Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
File: IkI4OfIQchYnZBrmtszqzujZBns.mft (raw, json)
Hash identifier: XgvTWIeP61lRLfgFIqfl54OaNJRHqwzkYXD1TgXyVzw=
Subject key identifier: 08:B6:D8:A8:2B:B7:88:C1:0D:E6:2C:9A:E1:94:A3:F2:6C:5F:B5:46
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 019D39E5AB8DDAA570009457654ADD8C95BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
Manifest number: 0DD3
Signing time: Sun 29 Mar 2026 14:00:46 +0000
Manifest this update: Sun 29 Mar 2026 14:00:46 +0000
Manifest next update: Mon 30 Mar 2026 14:00:46 +0000
Files and hashes: 1: IkI4OfIQchYnZBrmtszqzujZBns.crl (hash: N8b8OCKDz4Snk1pnjOZyn4ZsNiZrC8EnjXctg6kT+Hw=)
2: sojMdgVzKQwkqrETNbM2QVHp_oA.roa (hash: Z2UII6RbUrfp+wZL3LL7DVhq4lhmq9mEWIUdqO9gofc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ab:8d:da:a5:70:00:94:57:65:4a:dd:8c:95:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Mar 29 14:00:46 2026 GMT
Not After : Mar 30 14:00:46 2026 GMT
Subject: CN=08b6d8a82bb788c10de62c9ae194a3f26c5fb546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:3e:2c:5a:9b:ce:f8:d4:54:c4:8f:24:da:
1b:63:f1:46:6c:ec:0b:8e:d1:bf:8d:19:87:08:a2:
d7:7d:39:36:46:53:bb:2d:65:66:c7:a6:cd:36:6f:
79:bc:a7:fa:4b:24:8b:90:eb:ab:be:2c:5f:a0:93:
77:e2:67:98:85:12:10:39:55:d4:88:0b:26:0f:8e:
fd:15:75:a3:1d:fc:9b:2a:a0:66:a7:d2:2c:85:ed:
0e:f3:5a:c1:21:6f:d9:fa:1e:3d:ff:d1:5b:3d:6d:
0c:5c:25:fe:9b:1d:e1:e0:86:1e:3c:23:7c:0e:57:
e2:6c:73:33:87:ab:51:5a:63:f0:73:c0:a2:18:a0:
7f:25:71:5e:01:b1:38:c1:80:85:d0:f7:bf:20:45:
41:5a:e6:89:13:52:98:5f:d9:56:f4:40:3d:9a:ec:
5a:e5:48:4f:76:ae:ea:9b:7b:db:f6:d1:f0:11:8f:
23:ae:a3:5e:a8:29:82:43:7f:ee:f0:c7:26:50:07:
37:a6:55:c6:07:2e:16:2d:d4:32:1a:aa:db:00:b9:
f1:94:28:72:34:d2:f5:fa:ac:14:13:13:b1:29:a4:
92:0b:fc:da:89:a6:bc:9a:94:33:2e:3b:8b:56:9c:
1b:5e:85:89:6d:cb:83:95:7a:ab:d9:dc:9f:8b:29:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:D8:A8:2B:B7:88:C1:0D:E6:2C:9A:E1:94:A3:F2:6C:5F:B5:46
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fa:62:ef:bc:e3:c0:a3:67:c0:8a:fb:4a:63:4a:bc:11:04:
63:4a:d6:2c:e6:1a:ff:94:62:02:77:28:7e:83:08:91:bf:08:
41:83:8e:34:50:37:b9:74:77:7c:2a:ed:0d:a8:5b:da:59:a2:
e0:b9:40:a1:73:77:80:65:7e:ed:3c:b8:15:d2:3e:09:6f:a2:
56:38:d5:e6:8e:ac:08:12:d1:96:4d:05:ed:60:a6:0e:2f:ca:
94:f0:f5:58:af:0b:ef:6a:06:86:36:8e:53:4d:85:51:66:a8:
9b:f0:b3:66:ec:a8:92:71:75:e2:72:61:bc:24:da:7f:52:91:
24:92:41:d8:b3:08:8f:c1:3c:2e:4e:2d:95:53:af:63:f2:48:
9d:c4:72:8c:b0:e7:32:2a:fa:3d:cc:e8:de:53:2a:11:be:7b:
fe:1a:fb:f6:46:b7:2a:b7:2a:89:ef:09:74:6e:70:c8:c7:a1:
f3:56:59:17:4b:37:30:04:f6:1b:0b:39:51:a3:2c:0a:a2:ef:
94:8a:1f:0d:56:d0:ce:bd:cf:43:cc:0c:91:00:24:9b:1a:88:
bf:be:2d:f9:3d:5c:6e:49:dd:59:f6:6b:3b:b5:98:f3:94:68:
eb:bc:a0:03:b3:96:4a:24:ab:f9:c8:3c:47:2a:25:71:29:51:
5a:0b:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:44 2026 by rpki-client