Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: fKr0LXIt3pci0U/huhBvKYk0uYQBADUGzv7MMeHugO8=
Subject key identifier: 63:AE:98:0A:D9:9B:1E:8E:B6:74:36:0E:11:7A:7A:C6:90:BD:83:BA
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 019D3865A4A1EF93FEFEC1B4832A91561716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:18 +0000
Manifest this update: Sun 29 Mar 2026 07:01:18 +0000
Manifest next update: Mon 30 Mar 2026 07:01:18 +0000
Files and hashes: 1: cAmtJXGnG8QQQB9duiFpy_AlVMA.roa (hash: cKqublREqa6cRbwA1qkBVAFhLjbHKxlFRKgMl8ubUgg=)
2: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: QG+rgY6CJ+q/hMmKuGUfyySCio9kIeh67Nv2A8wDSiA=)
3: pbc8FOs2r0cKcmP0E7zfMwoAuYY.roa (hash: ct93H+RGleD4usNSOMWfcCTKS9VgX/zLNOdAP8LEHt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a4:a1:ef:93:fe:fe:c1:b4:83:2a:91:56:17:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Mar 29 07:01:18 2026 GMT
Not After : Mar 30 07:01:18 2026 GMT
Subject: CN=63ae980ad99b1e8eb674360e117a7ac690bd83ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:b8:11:2a:d7:4a:8b:ff:d5:8b:2a:83:3e:
df:9f:ab:16:8c:9f:26:42:bd:eb:28:52:bf:ca:4d:
e0:0d:cc:08:b5:f3:2c:4d:26:2f:69:33:25:e3:e1:
e5:49:e4:49:37:ec:da:c0:dc:cd:86:3d:79:03:49:
97:f5:33:9f:58:cb:4b:22:16:ca:cc:47:45:5a:c2:
e3:2b:62:18:1f:bc:0a:fb:a2:af:68:e6:a3:7b:55:
b4:de:c4:06:82:64:55:ef:41:09:e8:1b:2e:59:6b:
a3:ab:c4:77:2a:28:b6:69:be:f6:26:cd:70:22:3b:
63:7e:ef:d9:99:49:7b:1f:ef:4a:e7:e1:f2:0a:31:
74:2d:31:18:0d:14:99:d6:fc:49:db:6f:e7:b7:70:
c1:a4:01:f0:99:d6:41:4f:99:e8:cb:07:b7:92:37:
bf:d2:16:33:db:2b:98:e5:0e:91:71:62:cf:44:a8:
7a:f6:53:32:9f:c4:46:06:03:a2:10:9e:cd:e4:5e:
53:29:4f:52:77:d9:49:38:73:50:6d:f3:d4:d2:8e:
a3:43:0a:ac:cb:04:5c:c1:46:5c:32:19:49:e2:9d:
1b:7c:4e:e6:52:27:49:c5:61:4c:63:b4:fb:e2:52:
3d:df:cc:88:a0:7f:c4:fc:f0:72:88:45:f5:85:94:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AE:98:0A:D9:9B:1E:8E:B6:74:36:0E:11:7A:7A:C6:90:BD:83:BA
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:40:59:94:3e:dc:04:97:dc:9f:05:68:06:32:20:f7:43:2a:
0d:19:0f:dd:5d:aa:98:ae:97:6e:50:a6:1a:72:36:44:28:9f:
d7:e3:b8:1b:56:4a:fa:5f:c6:c7:1e:cb:be:b9:81:d6:6b:d4:
f2:bf:65:05:35:a7:77:01:38:fb:b1:3a:2c:fd:bc:98:5f:5d:
9c:1f:b9:d6:19:93:27:65:0e:5e:5e:cd:6b:16:b8:d8:f3:8c:
a6:47:38:22:64:91:ef:13:fb:c9:4c:81:c7:57:b8:06:85:d4:
38:7c:15:f1:fc:28:0f:74:56:4c:28:21:c2:e0:df:8c:91:ce:
6d:70:2d:1e:5f:fa:65:fa:66:39:6f:d5:6e:4d:24:73:12:df:
4c:6c:24:40:b0:7f:e2:86:4a:b6:7b:ed:ff:f0:68:19:f5:e5:
38:a2:fb:b4:a2:52:ae:21:e3:94:54:1f:a7:72:dd:33:24:a4:
6a:80:1c:fd:21:be:67:2f:82:74:3a:41:35:f6:d3:87:f8:68:
82:5c:5e:74:8f:1f:56:7d:07:80:14:96:f7:9e:e2:6d:01:07:
da:e7:33:74:ab:53:05:9e:b7:92:4a:8a:0d:07:ce:03:8c:e6:
0b:41:9b:a0:13:98:e1:7b:c0:52:f4:b8:8e:ba:d1:95:26:6f:
94:e7:00:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:38 2026 by rpki-client