c1:25:3b:f0:b7:29:f5:e8:f3:16:b6:08:b1:7f:06:6f:40:
22:92:65:09:23:02:c7:6c:32:26:57:6f:19:95:41:3e:98:f0:
8f:4d:96:c0:c4:bd:49:13:bd:9f:0f:59:f7:2f:eb:af:d9:e2:
39:d1:dd:8f:ba:55:4b:28:1b:b3:3a:26:1f:5d:4f:3f:c2:cc:
e7:7a:fe:36:ad:da:40:5a:03:ce:76:9b:62:bb:4b:4e:12:4d:
b8:eb:c4:00:6b:df:b4:56:05:c6:d1:aa:a9:90:f5:38:49:cb:
b5:ee:01:5c:c8:53:3c:be:66:b5:17:8f:ad:fc:4d:02:6a:83:
ce:13:89:3a:9b:37:89:72:f5:78:da:f8:82:bb:12:17:6c:bd:
2b:02:bc:7b:44:c9:ca:20:47:bf:78:2a:1b:07:1d:55:fb:48:
cf:c5:d6:ee:89:01:02:d7:7e:6f:51:8d:3f:04:5d:0d:12:8a:
e0:7d:8b:dc:af:2d:52:ff:44:e6:78:95:92:45:5e:4c:ed:45:
14:3f:89:3c:4f:e8:ae:1f:e9:6a:e1:44:64:e2:29:8f:58:1c:
ac:87:2c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:57:53 2026 by rpki-client