Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: mnDW8YuJrY29DLGl0JaxQ/+IcF5qDhswYduMmRKwoys=
Subject key identifier: 4D:CB:C8:6C:8B:59:3A:40:49:9D:BB:4A:21:C5:12:0F:00:3C:68:CC
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 019D382E9E1A38BBF844CDF132A64CFCAC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 0B56
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: keoRqYi+t9sb4+uSvDL4gavZXTckcbOkYP458MQl8Ac=)
2: PiRgJdP5MCWuU1jNKZLwDVvXfxA.roa (hash: cpBd4dfM6upcsIz22a2feCu0xP3o+cF4Qb/mGhUm2S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9e:1a:38:bb:f8:44:cd:f1:32:a6:4c:fc:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=4dcbc86c8b593a40499dbb4a21c5120f003c68cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d3:ee:6d:b1:23:6b:63:c6:c6:27:bb:09:d5:
b1:92:5b:71:ad:22:3a:5f:ed:6f:64:6f:20:fb:52:
9f:8c:39:80:8c:9d:00:56:7a:ba:b1:18:73:fa:32:
98:97:99:c1:f4:8f:dd:51:20:9b:4d:97:09:90:01:
1e:51:49:a9:1f:2a:00:a4:80:7e:ec:08:dd:fd:e3:
f8:69:2a:db:f3:1d:81:0d:8a:dd:28:46:76:1f:1f:
75:dc:3e:6f:ef:ef:b7:52:99:d8:1f:47:a5:ba:d9:
ad:b2:20:e8:fc:e5:79:7a:a2:e6:78:72:1e:7c:f0:
6c:e0:79:b5:65:d4:7b:24:b4:d4:da:47:1e:99:b3:
33:5c:89:47:ec:f2:aa:39:be:80:02:b4:a8:16:1c:
57:04:f8:6d:fc:2f:36:b5:12:29:c7:8a:47:f2:b8:
ca:a7:62:1a:02:a5:eb:4d:81:db:18:3f:e0:16:b5:
c4:37:2d:d8:15:f7:46:2f:31:8d:08:e4:c0:1f:04:
c9:c6:91:c9:a4:34:ce:48:23:f1:2c:ac:08:b7:11:
b9:b6:42:60:bd:c6:60:55:0a:b1:3c:6a:2e:9d:e9:
92:ac:14:95:dc:95:1e:95:70:63:c2:3d:75:9d:5f:
cd:9e:3a:a7:d1:52:7d:41:78:75:df:c9:da:4d:bd:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:C8:6C:8B:59:3A:40:49:9D:BB:4A:21:C5:12:0F:00:3C:68:CC
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:42:ab:60:43:e2:0c:41:8c:e4:e0:40:ca:4a:8f:71:d4:c2:
d7:1c:c4:76:40:2b:16:42:c8:a8:b7:9b:e8:ac:22:1d:7f:20:
94:c8:58:f8:67:48:d3:d0:66:29:f5:a4:2f:21:ae:68:45:ab:
d8:41:f1:e8:da:fa:62:2e:0e:14:97:b6:af:8f:76:76:5a:97:
e4:0d:1e:94:61:0d:4e:62:32:5e:e7:ce:06:f9:b7:16:97:89:
f8:79:1b:81:60:68:ce:9a:23:27:fa:14:1d:ec:90:78:69:aa:
15:1f:e0:47:54:3a:12:e8:20:4e:10:b3:a7:0b:40:62:54:04:
94:3b:04:01:be:20:60:4b:bb:d7:f3:57:b7:58:5a:9d:28:93:
30:cd:5d:a4:d5:cc:7a:10:93:7e:fb:0b:7a:b3:41:2d:2a:23:
32:d4:3f:5e:a6:83:48:0c:58:de:fc:86:77:f5:81:54:4d:16:
53:a7:e5:5f:a0:53:7a:9d:cd:e7:d8:26:6b:39:ab:b9:89:a9:
24:71:63:bb:c8:b1:79:10:c2:e5:8b:24:1a:bc:b2:77:a4:dd:
a3:5b:33:c5:4a:27:72:de:94:de:4d:3f:d1:a9:5f:4b:41:d8:
3c:87:18:eb:bb:32:53:9c:e3:aa:33:66:6f:32:ec:a2:b1:fb:
1f:35:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:42 2026 by rpki-client