Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: I6f6G8dTLXFUq0tDs7Ddcoz0bJf1/JlEmJgDB/+IVIM=
Subject key identifier: E4:DC:32:66:B8:9E:CC:33:8F:25:62:26:1D:9E:B3:F9:0D:16:D9:CF
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 019D389C427CF09EA87192EA46E9CED7CA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 07EB
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: Alc7zuV5kydjA/1uY+EizfnEAZGwydi7atTD9ldyi8o=)
2: N9l_SoYrcFcPv0jC7XqElG5VoCc.roa (hash: R5qOIsjrofGZDxXTlws22ZLH6QPaz3qDwthTa7rQG/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:42:7c:f0:9e:a8:71:92:ea:46:e9:ce:d7:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=e4dc3266b89ecc338f2562261d9eb3f90d16d9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:84:80:cd:3a:4f:ef:6a:05:50:cd:e6:ae:
31:4f:25:8a:83:d1:e3:59:5e:44:c9:2a:3d:8e:a7:
a5:4c:d1:bb:83:ec:b2:90:01:f6:d1:10:0d:35:67:
3b:3d:b5:b7:bf:fb:45:67:b1:24:33:12:c6:fb:97:
de:45:61:c3:c3:bf:b6:ea:67:36:8e:6b:dd:9a:67:
05:cd:4f:d7:22:e9:b8:ea:b4:fd:45:df:54:62:82:
4b:8e:4e:47:10:02:e1:b2:20:c7:05:e2:d7:12:28:
cd:96:35:84:fe:63:1e:f1:60:97:62:bb:0c:87:d5:
e5:69:81:33:d1:13:d6:a2:b8:28:0a:82:e2:db:f8:
f1:ba:f2:cb:1f:29:ab:f2:c1:87:67:54:61:90:e6:
74:58:ec:5b:58:37:0c:68:cb:b7:f3:87:5c:2e:26:
f1:3c:63:e7:72:b9:a9:11:c6:0c:24:99:b0:84:6e:
ce:cd:10:33:41:df:a9:f4:6e:ef:8f:cd:df:fe:51:
59:3b:c5:0b:af:6d:46:3c:b2:6a:1f:18:f2:bf:31:
32:4a:1a:47:c0:0d:22:6d:0f:b4:09:a9:10:c7:13:
95:2e:3f:fa:c4:35:a7:78:5d:1d:74:c7:f1:ca:ec:
bd:ff:fb:dd:6c:97:a9:99:1d:bd:a4:2c:2f:93:65:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DC:32:66:B8:9E:CC:33:8F:25:62:26:1D:9E:B3:F9:0D:16:D9:CF
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:eb:8d:9d:47:68:a6:0e:42:86:89:95:5e:e7:35:84:bc:c2:
c1:7d:16:04:56:0b:ac:8e:4c:98:fb:bd:9f:3e:50:b4:d9:71:
06:92:6f:3c:ca:3c:8b:c6:ce:5e:83:4a:04:4a:62:40:d6:03:
71:f4:76:ee:51:6c:91:16:15:98:67:ac:38:94:17:6e:3b:90:
ab:59:a5:ba:54:bd:f8:5a:5b:81:f6:18:dd:7d:04:66:41:8e:
9b:92:fa:3d:6a:e6:91:6a:48:8e:57:f2:3a:39:be:de:bd:94:
49:42:57:20:56:7b:dd:69:67:3f:73:66:3e:1b:4e:d2:ae:4d:
35:4c:c7:05:02:04:c1:49:19:86:34:4e:5f:b5:1f:0f:e7:5e:
4c:fc:29:ab:b4:66:db:3f:e9:74:0f:a9:b6:40:68:2a:ac:3b:
c1:78:a8:74:9a:94:98:60:1a:52:f2:a9:d6:b1:35:ac:9f:bb:
3b:fe:da:f9:a4:bd:63:66:b1:c9:b2:bf:7a:27:5d:aa:5c:a6:
1c:e6:d0:31:c6:9e:6d:45:19:38:f0:fa:cb:1b:af:f5:eb:52:
0c:47:40:50:2e:fb:16:f0:41:82:02:20:54:41:d6:ca:de:39:
75:ec:f9:fe:e1:1d:c5:6c:4f:c8:62:df:ef:06:00:3e:ce:2d:
30:06:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:30 2026 by rpki-client