Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: /WuGtbEehz7sBD5PIcTzyVuOcMkso7WncN/u3KgElzw=
Subject key identifier: 11:7D:FA:72:C6:4F:3B:7B:F9:C3:A6:79:DE:BA:0E:83:26:2D:4B:25
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 019D37F792F63A4EC85BAFF6900BC461D30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0EC3
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: 1vFsiy/LeTVR38f8Ea3AErm19luc4nz21XpcZDzK9ZY=)
2: n-7CelT5dTV5HjJBN21chSkx44M.roa (hash: zVfMTjOFuWwD6PT0EwSu8KM83oLIoF+My9PpsYKXT+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:92:f6:3a:4e:c8:5b:af:f6:90:0b:c4:61:d3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=117dfa72c64f3b7bf9c3a679deba0e83262d4b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:73:35:f4:82:81:5a:5f:df:b2:36:57:6c:
e3:7e:2f:a7:5b:32:ca:cd:45:60:ec:b7:a5:84:75:
cc:9c:a1:75:44:2e:5c:d5:a2:9c:fe:94:21:e2:02:
e8:d8:e5:8e:5d:83:4c:89:36:c2:69:7a:8b:26:7f:
ba:90:09:2b:8f:2b:31:ac:2f:bb:ed:8f:bb:d0:31:
e8:d7:7f:a5:fe:87:15:ad:b7:19:2e:5f:26:d6:0c:
3b:8c:74:4e:d8:b1:73:a5:32:c5:56:56:3d:f9:57:
66:32:fd:43:17:a3:01:29:04:b9:0d:f8:06:68:2c:
ff:04:6a:c9:bd:b5:d7:d3:77:c6:75:f9:57:7f:2b:
6e:11:df:b0:f2:0e:85:27:d6:92:fe:24:32:67:b5:
ec:f6:db:4d:45:f0:86:6c:4b:72:ef:05:a7:d4:ce:
40:ee:5a:64:e3:df:6e:60:ef:34:c9:47:ce:98:08:
23:03:a6:c0:31:d7:3c:8c:60:fc:6a:81:a2:cb:a2:
6c:2a:c7:dc:5d:49:24:12:48:1d:3c:79:e8:92:40:
2a:0d:ed:91:8d:2b:4b:e6:13:40:a5:c2:c9:c0:7d:
d7:cf:47:04:5b:20:19:0b:27:27:8c:4b:b0:12:b0:
d3:5d:c2:48:85:d3:7c:c8:56:91:e9:57:1a:de:ef:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7D:FA:72:C6:4F:3B:7B:F9:C3:A6:79:DE:BA:0E:83:26:2D:4B:25
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6c:98:aa:1d:ba:35:88:ab:79:1e:e1:a9:37:54:b7:fa:9b:
66:4e:ea:40:d1:4b:05:3f:1c:63:b0:3b:93:e3:da:c1:e8:50:
57:6a:23:11:0c:64:5e:6d:15:83:63:12:1e:ed:71:c8:90:98:
95:fa:ad:70:b1:43:86:d1:0f:e8:17:ad:02:87:6a:8d:32:ac:
07:f4:fd:20:68:91:02:69:60:f8:67:26:3b:ff:b9:68:9a:b9:
d4:3e:fa:50:0e:3a:83:ca:b3:e7:35:89:63:d8:8e:5e:b7:60:
61:d0:83:fe:68:f4:a3:4d:27:81:bc:5c:b5:20:92:4d:25:83:
68:d8:df:be:77:6c:04:c7:55:e3:18:e0:03:48:0a:c9:54:73:
8a:be:fe:ea:b3:3d:24:27:23:62:d0:27:19:ed:29:4d:df:e5:
ee:7a:2e:aa:11:e4:3b:1c:81:af:dd:83:ac:90:92:72:0e:c0:
3a:6d:bc:37:6c:d6:00:48:33:0d:20:f5:d8:88:bf:48:cb:8c:
20:36:e3:15:2e:84:f1:c2:ef:07:e5:fa:a2:5a:50:ff:b6:dc:
21:cb:6d:c3:b3:c9:66:c3:ed:ec:de:9b:9f:cc:8d:56:df:8b:
80:23:33:45:c5:6f:43:2b:1f:03:7b:5c:89:4d:dd:64:1d:2d:
1c:16:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:36 2026 by rpki-client