Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: 9iRnWVWcSWanQXEbVbsJWqcr4NJrN1EcjOFnl1y6tI8=
Subject key identifier: FB:16:18:62:39:1E:89:7A:70:B3:45:9C:06:A8:99:9D:50:43:3F:5D
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 019CE5C88AE0CDA26E6BC13847406C4F21C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0996
Signing time: Fri 13 Mar 2026 06:00:50 +0000
Manifest this update: Fri 13 Mar 2026 06:00:50 +0000
Manifest next update: Sat 14 Mar 2026 06:00:50 +0000
Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: cXmKzG1d4VHma/0SEV22bunZIsyCbBP9BPAYQSCGeU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:8a:e0:cd:a2:6e:6b:c1:38:47:40:6c:4f:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Mar 13 06:00:50 2026 GMT
Not After : Mar 14 06:00:50 2026 GMT
Subject: CN=fb161862391e897a70b3459c06a8999d50433f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:07:2b:39:57:b4:a1:91:b0:e4:18:49:79:
3a:3d:d0:1e:94:3d:36:22:73:9e:95:b2:fd:01:9d:
94:33:2b:b0:69:5d:42:af:2c:2c:26:f5:15:d0:48:
93:c2:17:7d:85:f6:38:78:7e:3d:83:7a:a7:5c:81:
28:50:c1:e8:76:3d:d6:73:f0:50:27:58:bd:6f:45:
b0:2e:dd:3b:42:f6:ea:0a:a6:c9:85:f6:72:9e:23:
16:f9:67:aa:df:25:fa:0b:c2:8d:a2:70:4a:44:65:
07:97:95:74:a1:f0:8f:42:15:8f:c2:e5:7a:af:23:
79:c8:6f:c4:b9:f8:82:4f:2a:f7:82:f3:df:79:04:
90:e2:95:59:c8:ad:a3:04:ff:8a:aa:d6:c8:2e:c4:
d6:53:ba:48:b4:45:1f:c4:4b:f4:9f:c8:bb:56:74:
cc:cd:67:8c:57:51:54:55:00:da:32:36:31:a1:1d:
a5:e5:b9:9f:af:a0:e3:fb:3d:17:dd:e3:cd:6a:07:
5a:04:77:18:af:fd:3e:e8:ac:ab:21:08:c6:21:c2:
5f:61:20:14:d2:21:cb:80:a2:e6:c3:8b:e6:65:32:
0d:ff:96:f3:0e:3e:1f:dc:33:5e:b0:de:89:c9:2d:
aa:b6:ee:2e:cc:35:78:1e:da:23:61:90:8f:39:ea:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:16:18:62:39:1E:89:7A:70:B3:45:9C:06:A8:99:9D:50:43:3F:5D
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:05:73:37:93:70:c7:67:2b:c6:58:7f:6a:a4:e6:f7:bc:b6:
0d:7e:83:03:f2:06:b1:a3:c1:8d:6a:36:66:cd:63:9a:49:12:
d0:e1:f2:77:a4:ef:e9:11:35:14:59:ec:f1:4c:aa:11:05:15:
f5:43:0d:a7:b2:e4:9a:30:ad:b7:6e:c8:f2:50:f3:c3:84:e2:
a7:c7:d4:6b:b6:07:e0:d7:f4:ba:89:d7:b6:b2:bb:47:d1:72:
35:ce:9e:21:f5:86:bc:b5:91:66:ed:26:47:02:29:41:47:63:
18:73:0d:b8:73:c8:c8:3b:ce:1e:3d:f1:2b:29:55:96:8c:a2:
d1:9d:f6:e1:66:bc:b7:e2:16:bb:7f:32:44:67:fc:f4:0c:75:
53:3d:cd:79:2c:4b:e5:ca:3a:07:04:5b:87:57:1b:08:9d:6f:
36:23:24:7f:62:3c:09:2f:db:e7:65:03:66:39:c4:c1:03:03:
df:77:8e:59:cd:51:27:29:f3:9b:b7:28:50:04:14:91:6e:80:
8f:3e:58:f0:02:c8:58:b0:78:bd:34:bd:87:65:7b:c0:9d:e9:
3a:53:4c:16:e7:66:c8:f3:4d:9d:08:67:b9:1f:c4:56:1a:9d:
34:a5:64:22:eb:af:eb:78:2d:4d:46:a8:66:09:b8:50:f1:a7:
eb:27:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:30:02 2026 by rpki-client