Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: ngz9IQAv3naSV6/Gbb0vd/y3ewBDRUj8dYe4/ucWrm4=
Subject key identifier: 30:C1:A1:64:16:D7:9C:7E:E9:DE:AA:25:4C:C6:67:F2:69:1D:8B:93
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019D2997719E5631A99D1BF6BE4E44681F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0C3F
Signing time: Thu 26 Mar 2026 10:01:23 +0000
Manifest this update: Thu 26 Mar 2026 10:01:23 +0000
Manifest next update: Fri 27 Mar 2026 10:01:23 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: A7O/E7BhSCPuEUe7jLN5Zo/rEnff5nnFcu8gCW/Sx/8=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:71:9e:56:31:a9:9d:1b:f6:be:4e:44:68:1f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Mar 26 10:01:23 2026 GMT
Not After : Mar 27 10:01:23 2026 GMT
Subject: CN=30c1a16416d79c7ee9deaa254cc667f2691d8b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:1b:be:b9:d2:9f:34:bd:33:ec:f2:d6:a6:
3b:89:e3:f8:a5:42:f6:96:5b:d9:46:b2:5e:e9:40:
a2:3a:31:d7:a5:86:33:6a:70:dc:ff:fd:49:d6:17:
40:3b:0a:ef:3c:61:d9:e1:0f:a1:73:8a:2a:b3:fa:
bf:9e:8f:94:aa:c2:f7:b9:5d:13:bb:fc:af:87:2f:
9d:e6:95:27:09:7a:af:03:9d:c4:22:d1:0c:a6:03:
5d:6f:89:3a:be:d3:8e:dc:ed:ed:6b:91:cd:64:23:
ba:4c:ac:2c:5e:71:4e:14:8f:9b:a7:57:fa:de:47:
aa:26:cc:69:fd:3c:c8:18:1f:f7:14:80:f2:7b:71:
b1:15:7d:90:f3:05:0d:c0:de:9f:4d:a6:82:db:ff:
a1:0c:10:25:46:5d:d3:33:c2:ee:13:db:ba:f9:b8:
03:38:32:60:d3:77:64:32:c2:88:9f:a3:9a:0e:ec:
27:4e:dc:6b:05:94:03:fe:fb:54:3e:b3:fb:59:60:
82:25:45:20:43:ca:c0:61:c2:66:41:64:59:9b:20:
e3:76:3a:d5:db:ea:0f:e6:27:e9:ad:a0:d8:31:0d:
e0:02:f5:80:10:82:ad:1f:15:31:a1:cb:ce:1a:3e:
a7:a5:f9:c6:82:30:98:41:2e:ae:db:03:f3:42:99:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:A1:64:16:D7:9C:7E:E9:DE:AA:25:4C:C6:67:F2:69:1D:8B:93
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:eb:1c:2f:5a:c8:f3:89:da:f8:2e:89:0a:eb:ad:f6:c0:4a:
be:bb:09:b0:25:af:12:5e:54:8e:d7:c6:36:39:55:47:91:af:
12:29:17:1d:80:48:ad:a2:91:cd:d1:f3:aa:8d:63:3c:53:39:
14:05:18:6d:22:ae:1a:51:3f:75:e8:30:b7:62:d3:3d:5d:bc:
35:ce:82:18:31:39:0a:a5:58:34:2e:67:69:e5:6e:17:26:ec:
5c:84:2f:c4:df:43:79:7c:fe:8d:8f:e1:b5:74:de:1c:32:31:
c2:3c:68:c3:5f:cf:49:fc:8a:e9:ff:8c:5e:29:e4:23:39:f5:
1f:2d:c8:0f:ec:ca:4e:de:d1:97:ca:0d:15:e3:79:fd:c2:57:
34:7a:45:07:b3:40:2f:84:29:f5:8e:4c:ef:20:bc:76:10:5e:
16:8e:92:4a:7e:84:80:d4:7d:82:10:e0:9c:55:d8:28:a5:a8:
e7:66:de:99:b5:76:74:d7:54:0e:49:91:d7:20:a9:f8:22:f3:
97:22:16:17:ba:b2:c7:b2:75:83:44:44:77:b7:3a:ce:04:b0:
7b:b3:b2:e0:0f:55:85:48:13:77:c9:b4:0c:8e:f7:d1:a0:41:
d1:6a:51:42:2d:f1:02:7c:35:8c:d7:04:a2:95:0f:ac:ac:15:
85:58:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:23 2026 by rpki-client