Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier: CWK+puNtNO1svJYFeh7mrvelwhlhJo+GMGwODYM5fEo=
Subject key identifier: F9:61:01:D3:C6:C5:78:C4:94:2F:8B:91:42:AF:A8:A2:C7:BD:39:BF
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial: 019D37C0FB6880E4B048EE65D5B72BA8AFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number: 10EA
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: ea_FcR8oSzWDCeMxrNhO2E40pkI.roa (hash: 5Y4/kc8eZcdfX1i5OXOAX6HvK4BEfWtdSIjWkgc/rvI=)
2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: 1V4DN3fr3N8DDv4XP3pII0v7NzLZH9/nJOg2d3r/Nts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fb:68:80:e4:b0:48:ee:65:d5:b7:2b:a8:af:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897378126f55d96519553daa48e02e3282121644
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=f96101d3c6c578c4942f8b9142afa8a2c7bd39bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:8b:de:57:e7:15:04:9b:4c:af:13:85:f1:
d3:55:c6:d3:33:5f:cc:c6:5f:1b:ba:00:9b:d6:8e:
27:9b:77:ab:8f:f0:ba:31:c0:a7:19:d0:b2:b6:2d:
00:3f:7c:08:38:40:ee:1e:ec:4c:aa:90:f7:a0:29:
9b:26:08:ba:89:a9:c8:2a:93:27:c9:34:5a:e5:a8:
d7:af:0b:cd:e0:09:11:cd:1e:71:ec:28:e8:b9:d3:
fa:9c:ed:45:c9:2b:e9:9c:05:1b:73:82:bd:84:85:
46:f8:fb:b3:90:d6:cb:39:7f:9c:a2:d4:5b:8e:24:
d4:50:5e:4e:f9:f6:28:8f:49:28:96:2f:fc:fb:7d:
8b:0b:98:c7:76:1b:5d:1d:7e:da:b0:53:f1:8d:22:
63:77:dc:c6:35:c9:5a:45:be:71:e9:94:3a:ed:0a:
f8:f0:32:6c:90:58:61:bc:b1:18:70:53:f7:32:5f:
de:d7:c8:54:92:39:6c:66:32:91:3b:bb:c5:fc:8b:
ae:36:32:d7:11:bf:91:bc:3d:3f:38:7d:dc:1b:a9:
83:ef:9a:c2:87:b2:a7:75:82:ec:ac:b3:38:d6:43:
33:e0:7f:83:49:d0:2e:9a:92:d5:38:27:2f:9b:89:
82:ca:44:cd:14:da:90:3b:d6:01:0b:43:cf:87:6e:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:01:D3:C6:C5:78:C4:94:2F:8B:91:42:AF:A8:A2:C7:BD:39:BF
X509v3 Authority Key Identifier:
keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6b:24:65:20:6f:14:0e:7b:d4:99:d7:e2:53:70:e7:e1:80:
2b:74:69:2f:cb:72:c2:07:e3:7c:cf:c6:17:a3:5c:b2:f1:13:
8d:6d:81:e2:8c:a1:03:1d:5c:95:a6:d8:b5:ce:78:a3:1f:33:
9f:b4:62:ff:16:60:b3:1a:af:f6:5c:8e:5b:5d:4a:c6:26:14:
aa:7d:a6:f7:35:b9:75:f3:da:a5:13:8b:15:34:b1:ea:4a:a8:
32:16:ac:4c:c9:e2:84:bb:4b:77:34:88:89:86:3d:92:5a:d7:
3c:d7:1b:c3:97:bc:cf:1c:8d:d8:7a:0b:42:99:54:bf:09:8e:
3c:92:6c:43:89:db:ec:c4:b0:ab:ea:7c:cc:f9:16:67:86:c5:
ee:2d:b7:5a:89:27:cd:17:08:75:c0:6d:90:43:9f:21:54:ae:
35:0f:d4:ce:4d:24:02:3c:28:ec:e3:9f:91:78:2b:d3:f7:cb:
ea:f4:23:15:26:1f:51:88:ce:f5:0f:49:2f:3e:2b:2b:b0:0a:
5e:81:0f:a6:34:09:e3:43:d7:01:3d:ea:8a:00:44:1f:3e:3f:
47:61:12:6c:47:3a:3f:b4:8b:15:e5:cd:8f:d9:5f:e9:5d:e2:
fc:63:e9:26:2c:30:0f:16:e0:ec:5d:bb:93:e6:1c:82:9e:bc:
a6:bf:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:16 2026 by rpki-client