Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: HsWuk/OK0Ql3/766iJCnfwEDTS2/wp27oxsekFkDTbY=
Subject key identifier: 79:6B:2C:6C:9B:4C:22:B2:F9:DD:C4:7B:5E:D1:D9:6D:C6:03:7D:E2
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 019D38D334BB0FEBE13D67921B42E9837360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 164C
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: 9s39xRIy0ovz43_NNnpZQL7J2kk.roa (hash: oPXpQgKbn2LA/+wlfEIifDrWhGCahORiCPFzylNJltg=)
2: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: N6rw/wC17x1vTXh/5ucByh0Xl5rp2aDoswyz0AX8MBE=)
3: XNqMimQmi16joRmSNKtij3MWcqw.roa (hash: W6R4J2CPCxTIFG92bOgpHJLgm5G3zw04PkJ9pMuWLS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:34:bb:0f:eb:e1:3d:67:92:1b:42:e9:83:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=796b2c6c9b4c22b2f9ddc47b5ed1d96dc6037de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:08:bf:75:5c:b5:db:99:82:da:c3:15:d2:
0e:a0:b5:da:2a:37:3b:b9:b1:5c:1d:be:4c:65:05:
66:bf:2f:8c:0b:1b:09:99:94:98:78:c3:82:fb:36:
12:09:74:a0:6a:6b:b0:9d:37:02:9e:31:63:94:3f:
1e:1d:13:d4:de:e5:49:c0:6f:70:a7:73:ab:65:7f:
c0:7f:aa:be:c5:69:b2:1c:19:57:e5:62:d0:8c:6a:
2f:22:33:11:29:fa:f8:b7:4a:d8:64:ef:59:49:8f:
19:23:e6:68:6d:d2:1c:0a:63:bf:d1:3c:5e:d5:15:
a0:97:b8:2d:00:83:f4:e0:8e:26:c7:4b:83:2c:5b:
5e:d0:1a:db:d0:0e:b9:a2:e1:9e:ed:40:f8:ff:35:
8d:f7:ac:e6:62:88:ec:b7:b4:c4:f1:e3:f5:5e:81:
df:db:07:cb:cb:57:85:3d:b4:50:cd:15:63:da:c8:
44:13:38:50:09:f8:3d:d4:fd:39:4d:0e:10:00:e1:
43:d9:7f:3b:88:dd:bc:fe:98:4c:a6:48:af:82:4d:
1d:fb:f6:e0:b9:80:78:a9:7a:fb:9b:31:b0:39:57:
fe:d1:f2:86:c9:a2:47:43:c2:60:29:ef:9c:ad:ac:
8e:4a:01:cd:3b:0a:13:cb:4b:a1:35:8b:7b:2c:85:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6B:2C:6C:9B:4C:22:B2:F9:DD:C4:7B:5E:D1:D9:6D:C6:03:7D:E2
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0c:c9:1f:00:e9:c5:de:ef:39:6d:74:07:f2:8e:f8:22:e1:
ce:a7:7f:1b:9f:2b:88:35:32:b0:3a:3d:af:f9:46:cf:27:3e:
e1:cb:ad:70:6c:21:6a:96:d2:60:39:23:6f:1e:ca:82:2d:22:
c3:bc:70:8f:af:00:3f:3a:85:f7:41:27:a2:69:ad:cf:34:3f:
ec:70:16:e7:33:71:42:94:22:59:d2:f0:1f:08:df:50:b1:01:
61:80:ba:78:56:14:44:db:0e:60:97:fc:f0:cf:68:04:db:bd:
d7:73:36:10:4d:ca:cf:8c:21:25:c9:36:05:8a:bb:66:23:d9:
df:80:b0:0d:ab:83:75:50:ab:af:6e:27:92:4c:b0:bf:1a:8d:
31:27:8a:a4:45:1c:11:1d:19:ac:e7:a5:a8:57:40:de:40:80:
ea:95:3a:13:17:59:a2:47:52:9d:a1:dc:64:6b:02:9b:b3:c5:
7b:3d:52:83:42:8d:69:f2:3e:3b:e9:df:91:20:23:0f:21:10:
4e:da:ce:c6:48:d5:5d:e7:f2:c2:a6:95:c7:0f:56:6a:10:62:
df:b2:90:68:24:8d:56:13:44:9a:7d:1a:23:32:da:98:84:54:
4d:40:e3:cc:bb:99:70:75:37:54:9c:a0:f7:9e:91:0c:b3:ca:
48:a9:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:12 2026 by rpki-client