Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File: idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier: d/iF22eGlp4hhiUk0SyIFe0sdzZuP2UbFC9It7c0K8g=
Subject key identifier: 04:57:A7:E4:27:BB:7C:E8:66:FF:7E:7E:65:89:25:F3:47:0D:FC:23
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 019CE4EC82658E2447972DFE24692738DE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number: 1895
Signing time: Fri 13 Mar 2026 02:00:30 +0000
Manifest this update: Fri 13 Mar 2026 02:00:30 +0000
Manifest next update: Sat 14 Mar 2026 02:00:30 +0000
Files and hashes: 1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: QSEhpzzx/AVHCAQ9jMxpYRsXZrVj4G7lx5keDWgcoQ8=)
6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:82:65:8e:24:47:97:2d:fe:24:69:27:38:de:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Mar 13 02:00:30 2026 GMT
Not After : Mar 14 02:00:30 2026 GMT
Subject: CN=0457a7e427bb7ce866ff7e7e658925f3470dfc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:7f:25:4f:e6:37:67:cc:56:87:47:8e:d4:
f8:b5:11:55:75:47:81:a4:37:40:43:16:3c:04:a9:
88:3c:2d:28:15:31:93:70:1d:80:8e:72:65:d1:00:
25:9a:3c:f9:fb:c0:d1:e8:06:cb:31:c5:84:c5:ab:
a3:09:e3:35:43:b2:1b:10:a6:44:15:99:c7:ab:6a:
b8:dc:69:d7:0b:d1:ef:f2:5c:11:80:05:2a:8a:03:
7c:8a:f4:eb:a7:50:37:5d:f2:ae:bb:c2:49:93:cf:
3f:37:16:72:c6:b5:ce:75:64:21:db:7d:5b:0f:de:
71:61:84:c1:96:e1:77:eb:af:9f:db:13:bb:71:a7:
34:ae:d3:60:3c:2b:fc:8c:ea:63:93:33:fd:01:61:
64:ec:a9:4d:1c:26:91:7b:36:a6:3e:a7:47:e9:57:
98:d7:3d:3a:30:bc:ed:05:7f:87:d5:f6:46:5d:26:
36:16:33:2a:58:0f:e5:6a:fd:a5:00:1a:9a:d1:14:
eb:38:82:93:73:61:37:ee:67:0f:45:06:76:76:bc:
fa:88:60:35:56:5e:9c:05:f7:c1:56:4b:a3:35:da:
f2:52:54:d6:07:d9:08:12:ca:f5:99:da:ef:b6:6f:
4c:df:8e:e5:32:6b:c5:3f:ed:88:70:39:d8:57:c3:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:57:A7:E4:27:BB:7C:E8:66:FF:7E:7E:65:89:25:F3:47:0D:FC:23
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8f:a7:d0:ec:04:1b:fa:17:d2:14:d0:a7:f6:b7:2d:a4:58:
9f:68:c4:61:69:4b:2e:9e:67:5f:9a:c1:a5:c3:70:6b:74:ae:
b0:ef:cb:b6:f9:0d:d9:d2:c4:fb:0b:2a:87:70:41:2e:32:4a:
af:6b:6d:21:35:7a:73:df:db:44:ae:9b:c4:08:27:a9:87:11:
47:fa:f1:f5:22:bf:0b:ce:f8:47:b7:e8:5e:09:8f:00:55:44:
46:1a:b3:74:14:93:0d:d7:c7:1b:e5:b5:b8:dc:b4:e4:1f:11:
22:1e:85:33:f7:1a:34:a3:44:a8:39:66:79:c3:54:34:c1:c7:
2c:4e:3f:46:75:50:31:92:42:8a:5f:72:e5:40:25:8b:31:10:
28:5e:c3:a3:82:06:6e:ba:46:d5:2d:1e:5a:11:f4:52:74:f9:
4e:0e:68:8d:aa:e4:87:bc:d2:da:4c:4e:a8:1a:51:53:76:b1:
d4:27:c0:fa:1c:60:49:25:3f:d8:42:6d:8f:68:45:a4:19:fe:
63:d6:10:55:2e:ab:1f:5e:16:05:a3:ad:b1:9a:21:6d:20:73:
8c:c2:34:73:4f:5a:bb:da:22:df:aa:69:e2:8d:c4:4c:24:13:
4b:8c:83:49:2e:29:01:b8:a9:a3:e1:67:c7:f8:dc:4e:f1:a6:
21:57:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:45 2026 by rpki-client