Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File: iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier: MYWbeVzu5F2dDDG7yHFIm/LSHO5ZHGqs7bLwsKR6B4w=
Subject key identifier: 9C:6F:92:00:E3:6C:B0:22:4E:26:68:53:4E:EA:E8:6E:F6:DD:D9:25
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer: /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial: 019CDEEAAB37B4FAB7760F69E8398C7EA0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number: AD
Signing time: Wed 11 Mar 2026 22:00:47 +0000
Manifest this update: Wed 11 Mar 2026 22:00:47 +0000
Manifest next update: Thu 12 Mar 2026 22:00:47 +0000
Files and hashes: 1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: at7Cj4BOanR2/ksq9aXltruAmKcmY4HTOFP9S0tM3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:ea:ab:37:b4:fa:b7:76:0f:69:e8:39:8c:7e:a0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Validity
Not Before: Mar 11 22:00:47 2026 GMT
Not After : Mar 12 22:00:47 2026 GMT
Subject: CN=9c6f9200e36cb0224e2668534eeae86ef6ddd925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:da:a3:63:27:1c:d7:6f:66:ad:8d:21:cf:
72:96:c6:cf:ff:34:aa:b9:f1:27:85:b8:2d:8b:25:
46:cf:2d:b1:6e:e3:be:b6:19:01:c6:cd:a6:64:eb:
d7:6d:7a:65:7c:dc:91:a4:5b:12:f3:31:94:0a:99:
57:46:20:09:69:83:c6:2e:69:43:1a:14:5b:c8:e5:
e3:15:a9:b0:c2:14:88:c9:f4:a7:b0:a2:1b:a1:76:
29:57:7f:8b:b9:6f:6e:fc:f5:61:b3:d3:8d:cf:29:
e5:19:01:ac:84:46:40:fa:2f:22:87:6c:da:f8:32:
96:4a:73:33:6c:80:6b:85:e1:e8:4a:79:c7:a3:8c:
3d:31:6c:a2:d3:75:f4:75:74:2a:d1:1a:f0:89:be:
08:26:77:0f:77:23:fb:74:71:59:72:df:58:1f:97:
17:6d:f1:c7:a6:3d:13:36:21:46:c5:dd:40:d1:c8:
3f:52:67:71:73:c1:2e:6c:f0:f9:7a:fb:dd:63:96:
25:2a:f0:ae:1e:13:75:86:ec:e7:c5:73:52:e2:35:
03:3d:e1:44:a4:29:ee:9a:c7:30:91:15:1d:6a:f5:
9b:71:3a:2f:ef:33:8b:e7:e9:68:f4:10:9a:23:4e:
22:18:b6:21:ae:2a:13:ce:ec:21:d7:4a:0a:2d:67:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6F:92:00:E3:6C:B0:22:4E:26:68:53:4E:EA:E8:6E:F6:DD:D9:25
X509v3 Authority Key Identifier:
keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2e:69:76:4e:76:31:94:23:11:31:9f:4e:39:a3:57:b0:12:
90:27:d8:f2:46:e9:e1:af:ae:58:fb:59:26:ab:16:87:c9:d4:
1a:89:09:b4:24:44:4f:d2:71:d7:42:9e:62:8b:ed:1e:dc:12:
8b:35:ba:86:3a:6f:4e:68:5b:ab:d8:6a:e5:b0:30:f4:3d:32:
21:61:8f:19:74:dc:89:88:f7:36:a8:c1:fa:2f:7c:96:37:ee:
6d:09:54:67:bd:a4:b0:40:3c:ce:95:f5:25:43:1c:69:9f:f0:
84:27:60:ed:c4:b6:3c:72:9b:96:c8:38:a3:ad:7c:cb:d6:6f:
3f:86:cd:8d:23:a2:5a:dc:b5:5f:c7:8c:e5:21:63:dc:cb:be:
8f:80:88:38:53:83:e6:d5:4b:b6:b9:e3:2d:a0:1f:4c:1c:74:
f8:a0:76:17:e9:f8:8c:51:30:d0:8b:ff:c0:8d:9a:a3:90:48:
e2:1e:a8:10:7c:58:dd:c7:5b:f8:8f:d3:58:03:90:86:5b:68:
81:b2:ab:87:ea:1c:89:2e:9b:1f:d0:a7:d9:39:c1:f4:3f:a3:
80:5a:6f:b0:f5:1b:68:fe:63:16:02:d3:ee:b4:c4:fc:13:86:
cd:ff:50:56:7b:46:60:83:12:8f:cd:b3:88:94:dc:1d:ab:e4:
0b:0d:03:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 07:48:45 2026 by rpki-client