Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: us9T2JHC3mNGY1beVjnO/9sj7VR8N5tIsonYVV0m9JQ=
Subject key identifier: 58:41:21:05:E3:13:34:D7:4C:DE:55:E0:4E:7D:7B:92:E2:49:CB:55
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019D36E51925AE0BBF6C49D5EE555790AADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 00:01:16 +0000
Manifest this update: Sun 29 Mar 2026 00:01:16 +0000
Manifest next update: Mon 30 Mar 2026 00:01:16 +0000
Files and hashes: 1: b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa (hash: hHkV6ifNNgCnzjffMB2ARiro7sl9sU2WuipxUNM/huo=)
2: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: z0AnVuCL3Kh//bhliCiIAIEyqiF/XToqykcIMSez7Pg=)
3: jAnHcvp-J3jJ73LmJIPdJciy_zM.roa (hash: APG1rihSnkESicy3QFJODSTSwbqRn6HF/XNwWPvWKwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:19:25:ae:0b:bf:6c:49:d5:ee:55:57:90:aa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Mar 29 00:01:16 2026 GMT
Not After : Mar 30 00:01:16 2026 GMT
Subject: CN=58412105e31334d74cde55e04e7d7b92e249cb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:02:48:51:52:80:df:9c:0b:06:cf:17:bf:
8c:fa:b6:76:0d:ad:5e:71:e2:01:1d:e3:1a:86:97:
0d:ac:57:80:2a:10:ab:65:cd:0f:84:b5:39:46:58:
f3:49:e9:11:8c:a5:ea:8a:38:23:a8:aa:8f:90:8b:
dc:b4:e5:7e:1a:97:2c:a3:70:f0:b6:d3:d9:d0:ab:
86:03:ff:c1:ea:93:6e:9c:e0:77:34:e4:85:44:5b:
ff:20:51:05:04:76:fc:58:18:a1:b9:4c:ec:07:7c:
06:4c:78:85:07:83:80:26:64:25:6c:bb:60:b4:98:
75:2f:aa:98:76:02:5a:4c:42:b9:fb:71:b4:15:d1:
1e:81:6c:a5:28:b7:ca:fc:ee:ee:e2:56:90:18:c1:
ee:8b:13:dd:73:91:f6:53:64:12:fe:a4:fa:79:85:
19:58:d3:ae:f3:d1:01:75:5a:16:24:55:89:54:06:
42:09:c1:61:ff:ff:e1:3e:a7:6e:d9:67:b9:8f:1b:
41:af:d4:03:b8:35:04:2b:31:18:81:cd:bb:17:85:
53:a8:ab:b3:eb:71:34:91:0a:71:c5:02:2e:79:ba:
28:3c:a6:ce:5b:64:f3:97:56:14:f6:54:40:07:89:
f2:a3:8f:28:8c:b8:e7:09:50:cd:e3:b0:ff:20:42:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:41:21:05:E3:13:34:D7:4C:DE:55:E0:4E:7D:7B:92:E2:49:CB:55
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:22:0f:a1:68:33:55:c4:08:84:68:80:2b:ac:23:04:e6:a7:
1b:a1:d3:ae:1c:9b:a0:e1:7f:ee:7f:c1:b3:9d:25:14:0a:dc:
00:db:49:1c:6f:bb:e5:bc:e6:74:ca:38:e4:79:e8:08:6a:c9:
d0:45:48:0d:bc:0f:24:5d:4f:96:f8:2a:fe:27:91:18:05:82:
8d:b0:45:a8:9d:f4:6d:72:5e:7d:4c:fc:99:34:1e:29:83:4c:
89:bc:3a:91:0d:3b:3b:c7:84:c1:5b:36:8b:4c:f8:6d:9a:fa:
fe:3f:56:ee:bc:ed:c6:d7:6d:f8:60:7b:1a:91:ce:fc:a3:49:
d4:bb:58:c6:f7:45:7c:c7:23:10:52:69:70:97:d6:d8:a1:bb:
00:96:c3:f1:63:a0:2b:15:9d:d7:03:15:c1:24:7e:96:38:54:
ba:11:bc:5a:b0:ed:1b:cc:97:bc:34:51:3d:38:77:49:cf:51:
71:a2:8d:f3:5c:5c:e7:34:82:4a:c5:20:61:76:c1:7d:67:c2:
ee:af:70:05:8c:9e:b1:3e:e2:16:09:3b:f2:93:f5:3a:0d:31:
aa:e6:31:27:26:b2:25:d9:e3:2f:4d:14:7e:72:5c:32:2a:74:
b9:0f:55:34:bd:82:ee:8b:cf:69:2c:b6:7d:6a:53:ea:ee:2c:
6f:f1:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:50 2026 by rpki-client