Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: aRD0IkbYIcpvqxs1X78AHHLzS6RQh+/9f0JxyGlYEFY=
Subject key identifier: 0A:51:EC:21:08:5D:89:93:49:84:A2:FE:F9:9B:9B:98:4E:CC:21:BA
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019D38D312365F4DA9989C99B5994B460629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 07A3
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: 5xxcAEo_4vIQvQTZ11nCDFMgZo4.roa (hash: N8rxJgsy2l36Fd1o/jwhRwE3qaDQpQB4/meaBlVTHWs=)
2: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: LKNxgaDXE1S5UVaqnBxNUJdT4OsO8/tQsYzVFH4lX3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:12:36:5f:4d:a9:98:9c:99:b5:99:4b:46:06:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=0a51ec21085d89934984a2fef99b9b984ecc21ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:ea:9c:68:be:69:50:38:c5:26:6b:71:0c:
4b:5d:85:a8:4e:c8:2f:8b:bb:66:82:7f:6d:47:dc:
56:43:1f:6f:09:b6:ab:f5:9d:3d:5a:86:ce:f7:b7:
46:f3:ba:b5:dd:e5:c6:a2:0c:a5:5e:b4:e2:3b:2f:
88:72:87:84:e3:49:4c:18:bd:00:2b:a3:c3:92:bd:
a2:02:4b:b6:6a:86:6b:7a:21:ed:07:d2:45:67:95:
97:0c:e5:4e:f7:2c:5f:45:d3:b0:06:58:0f:e0:aa:
8f:11:95:df:9e:4e:26:02:03:a0:b3:81:5b:62:ba:
38:ae:78:ac:9f:e6:5a:fd:fb:31:2b:ac:dd:59:60:
f4:57:a5:6b:ec:96:0b:1b:ef:b7:62:0c:0d:69:9d:
c2:ba:2f:0a:6e:2b:8b:9e:73:0e:ad:6f:25:42:9b:
c0:fe:ff:55:96:c3:e9:af:93:b3:8f:bb:42:e4:b9:
3f:bd:7f:3c:df:74:ba:f2:b7:10:53:8d:ac:ce:91:
02:7d:f8:54:1f:e6:de:2b:1b:79:23:88:56:5d:72:
d8:d1:92:e2:a0:c3:8e:c7:0b:60:e2:61:f3:0e:b7:
41:ae:7a:7f:f6:21:14:e0:c4:87:84:2f:73:00:3d:
24:23:ab:e1:74:ff:84:f7:31:f8:20:c6:1c:8e:b4:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:EC:21:08:5D:89:93:49:84:A2:FE:F9:9B:9B:98:4E:CC:21:BA
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:dc:a9:05:bb:99:b1:f9:70:ea:15:c5:4f:0d:8b:5a:cc:3a:
96:4e:a2:15:2e:fe:31:48:51:74:9c:64:b5:45:31:68:7b:7f:
2a:99:b4:c0:f8:c8:ab:22:2a:e5:93:1c:ee:9e:32:7b:12:9f:
22:a8:f2:96:cc:d9:33:b6:9e:39:49:26:09:45:74:4a:3d:58:
6a:ff:09:cc:9a:be:1a:d6:16:14:93:cd:8b:7b:a0:00:ef:e1:
1c:be:f2:62:e4:1d:61:02:67:f9:27:f3:59:93:cb:6c:7d:f5:
a0:7a:74:a3:7d:54:00:56:ee:a6:2d:64:27:2e:c8:64:17:11:
59:3d:cf:3b:3d:76:3b:52:72:e1:ad:8a:76:bd:bf:d2:1d:b1:
cf:b5:f1:f6:bd:1a:9e:74:a1:5e:69:6c:70:26:05:94:71:f0:
ad:f7:e0:07:d6:fb:ee:51:3b:dc:bf:fe:98:5b:41:fe:d6:f7:
1c:75:e0:96:ff:09:1b:b2:fc:ba:be:5f:0b:36:5d:6f:3b:ca:
3e:37:62:df:dd:6e:8e:8d:8a:ca:9c:50:35:1c:61:2f:15:be:
c3:2b:0b:a2:28:70:d3:bc:25:ff:07:a2:3f:c1:0a:89:0a:d9:
ff:4f:91:56:e1:67:84:8f:10:b9:2d:07:4e:92:76:ea:d1:e5:
e1:d8:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:26 2026 by rpki-client