Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: /gEfCvqAhVr5DfIetoSVeODZR+9H38AxmDiebTCvUu0=
Subject key identifier: BF:21:29:AA:87:20:D5:B8:CD:49:C9:BE:94:C8:F7:DA:FB:4E:68:BD
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 019CE222A773961ADFCEB65BFCBA5DE2DD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 0853
Signing time: Thu 12 Mar 2026 13:00:47 +0000
Manifest this update: Thu 12 Mar 2026 13:00:47 +0000
Manifest next update: Fri 13 Mar 2026 13:00:47 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: Y2WQPLEVb5LwSX64RftxlNDer34qvMyTmy+/MBCpzos=)
2: hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa (hash: 8W8T46xmoGGEFuN0xJIwYy5B+d+w5bYaaExN07s/4nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:a7:73:96:1a:df:ce:b6:5b:fc:ba:5d:e2:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Mar 12 13:00:47 2026 GMT
Not After : Mar 13 13:00:47 2026 GMT
Subject: CN=bf2129aa8720d5b8cd49c9be94c8f7dafb4e68bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:e9:52:7e:9d:b0:e2:ff:95:ed:79:94:59:
af:09:6f:2a:c3:d7:8a:b6:1a:06:42:e6:3d:47:71:
fd:36:e0:e8:d9:58:3a:72:9a:b3:fb:6e:d0:57:3f:
b4:a5:ae:b8:46:75:51:f9:0f:55:37:ec:54:6f:3f:
62:fd:9f:d7:6b:7d:0d:23:51:73:96:2f:3d:44:c5:
b8:18:f5:c0:71:b1:88:e3:14:42:e3:c4:4d:c7:e8:
3a:56:4b:12:d7:df:a9:6f:33:7b:da:f2:03:2b:29:
9d:3e:b9:08:55:19:62:01:8b:77:5d:4b:f8:99:4a:
6f:86:a9:ec:43:eb:5e:54:cc:a1:8d:c4:18:53:56:
e9:6d:03:05:d5:3b:21:8e:ea:f8:6f:93:5e:3a:84:
71:4d:29:3e:e2:7f:64:4e:5a:ef:2a:76:59:61:d5:
8b:35:c8:f3:a8:74:80:83:b9:c6:e4:de:1e:28:79:
03:ef:26:f9:2c:2e:e3:04:0c:85:cd:21:2c:79:9e:
e0:a7:07:ba:3f:d2:33:3d:21:64:e8:08:a8:93:09:
59:30:6e:69:bd:e7:73:41:1b:46:0d:99:66:33:e5:
3d:71:c9:40:e4:4e:81:fd:ed:be:ae:e0:9f:09:f2:
57:9a:5e:9f:93:4a:7b:e5:fb:5a:6e:d8:e6:76:e9:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:21:29:AA:87:20:D5:B8:CD:49:C9:BE:94:C8:F7:DA:FB:4E:68:BD
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a6:47:81:05:47:27:59:e8:ee:35:bb:2b:0b:06:d2:0c:06:
47:fa:8a:6b:63:7d:c8:85:6e:35:3b:45:fc:d3:a1:1c:dc:d2:
72:68:92:28:99:38:64:e2:d1:9f:75:f9:a8:6c:d9:3e:e3:f1:
8d:ea:14:42:28:31:89:75:6a:8c:5a:36:c8:78:a3:5c:9f:6f:
95:5f:af:37:b2:bb:65:e2:8b:49:b5:08:7f:9d:36:76:f6:77:
3c:eb:06:5a:7c:63:8f:1f:14:63:3b:ad:90:a9:c7:d3:c0:95:
9d:3f:96:18:0f:a1:b6:86:69:6f:31:b3:f3:67:61:9e:0c:2b:
79:68:33:70:31:26:8c:73:7d:f8:f0:16:3f:15:30:93:71:a9:
3b:82:26:bc:86:15:17:e7:34:cc:ec:9e:fe:1f:9a:4a:7e:df:
3f:4b:b7:8d:f2:2a:a0:4f:ca:ac:73:9e:6b:b4:ff:8f:da:80:
44:46:33:0a:b8:2f:8e:07:48:ba:8e:9d:e8:12:60:b9:ef:7d:
ce:76:7f:28:48:5a:6d:fb:29:08:07:df:62:79:fa:5c:00:4f:
4a:fb:8d:d8:1e:6b:ae:1d:fa:13:41:dd:44:1a:8c:30:2d:13:
00:72:b7:9c:eb:4f:1a:11:22:d4:cb:f4:5e:65:18:d3:be:ba:
bc:b3:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:33 2026 by rpki-client