Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.mft
File: IGLJwSwIp5WYErNNMX13grPYLwU.mft (raw, json)
Hash identifier: oKOhmmDiCGMJmztVwETQfXPN3T/Y6tB3jfmB94QFnJw=
Subject key identifier: 72:9C:F6:84:C2:29:61:0D:1B:B9:A1:A8:B1:96:BC:F5:65:05:62:BF
Authority key identifier: 20:62:C9:C1:2C:08:A7:95:98:12:B3:4D:31:7D:77:82:B3:D8:2F:05
Certificate issuer: /CN=2062c9c12c08a7959812b34d317d7782b3d82f05
Certificate serial: 019D390A2DC6A3CE6E2DEC021AB3BC47E9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGLJwSwIp5WYErNNMX13grPYLwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.mft
Manifest number: 67
Signing time: Sun 29 Mar 2026 10:01:01 +0000
Manifest this update: Sun 29 Mar 2026 10:01:01 +0000
Manifest next update: Mon 30 Mar 2026 10:01:01 +0000
Files and hashes: 1: IGLJwSwIp5WYErNNMX13grPYLwU.crl (hash: KoY+FujvUdvBAVETMQfFHR0/4k+O+pcssy/ctGynPnE=)
2: zzlsF4Xp-2g3kdOzD_AQotPWeq0.roa (hash: 6twY1FP2v5Tf8Xd5vkvELq4q/kv6AMQbmenIZQFKoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGLJwSwIp5WYErNNMX13grPYLwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2d:c6:a3:ce:6e:2d:ec:02:1a:b3:bc:47:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2062c9c12c08a7959812b34d317d7782b3d82f05
Validity
Not Before: Mar 29 10:01:01 2026 GMT
Not After : Mar 30 10:01:01 2026 GMT
Subject: CN=729cf684c229610d1bb9a1a8b196bcf5650562bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:66:b9:72:e6:ee:8e:0b:fc:47:dd:e8:0d:
29:10:78:45:e6:fe:0b:b7:e7:d6:b0:01:46:5a:40:
7a:09:ca:81:77:6c:2b:aa:9f:15:2a:77:ce:c6:08:
64:92:64:23:e0:c8:f9:6b:27:d1:0e:d7:2f:b9:29:
0a:3d:61:43:12:7d:78:15:f2:1d:d1:64:ff:4f:67:
07:57:3c:d0:84:84:ee:6b:5b:5c:43:59:21:03:bd:
7f:c4:b8:62:ee:80:f1:4c:5b:f6:63:98:72:78:63:
b3:34:c0:c9:c0:2d:9a:56:c6:ab:5d:12:ac:bb:21:
db:63:cd:63:c6:42:54:51:7f:07:f3:3f:3b:28:2b:
4d:69:77:8e:99:e4:06:e7:fd:02:5d:69:08:05:af:
25:08:65:70:d6:2c:51:a9:45:40:f1:1b:96:5c:a0:
92:06:f3:9d:1e:9a:c1:8a:69:53:a1:e6:32:5b:c9:
25:be:c9:db:37:99:db:01:ae:18:9c:c8:fc:f9:77:
5a:ae:32:59:72:0f:43:37:0f:69:96:f2:84:f6:3f:
9c:f1:a0:2a:bf:e2:5c:c2:cf:bf:e2:ca:9d:b7:8d:
68:e1:42:c6:44:be:82:57:a1:e1:bb:8b:79:20:d4:
77:eb:c6:44:1f:80:50:ca:c8:94:1d:46:7c:b5:02:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9C:F6:84:C2:29:61:0D:1B:B9:A1:A8:B1:96:BC:F5:65:05:62:BF
X509v3 Authority Key Identifier:
keyid:20:62:C9:C1:2C:08:A7:95:98:12:B3:4D:31:7D:77:82:B3:D8:2F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGLJwSwIp5WYErNNMX13grPYLwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d90eaf-3453-48cf-bd6d-874c438270d2/1/IGLJwSwIp5WYErNNMX13grPYLwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6d:d2:7e:e3:59:dc:bb:e0:df:7a:4f:98:45:83:2e:e8:5a:
92:a4:fb:27:67:ec:38:27:0d:42:be:f5:f3:8b:d5:3b:7c:47:
f1:b8:cc:0b:16:97:99:35:11:15:85:4a:d1:cc:28:d2:46:a1:
8b:97:05:ba:5f:29:dd:a1:5f:3b:ad:17:54:cc:8d:8d:a0:45:
00:72:00:f1:0b:bf:e1:29:eb:5b:35:45:fe:5a:3d:6b:bc:b0:
07:f0:60:ce:e5:37:69:4f:88:72:7b:a9:d7:c8:5a:99:d8:10:
13:46:16:cf:61:32:dd:c1:c5:9d:02:bf:ed:39:26:e8:a9:e8:
f6:e8:ce:cc:ec:64:41:68:77:65:41:41:b5:5f:3b:7e:06:49:
26:33:14:ea:45:46:d2:d9:94:7e:3f:5b:53:e5:2a:e2:7b:16:
b7:48:06:37:e9:a3:7b:a7:02:5e:82:de:11:40:96:61:55:58:
a8:2f:93:9f:41:0b:9a:59:94:7d:1a:26:80:ef:a6:66:7f:50:
86:1a:17:20:41:6d:b6:65:39:34:d6:90:a2:55:7a:81:f2:89:
9d:e4:ab:27:d7:01:99:92:fc:d8:be:a7:23:b5:27:9d:9e:ba:
34:18:27:11:43:94:f8:f4:26:a7:2b:b7:4c:94:73:d2:fe:e7:
f3:1f:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:32 2026 by rpki-client